Yesterday I spent a bit of time on the phone to the Information Commissioner’s Office (ICO) to find out what to do next.  The person I talked to seemed quite concerned that they have lost the letter I sent them – and believes I am right in assuming it is in itself a breach of the DPA.

They have recommended that I resend the letter (as requested) to Tesco’s HQ, and include a coverletter explaining my concerns and asking them to explain what has happened.  If I don’t receive a satisfactory response, I need to fill out a complaint form and submit it to the ICO.

The new letter has been posted today by recorded delivery.

As before, I’ve reproduced the text (with some personal details removed) below.

Tesco Data Protection Request – Follow Up