Information Commissioner's Office Opiniões 510

I received an email stating my personal information had been lost by a company I was applying to work for. 3 weeks of emailing and I was told that I’m imagining that my data was lost and misused. I took it to the information commissioners office and sent them 5 separate email chains where the company said it had lost my information. I sent them screenshots of where the company said my information was and it wasn’t there. I lost my case as the company said I made it all up as I was rejected for a job position. The company then rejected my application after this point and I received an email to notify me of this. The information commissioners office sided with the company and said that if we ignore the emails then there is no proof that the information was lost and therefore you are just unhappy you were rejected. I said wait I wasn’t rejected though until this date. They did a second review and I lost again as the company said it sent the email 2 months earlier than it was dated and the company provided a piece of paper with the writing “assessed April 17th 10.52am” no other information provided and that apparently was more valid that time stamped emails which showed the opposite.

Literally written emails are not enough evidence.

The company then illegally Shared my details and harassed me outside of work with threatening phone calls and emails and the Ico said that there is proof that the company misused my details and they will tell the company not to do it again but their is no need to punish them as they know it was wrong

Literally no point in wasting your time with them as they aren’t interested in looking at the evidence and will find anyway to side with the company

This company exists because of laws that are not meant to be broken but doesn't act or care.

CCTV cameras facing into our property and boundaries. They say it's not allowed and write a standard letter to the people harassing us with CCTV which mentions at the end that if they don't comply they won't act further. What is the point. Just a waste of a company.

The met police are refusing to send me data I requested and they do nothing. They tell them to act and when they don't they say they are within their rights.

This job must be the easiest in the world.
You tell an organisation to do right and if they don't they step away.

The 1 star reviews says it all.

I think the ICO is not fit for purpose, they simply do not care when you report an organisation for serious GDPR breaches. Seems to me like they are an organisation in place to collect fees from organisations and not have a care in the world. I am absolutely disgusted in the ICO for they way they have handled my previous complaint about an education provider sharing student details to tutors personal emails and the arrogance in their responses.

I have had two complaints filed with the ICO and disappointed with both outcomes. I wish I could give zero stars to the ICO like so many, as they are not worth a penny of the taxes they are being paid with.

This is supposed to be a regulator whose job is to hold companies accountable to GDPR and PECR standards under the eyes of the law and ensure the protection of individuals’ data rights. Yet, my experience shows they do not hold companies to account at all. If anything, they undermine and discourage your legal rights to be enforced.

Despite providing detailed evidence of multiple breaches of GDPR (in total 34 breaches) by a major bank and a DCA—including failures to issue transparency notices, erasure of data confirmation where it applied, mishandling/ignoring of Subject Access Requests (SARs), and outright refusal to provide essential information—the ICO has merely issued polite reminders to the bank and zero attempt to look at the DCA (Debt Collecting Agency). No enforcement and certainly no proper protection of my rights as a data subject.

I expected the ICO to step in and demand compliance and accountability from both companies that ignore GDPR as is their Regulatory purpose. Instead, they’ve given the company's more time and leniency than legally necessary, essentially letting the issues slide, leaving me to navigate this exhausting and stressful process on my own.

For an organisation tasked with enforcing data protection law, they’ve shown little regard for fairness or justice. If the roles were reversed and I breached GDPR as a business or Individual, I have no doubt the law would have been used to come down on me. But because these are large organisations, the ICO seems to apply a different, more lenient standard and expects the Individual to take lead from them.

I am deeply disappointed in their failure to provide any meaningful resolution or enforcement. They have failed me as an individual twice and I will not waste my time with them again. They have proven to not waste taxpayers money and do not fulfil their role as a regulator. Therefore, my experience is no different than that of the vast majority here.

I have just encountered the most awful customer service person who rang to assist with a complaint I made. I am shaking here.

This matter related to the ICO website payment function being down at some point in late January/ early February after the renewal email and letter arrived, such that they were not accepting payments for annual fees. There was a clear note on the website saying it was closed to payments at that time.

My subs were due by 23 February so having tried to pay on-line without success, I made a diary note to try again the week before the deadline. On logging on that day, low and behold, the fee had jumped to £52! A 30%+ increase.

I recognise fees are set by Government, but had the system been working when I first tried to pay, I would have been able to pay £40, not £52.

As a semi retired, older person on a lowish income, I questioned the need to pay this £12 increase first via the on-line chat, and secondly via an emailed complaint on the advice of David within the 'chat' function. I felt I was being penalised by the failure of ICO's systems.

