Agencies breaching GDPR

[MasterBait]

I have two examples of agencies, which I requested specifically to remove my data from their database and didn't do that. I'm sure there are many more. Where can I go next?

Name and shame:
Tank Recruitment
Roc Search

PS will GDPR disappear after Brexit?

[ladymuck]

Report them to the ICO

[DaveB]

I have two examples of agencies, which I requested specifically to remove my data from their database and didn't do that. I'm sure there are many more. Where can I go next?

Name and shame:
Tank Recruitment
Roc Search

PS will GDPR disappear after Brexit?

First step is to go back to them and point out the failure. ICO will expect you to have done this in the first instance.

Bear in mind there are legitimate reasons for them not to do it e.g. you have or have had a contract with them in the past which means they have statutory obligations to retain it for certain periods.

If you don't get a satisfactory answer then report them to the ICO with evidence of your original request and evidence that they have not complied.

Your personal information concerns | ICO

They are good and will take complaints seriously and act on them.

GDPR has been adopted in UK law under the Data Protection Act 2018, so unless that is repealed it is going no-where. I've not seen any suggestions that is going to happen.

[NotAllThere]

Try this approach.

[DaveB]

Try this approach.

Overkill and a waste of time. It won't achieve anything more than a simple request for information would. The regulations are clear on what has to be provided in response to a request without all the additional verbage.

Quote from an actual lawyer in response to the post.

This letter does no-one any favours I'm afraid. It goes well beyond what Article 15 requires, seems designed to just cause panic in recipients and money for lawyers. It creates an impression with data subject that they are going to get some great insights (which they will not). I'll try and find time to put forward a more considered response. For the time being, I'd advise recipients (and I know a few!) to not worry too much and just provide a copy of the individual's data as per Art 15.3 and their standard response to the Art 15.1 and 15.2 aspects.

[Lance]

Try this approach.

Ha....

That letter was given to me by a security professional as his own work. Plagiaristic git.