Their reply to my request to delete my data:
Thank you for your email requesting your right to be forgotten.
In order for us to carry out this request, we require proof of ID to ensure we only action requests made by the genuine owner of this email account. Acceptable forms of identification are,
- Recent utility bill from the last 3 months (e.g. Gas, Electric)
- Valid drivers License
- TV License within the last 12 months
- Council Tax Letter within the last 12 months
- Title Deeds
1.) Ask for a listing of all the information they have about you.
2.) If your aforementioned Deletion request (see title) is missing from that list, they are likely breaking compliance rules.
3.) …
4.) Profit!
Thanks that’s more clear, but will they not just ask for an ID again before they’d agree to send that info?
they they need to id you everytime you exercise your gdpr rights. there is nothing they can do about this.
That’s just not true, I’ve put through a ton of requests in the past, for companies that had much more sensitive data (like payment details) and have never been asked for ID.
i doubt there is profit to be made. it’s more to keep them busy and learning about gdpr.
The “profit” bit is just an old joke. Originally from South Park.