Having emailed to explain the problem and requesting a £12 refund for the difference, I have just received a phone call from the most obnoxious man who seemed 'up for a fight' from the get-go. He was so loud and kept talking over me, he continued to raise his voice, he refused to listen to me, and he ostensibly accused me of lying about the website payment function being down when I said it had. He argued that it was only down on 15th and 16th February which is categorically untrue. How dare he question my integrity!

As my stress levels began to grow, and I could feel my heart pounding in my chest, in the end I had to tell him that I did not like his tone or that he was not listening, and he just carried on raising his voice and shouting over me. He continued to go at me, even when I saying I would be ending the call.

I cannot believe that you have people like this telephoning customers to assist with complaints and concerns. It is absolutely outrageous. What sort of an organisation are you?!

If I had a choice to go elsewhere I absolutely would. Unfortunately, I have no choice. This individual needs to go back to customer-care school for retraining. He should not be allowed anywhere near a customer until he has learnt the basics.

Excuses after excuses, no wonder councils are not really bothered if you use the ICO.
Just another quango department that's NOT FIT FOR PURPOSE.
Fortunately/unfortunately I have the option to submit an accident claim, possibly using the courts.
I copied my MP on the ridiculous excuse received on 2 separate occasions, first case officer closed the case without looking at the available evidence.
Don't waste your time

As other reviewer's have mentioned, this organisation is wilfully useless.

I was attacked by a neighbour, and then threatened by their police officer neighbour "coming round to sort me out". They then attacked me again, and a police officer did in fact come to my house and threaten me, as promised.

When I reported this to the police force concerned, without even bothering to find out who I was, or anything about the incident, the first officer I spoke to immediately informed me "Oh no, no officer would risk their job doing that!", and instantly dismissed my claim.

I was met with sexism, prejudice and derision throughout, and eventually made a formal complaint, all whilst being harassed and threatened by my neighbours. The police "professional standards department", who were neither professional, nor had any standards, sent me an almost threatening email during my complaint, which stated that they "had a copy of the body worn video by the police officer who had visited my house, and could watch it at any time."

I responded to this email, stating that they should be watching the body worn evidence, and should have watched it already, given that they were meant to be investigating this officer, and his actions when he visited me, and since they had repeatedly written to me stating that they were "thoroughly investigating my complaint", so what exactly were they doing otherwise.

I then put in a formal request for a copy of the body worn video evidence, and waited the standard 30 days for it to arrive.

Surprise surprise, after 30 days, no video was forthcoming. Months later, no video was forthcoming. When I queried this, I eventually received an email from the police force stating that no such video existed, the same police force that had emailed me months earlier stating that they "had a copy of the body worn video by the police officer who had visited my house, and could watch it at any time."

As per the law, I then made a complaint via the ICO, since the police force concerned had not sent me a copy of the video evidence as requested, and that video evidence had quite clearly existed, by their own admission, when I had requested it.

The police force concerned then proceeded to totally ignore the ICO for months and months, I think this went on for over a year at least in the end.

Eventually, the police force concerned replied to the ICO, and claimed that the police officer, and I quote "must have pressed delete instead of upload, and the video was never uploaded, so had never existed in their systems", completely contradicting their own email, which had been sent months after the video would have been uploaded.

The police force then proceeded to once again totally ignore the ICO, and basically do whatever they wanted. The ICO wrote to me and said that they could not keep pursuing the police, because the police were just ignoring them.

Really? So a police force just delete body worn video evidence of their officers going to people's homes and threatening them, and even send them emails stating that they "had a copy of the body worn video by the police officer who had visited my house, and could watch it at any time," proving that the video had in fact existed. It only ceased to exist when I requested a copy of it.

There is literally no purpose to this organisation. They clearly have no power, and any little they do they are not interested in using, and do not pursue the people they are meant to pursue. Which is exactly why the people breaking the law break it, since they know this organisation will not bother to pursue them. In my case this meant my continuing to have to live in fear for years, and having my pets immediately poisoned after I had dared to report these people to the ICO, and the ICO simply let them get away with it. I personally consider this negligence. Allowing this patently obvious abuse of position and power, instead of pursuing it, when the police had changed their story, and this was provable demonstrable fact, put me at risk, and I had to suffer the consequences. This is not okay.

