rf_ioliver
Member
- Joined
- 17 Apr 2011
- Messages
- 869
Having been involved with a fair bit of GDPR work thanks to my job, I am pretty damn confident that passing the complaint to another ToC (if appropriate and correct) would be covered under legitimate interest. After all if it is your interest that the complaint gets to the right place!
My thinking too...I can't imagine any circumstance where the original ToC would need to "process" data further other than to keep a legitiimiate record of the complaint, which'll probably be reduced to just statistics at the end of the day.
Arguing passing data onwards to recitify a mistake, eg: forwarding post, is not covered by the GDPR as long as the orginal receiver doesn't use that data for other purposes, eg: marketing, advertising, profiling etc.
If the OP wants to make a SAR then they'll get back very little for this particular situation. What you'd really want to see is the procedure and policy for forwarding complaints to another ToC in case of mistakes as described here.
IMHO, no GDPR issues here
Ian