RevK 1d ago

This may be fun.

Some may recall my battle with #NHS who refused to update my email address as only 6 characters. I sold the domain I was using and raised with ICO where literally someone else was getting notices about appointments and medications. ICO said NHS has “correct email address” (a lie). I even took to parliamentary ombudsman who said ICO did nothing wrong (another lie). #GDPR right to correct personal data is clearly ignored when it is the NHS!

I had given up. But …

Show threadRevK 1d ago

Last year NHS login says that my email on NHS login is not the same as doctor’s surgery and would I like to update it. Oooh. I said no, and told my doctor’s surgery to update to my usual short address.

Now they have done again and I have said yes.

They say they have saved my details.

This could be fun.

Show threadRevK 1d ago

I am hoping that this time is different on basis…

- they asked me to update my details
- they suggested that short email address
- they stated they have updated my details

I really cannot see that they can claim #GDPR does not apply yet again.

The last “accepted" (as evidenced by screenshot) email address is the short one. ICO cannot claim a different one is “correct”.

Show threadRevK 1d ago
[sorry if too #sarcastic, I cannot help myself sometimes]
Show threadTim Ward ⭐🇪🇺🔶 #FBPE1d ago
@revk It's slightly surprising that anyone is letting you update an email address anyway ... all too often it's used as all of (a) user name, (b) primary key, and (c) second factor authentication key.
Show threadRevK 1d ago
@TimWardCam Yes, but you have to allow email address update, by law, it is personal information. That has been my issue all along.
Show threadVikki11h ago
@revk @TimWardCam it’s surprisingly hard to get this stuff updated. Ditto your name. I have spent so much time and energy getting some companies to update my details it is unreal. So many arbitrary “rules” and “procedures” and companies utterly clueless on GDPR obligations.
Show threadTim Ward ⭐🇪🇺🔶 #FBPE
@vikki @revk Oh, and for PoA use case, some financial institutions, including high street banks, can't cope with more than one *physical* address being associated with an account - "this is my address, I'm the attorney send all correspondence here, and that is their address, that's where they live, send new cards there".
9:00amWeb