Completely pointless. Horrific track record. Don’t waste your time. Get yourself legal advice instead.

Shockingly bad. Not fit for purpose.
A waste of time!! This is the overall aim of the ICO. Any decisions made by the ICO about an organisation are used to inform our own regulatory work.

My review took one year and 6 months.
The reviewing supervisor stated in a review of the case worker's work that nothing was wrong with that.
HERE IS COPY OF THE SUMMARY:
Unfortunately, we don’t guarantee to resolve matters to an individual’s satisfaction. Assessments we make are opinions rather than legally binding decisions or judgements. Definitive decisions about an individual’s rights can ultimately only be reached through the legal system which you have the right to take up independently of the ICO. A rather than being used to enforce an individual’s rights or evidence their own opinion.

They seem very busy

This company is a disgraceful waste of money that legally forces people to pay what they call a “data protection fee” even though they are not privy to or instrumental in any company data protection systems. Their fee can go as high as £2000 per year and the company receives no benefit whatsoever from these leeches.

ICO is a completely useless organisation. Without my permission, or knowledge premier inn withdrew a sum of money from my account. Eventually, I contacted ico and guess what, unsuprisingly they sided with premier inn.

ico has as much clout as a toothless newborn kitten.

Britain is a basket case with rogue government spin off departments

Cannot recall the precise date of this 'experience' yet ico emailed me in December 24 with their decision not to take any action against premier inn.

The ICO is an organisation that has legal powers to force organisations to pay an annual fee and which seems to be accountable to no-one and which adds seemingly little or no value to anyone. My company has no employees and processes virtually no personal information (I am a sole trader), and yet it has to pay their annual fee, for no benefit to anyone.

These people are completely useless. They have zero will power, desire or effect whatsoever in holding companies to account. They’re a complete waste of tax payers money. Give the consistent feedback of ONE star reviews, parliament should seriously reconsider what this organisation has been set up to achieve.

Brought to the attention ICO problems accessing personal data from a third party. I found them to be very unhelpful and obnoxious. They also told me they have no legal powers and if I can't resolve the problem by myself to take the matter. to court and can't afford. Not sure about thier purpose for exsistance as most Government quangos. So much for civil rights.

Absolute waste of time, took five months to respond and told me nothing despite Trust admitting breach, no consequences for them.....no wonder companies and Trusts do what they like with people's data!

If zero stars were an option ...

They contacted my employer, regurgitated everything my employer stated back at me -- without ever bothering to ask me or check any facts.

Complain to your MP, because this is a useless institution taking millions of taxpayer money & failing to do any useful job.

Is the information commissioners office actually independent though?

I filed a subject access request (SAR) as part of GDPR to a company - but they didn’t give me all of my data. I contacted the ICO who dismissed the case - I complained and they just dismissed the case.

What’s the point in having a government appointed ombudsman for data protection if they don’t do anything? It’s been extremely upsetting to receive emails from the ICO telling me they can’t and will not do anything for me. Dealing with the ICO has been an extremely frustrating and disappointing experience.

ICO Trustpilot one star rating is currently at 97%

Provided clear evidence that company is stealing from my bank in form of screenshots.
Have clear evidence company set up direct debits unlawfully according to GDPR consent principles.
Company refusing to give me proof according to GDPR burden of proof articles.

ICO: Well since they are denying, we can't do anything (??? what you exist for then, if you don't investigate)

ICO - You maintain that RingCentral is infringing upon data protection law because charging your account would have required it to process your personal data, and that you never gave your consent for this to be happen. However, this isn’t necessarily the case. While RingCentral must presumably have had your bank details on record on some point in order to make the charges, you wouldn’t be identifiable from them in isolation -

They used my bank details and I am not indentifable?

Pretty much told me to go bother ActionFraud (which is equally useless, as they won't do anything).
They carried they 'independent review' where next one day or two, investigator of ICO said Yep, I agree with everything ICO guy said - now go away.

Waste of time, nowadays you can get thieved from your bank account in daylight and no one will do anything.

I contacted them over a company ignoring an SAR. They investigated but because the company ignored them and didn’t respond to any communication they dropped the case. This is utterly unacceptable.
Update. My MP is now on the case and is taking action against them. He’s questioning why they take tens of millions in taxpayers funding and don’t do anything to justify it

Update - my brilliant MP (James McMurdock) is going after them both with the ombudsman and in parliament. They’re in for a very difficult time and well deserved.