nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Weird banking error and possible GDPR breach?

MicK10rt

Hi, any help or comment on the above would really be great. So to cut a long story short, My dad went into the bank to withdraw money/ set up a bank draft. However, due to an error (the bank have yet to explain how this happened) my dad was able to access my personal account, and withdraw a large some of money from it. Now, this is where the story gets weird, he thought he was taking it out of his account, he and I have the same name. Being elderly he had very few details on him going into the bank, the cashier trying to be helpful was able to access my personal and savings account, then set up the draft, the money was taken and off my dad went. However, my dad noticed an error on the draft (made out to wrong person) and returned to the bank later to fix the error on the draft. In short, my account was accessed again.

This happened a few weeks ago and the error was only spotted by me now, when I noticed the large some of money missing. In the meantime I happened to be speaking with my dad and he noticed the sum of money being the same as what he had withdrawn a few weeks earlier. Sure enough, he had his draft reciept and guess what, it was my IBAN written on it.

So my question is, does this constitute a breach of my personal data? The details of my account were discussed by the casheir and my dad, including amounts of money in the account, etc. The bank have been very slow to respond and have stated it was just a simple error on the bank cashiers part.

Find more posts tagged with

Quick Links

Comments

MicK10rt

https://www.boards.ie/discussion/comment/120186340#Comment_120186340

Yes, my partners different surname. Two different names, not married.

joeguevara

https://www.boards.ie/discussion/comment/120186172#Comment_120186172

I didn’t say it was weird, I said if he was talking to his father about balance of his account why birch and moan when his father knows the balance of his account. Time for you to actually understand posts.

Purple Mountain

I'm off back to my basement now. Toodle pip, folks.

cruizer101

https://www.boards.ie/discussion/comment/120187710#Comment_120187710

Because he likely said something like "I checked the balance of my account recently and it was lower than I expected and there was a withdrawal for x amount" not "I checked the balance on my account recently and instead of it being y it was z" you don't have to disclose the balance to discuss it being different to what you expected.

joeguevara

https://www.boards.ie/discussion/comment/120191111#Comment_120191111

That’s not what he said

cruizer101

https://www.boards.ie/discussion/comment/120191218#Comment_120191218

Op didn't give exactly what he said, you've made the assumption he told his dad his balance based on I'm not sure what, I'm just saying they could easily have discussed the amount of withdrawal without disclosing the balance.

OP said

In the meantime I happened to be speaking with my dad and he noticed the sum of money being the same as what he had withdrawn a few weeks earlier.

and later

My dad copped the phuck up when I spoke to him and he recognised the amounts mentioned

No mention of discussion of balance just the withdrawal amount.

ohnonotgmail

https://www.boards.ie/discussion/comment/120191218#Comment_120191218

this is what they said

In the meantime I happened to be speaking with my dad and he noticed the sum of money being the same as what he had withdrawn a few weeks earlier.

that lines up with what cruizer01 said. no mention of actual balances.

joeguevara

Ok. Fair enough. Apologies.

MicK10rt

Update: the bank did eventually admit full responsibility and to my surprise we were given a fairly large good will gesture to bring the matter to a close. If anyone was in doubt as to the serious nature of the data breach, this should give you some clarity. The bank and data com took the matter very serious, but it did take more senior management to get involved before the full truth became known. For anyone who ever finds themselves the victim of a similar breach do take it very serious and make sure that these big companies are held to account.

robbie000

https://www.boards.ie/discussion/comment/120251049#Comment_120251049

So you got what you wanted, €€€ from the bank.

Poor cashier trying to do your father a favour and dragged over the coals for it.

I'm sure they're glad you have moved bank.

HeidiHeidi

https://www.boards.ie/discussion/comment/120251120#Comment_120251120

Can't disagree with this, tbh.

Deeec

https://www.boards.ie/discussion/comment/120251049#Comment_120251049

So did you reprimand your father aswell because he is also to blame?

Charles Babbage

I don't see why banks cannot be expected to do their jobs properly, if a customer makes a mistake they are not interested and they will still impose bank charges on you etc. Apart from the names being different, a withdrawal should have required a signature and he likelihood is that the bank did not even bother to check this.

MicK10rt

https://www.boards.ie/discussion/comment/120251234#Comment_120251234

Nope 100% not to blame, bank confirmed this. Why would I reprimand him did he do something wrong?

MicK10rt

https://www.boards.ie/discussion/comment/120251120#Comment_120251120

Bank accepted full responsibility which is what we wanted.

mykrodot

https://www.boards.ie/discussion/comment/120251049#Comment_120251049

delighted for you. That is what the GDPR and Data Protection roll out is all about, that is why it was introduced in 2018. ALL companies, private and public had to be trained and are expected to adhere to good practice around GDPR. This includes financial institutions especially plus hospitals ,doctors, insurance companies and all government departments. There is a comprehensive list of rules and regulations and what happened to you and your Dad was a clear breach of GDPR. The bank knew this, a report was made to the Data Commissioner and the bank admitted responsibility.

These measures are not there so people can kick up a fuss and get a goodwill gesture, they are there to protect each and every one of us! They are for the consumer. For decades ordinary citizens had no say if the banks messed up, fingers were pointed at the customers, not the banks (I worked in banking for over 20 years). Now customers have been given more protection and have a route for complaint.

I honestly don't know why posters here are so small minded and begrudging. How would they feel if their bank statement was posted out to their neighbour? Or someone down the street with the same name was given their bank balances? We give out about everything yet when we are given legally backed routes to follow up mistakes made by banks, government department and big business , we complain about it? GDPR is there to protect all of us!

