Hudson Bay Finance Ltd, based in the Wirral, have been issued with an enforcement notice by the UK’s Information Commissioners Office (ICO) for failing to respond to a subject access request.

The finance firm was registered as a data controller at the time under the old Data Protection Act of 1998.

Following a complaint made by a data subject, the ICO investigated the matter and concluded that Hudson Bay Finance Ltd had not act in accordance with the principles of data protection.

The ICO wrote to the finance firm a number of times after their first letter was returned and went on to make numerous attempts to contact the firm by telephone.  During one of their telephone calls, the controller refused to engage and put the telephone down!

In a final attempt to communicate with the controller, the ICO issued a preliminary enforcement notice in June 2019 , instructing them to respond or face further action.  Failure to comply with that notice would be a criminal offence.

If you need any advice or support when it comes to understanding your obligations to reply to data subject access requests, we’re here for you. See for details of our support.