3rd party access top my DVLA details

[timwilky]

My employer wants me to sign a mandate to allow a 3rd parry to access my DVLA license details. Whilst I don't mind showing my slightly blemished license to the company. Why the hell should I let the 3rd party company my employers are using to manage some Health & Safety Driving issues access to my personal details.

Surely in this age of ID theft I am stupid to allow anyone access to any personal details. Is it not enough to advise my employer I have a valid license. And if necessary prove it to them.

Stuff that! Only give it if you ask for the 3rd Party's bank details!

[timwilky]

Originally Posted by email sent to my boss

Brian, Phil


I have today received a mandate request for completion to permit the Licence Bureau to access my DVLA records.

Firstly can I state that I understand the reasons behind this request and suggest that ****** as a responsible employer should go further to ensure all drivers are adequately trained and accessed prior to them being permitted to drive on company business. For instance, when was the last time any driver had their eyesight checked to ensure they were still able to comply with the legal requirements. Don't laugh but when I worked for Leyland in the 70s after an accident it was discovered that one of the works internal drivers was actually registered blind. In my case the last check as such was when I undertook a driving course arranged for high mileage Knutsford based staff 10 years ago.

However, in this age of increasing risk of ID theft. We are advised not to disclose personal details to 3rd parties. Can you therefore advise what requirements the company has made upon its services providers to ensure that they comply with data protection requirements. How has this been audited. What steps the 3rd party providers have taken to ensure only regulated access takes place, including audit trails and how as an employee can we check that any service provider accessing employees personal details on behalf of the company do so in a responsible manner.


Regards

Tim

I await their response

Should have just put,

dear boss,

F**k off, do i look stupid, unless you are the police then i will be shoveling snow in hell before any 3rd party non government agency has acces to my licence details.

further more i am pretty sure that it is against the data protection act for them to have them, as only certan agencs and personel are allowed acces to such details form the DVLA.

regards.

Tim.

Not exactly renowned for your deplomacy eh neio

Originally Posted by Flamin_Squirrel

Not exactly renowned for your deplomacy eh neio

nope, not really


I also think the reason the 3rd party are asking will be because they know they are not entitled to ask for them from the DVLA , nor is the employing company allowed to give them to the 3rd party. So the only way they can get hold of them is to ask the person direct. Just wrong and sly in my mind.

Also what benifit to driver training or improvement will having them provide? none IMO.

Ask them if the 3rd party have BS7799/ISO 27001 accredition. If not, tell them to go and whistle.

[Ruffy]

Just tell 'em no, point blank, but to avoid being seen as unreasonable, offer one of the following:

1. To sign a disclaimer to state that you will take full responsibility for being correctly licensed if/when you drive on company business.

2. To produce the original document for personal inspection by the required manager on agreed notice (say 48hrs?).

IIRC, the Data Protection Act also requires them to state clearly for what purpose they wish to hold the information (to avoid misuse of data held). It seems to me that you are not clear at all.

[timwilky]

To quote the letter with my company name and the 3rd parties on the letterhead.

Originally Posted by Mandate cover letter

Under current legislation and recent guidelines by the Health and Safety Executive, every employer has an obligation to ensure that they only allow holders of valid driving licence to drive on their behalf or with their permission. This includes both company and private vehicles.

The task of periodically checking those driving licences is both time consuming and labour intensive, which is why ******* have given ******* ***** the job of managing the process for them

I have been to the 3rd parties web site. They state that the comply with data protection act, that they vet their staff and that they don't store personal details on their web servers.

Very good. But who audits their compliance with data protection law, what do they actually store on what computers, in this age of networked multi tiered architecture. "Not stored on web servers" is meaningless if there is any form of connectivity to back end data bases. Again how do they audit/manage access to their systems etc. And finally how do I know who in their organisation has asked the DVLA about my licence, when, why, and what information was returned. etc.


I think my employers jumped on a marketing hype and contracted this service without adequate thought.

[tigersaw]

Due to airfield driving we have to have a 50 million pound insurance indemnity, so we had to sign a similar thing many years ago. Forgot all about it until you mentioned it, but I guess its not uncommon.