MicK10rt

https://www.boards.ie/discussion/comment/120251735#Comment_120251735

Thank you, for me it is about standing up for your rights and knowing what your rights are. I don't and never will be bullied by big institutions. What is the point in having GDPR rules if they are not to be followed.

It's obvious looking at the posters here, and how society is changing for the worse. Our rights are being eroded and those that sit back and let it happen are part of the problem.

The bank wanted a quick end to this as they knew well they had dne wrong. The size of the goodwill gesture leads me to believe they were worried.

Deeec

https://www.boards.ie/discussion/comment/120251480#Comment_120251480

Mick - Based on the information given to the teller by your FATHER the teller opened up an account supposedly with a slightly different name, different address and which includes your partners name. I agree that the blame lies with the bank but your dad is also at fault because he obviously for whatever reason on purpose gave wrong information. The tellers couldnt have opened your account without your dad giving them that slightly different address you speak of ie. he gave your slightly different address rather than his own. Why didnt he give his own address which by your own admission is slightly different to yours? In banks one the identifiers is your address - so that means your dad gave a wrong address for himself. You seem to miss this very important point.

Im glad you got compensation but it does also look like your dad may have being trying to defraud you. Your case is not as simple as the bank being wrong.

Fionne

I think you were right to pursue it. In one way, you were lucky that it was your dad who withdrew the money. Say it had been a neighbour with the same name and not your dad? (pretty common in rural Ireland, my own partner has several with the exact same name and address as him even though he's not related to any of them).

MicK10rt

https://www.boards.ie/discussion/comment/120252036#Comment_120252036

He NEVER at any point gave wrong information. What are you not understanding? He went in to access his own account. The point is that the teller DID open the account WITHOUT any info of mine being given. They have admitted this.

MicK10rt

What are people not getting, an investigation was done, CCTV etc checked, they took full responsibility and rightly so. Open and shut as far as I'm concerned. I'm sure had I brought the bank to court a similar outcome would have happened. The bank made a very large and kind gesture of goodwill. This underpins the banks worries and also admits fault. I'm sure it was in there interest that this "went away".

Deeec

https://www.boards.ie/discussion/comment/120252067#Comment_120252067

Ah come on now your is story is getting very unbelievable. How the hell did they access the account if your Dad gave them no information?

Your the one not getting it - he would have had to have given the wrong address. If no account details were given the bank ask name and address to search - he gave your address which you say is slightly different. Fair enough on the name but the address was different - as you say in your posts earlier. I can understand how this could arise if name and address were the same but in your case address was slightly different. This means the teller couldnt have accessed the account any other way but by the info provided by your father - which was obviously your address.

Im with AIB - a few years ago an extra line was added to my address with the bank unknown to me. I couldnt access my account by phone or counter because without a card as verification was by address.

I have no desire to argue it anymore with you but your a fool if you dont see the issue. Now it could be due to your fathers age and memory problems or your dad knew exactly what he was doing and wanted to take money from your account hoping it may go unnoticed.

MicK10rt

https://www.boards.ie/discussion/comment/120252150#Comment_120252150

Look fella clearly you don't get it. Mistakes happen, this was a big one. I guess your the same fool who roles over at the first hurdle. Don't be a sheep. Eat or be eaten. I'd rather eat tbh. Trust no one, only yourself. In this case I trusted my gut and went after the bank for the serious issue they caused. I have in writing an admission of guilt and I'm also 4 figures happier for the stress and upset caused. Never give up the fight! Let this be a lesson for anyone else in doubt. Chase, chase ,chase, check your rights, know your rights, fight for them.

joeguevara

https://www.boards.ie/discussion/comment/120251735#Comment_120251735

What do you think was different in GDPR in Banks that wasn’t there in Ireland in the 1988 and 2003 Acts?

Deub

https://www.boards.ie/discussion/comment/120252102#Comment_120252102

Good, you got the outcome you wanted.

Now, you can be sure that any old person going to the bank without ID won’t be served. I think that is the main issue for people on this thread. Yes, a mistake was made by the cashier but how many times did they help old folks showing up with nothing.

MicK10rt

https://www.boards.ie/discussion/comment/120252523#Comment_120252523

Too right, why should anyone go in and access accounts that are not theirs. Now remember this did not happen in this case, the error was with the cashier and or policy. At the end of the day the policy is there for a reason. I couldn't care less if you are elderly or not, I won't have my hard earned cash go missing. I work hard enough!!

Deub

https://www.boards.ie/discussion/comment/120252629#Comment_120252629

I couldn't care less if you are elderly or not,

Nice spirit. I hope you won’t complain that banks could be a bit more flexible to help your father.

Just to be clear, I agree with most posters on this thread. You made this issue way bigger than it was.

Everyone makes mistakes and if there is no loss to me and they acknowledge it, then I am letting it go.

The Continental Op

https://www.boards.ie/discussion/comment/120252523#Comment_120252523

Why should an old person without the required ID to make a transaction be served?

It doesn't matter how old a person is there is a minimum requirement for ID for any transaction and the OP's father didn't have it on him.

This doesn't seem to have been a transaction where the staff should have done anything other than apply the rules. This wasn't someone who wanted to get a small amount of money out so they could get the weeks shopping and have money for the bus fare home. From the OP's description this was a one off transaction for a LARGE sum of money and so I'd expect anyone doing that sort of business in a bank to turn up with the relevant ID and information.

MicK10rt

https://www.boards.ie/discussion/comment/120252871#Comment_120252871

That's fine but always know that by doing so your not flexing your rights. Rights that we are lucky to have, so use them. Otherwise where is the accountability. World is turning to "pc" and people are seemingly giving up more and more rights and freedoms. It was my right to chase the bank. It certainly isn't the first time I've "flexed" my rights and wont be the last.