Hi Cleggs,
Try this, you may need to tidy up the format a bit. I think the letter, in large part, covers the list of contraventions for TS so you could read the letter and see what questions come back.
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXXXXXXXX
Usual addresses etc,
Ref XXXXXX
Dear sir/ madam,
Regarding you letter of <date of their letter>, the contents of which are noted.
May I, firstly, draw your attention to the content of my original letter of <date of letter>.
As you will be aware, the Consumer Credit Act 1974, as amended (the Act), s 78 (1) requires, upon receipt of the appropriate request, that you provide a true copy of the executed agreement. This is further qualified by SI 1569 (1983) (Consumer Credit (Prescribed Periods for Giving Information) Regulations 1983) which prescribes a period of 12 working days for the satisfaction of such a demand and cites the above act and section as relevant in this regulation. The prescribed period expired on <date>.
I would, further, draw your attention to s78 (6) of the Act, which states:
(6) If the creditor under an agreement fails to comply with subsection (1)—
(a) he is not entitled, while the default continues, to enforce the agreement
Whilst I acknowledge your comment relating to the status of an alleged debt in the absence of an agreement I would suggest that you consider the full implications of the above excerpt from the Act.
As the creditor, and Cabot Financial, as their agent, are now in legal default under S78 (6), the Act denies the creditor leave to enforce the alleged agreement. Since the authority to share data, wherein I am the data subject, is contained within the agreement, since it cannot be elsewhere, the denial of right to enforce also denies the right to process data.
Regarding your statement to the effect that the Consumer Credit Act 1974 permits processing of personal data, be advised that this act contains no such provision. If you refute this statement then please provide the relevant citation in order that my advisors can review the validity of your claim.
With regard to the Data Protection Act
The Data Protection Act States in schedule 2:
Conditions relevant for purposes of the first principle: processing of any personal data
“1. The data subject has given his consent to the processing.”
As previously stated, the relevant permissions must be contained within the agreement document or a referred document, or there is no such permission. As you are unable to prove the existence of such a document, it follows that you cannot evidence any authority contained therein. Such authority cannot be presumed or assumed and in the absence of any agreement must be assumed not to exist unless the contrary be proven. With regard to the content of any related documents; the validity and relevance of such documents can only be determined from references held within the four corners of the agreement document; the earlier logic is applicable in this instance also.
The Data Protection Act continues:
“6. — (1) The processing is necessary for the purposes of legitimate interests pursued by the data controller or by the third party or parties to whom the data are disclosed, except where the processing is unwarranted in any particular case by reason of prejudice to the rights and freedoms or legitimate interests of the data subject.”
As previously stated, legitimate interest is contingent upon the pre-existence of the relevant agreement. Since the existence, and by inference, the existence of relevant content, cannot be proven, then legitimate interest in respect of any party cannot be so proven.
A statement in you previous letter indicates an obligation to share personal data. I would be grateful if you could provide the relevant details pertaining to this obligation and the manner in which this obligation entitles relevant statute to be set aside.
The Data Protection Act follows
“Part II Rights of data subjects and others.
10. Right to prevent processing likely to cause damage or distress.
— (1) Subject to subsection (2), an individual is entitled at any time by notice in writing to a data controller to require the data controller at the end of such period as is reasonable in the circumstances to cease, or not to begin, processing, or processing for a specified purpose or in a specified manner, any personal data in respect of which he is the data subject, on the ground that, for specified reasons—
(a) the processing of those data or their processing for that purpose or in that manner is causing or is likely to cause substantial damage or substantial distress to him or to another, and
(b) that damage or distress is or would be unwarranted.
As it is clear that the processing of data, wherein I am the data subject, for the purposes as notified is, and is intended to be, likely to cause damage and distress, and is, moreover, unwarranted.
This letter constitutes notification, pursuant to the above section of the Data Protection Act, requiring Cabot Financial and all related and associated companies and individuals to cease and desist from processing data wherein I am the data subject, until such time as irrefutable proof of relevant authority is provided, or for perpetuity.
I require:
Removal of personal data from any and all systems owned or operated by Cabot Financial and related companies, systems or individuals, or proof of the right to possess this data.
Removal of any and all default notices wheresoever registered at any time in relation to the alleged account in question.
Written confirmation of compliance with the above.
In the event that you fail to acknowledge and comply with the above, or refuse to do so; be advised that this matter will, without further notification, be referred to regulatory authorities of my choosing.
Be advised that any regulatory authorities to which this matter is referred will have attention drawn to S25 (2) of the Act and section 13 of the Data Protection Act.
I trust you will render this course of action unnecessary.
Please respond to this letter as a matter of urgency, and, in any event, within 21 days.
Yours faithfully