SAR for broadband 2 years ago

[Anonymous]

Hi,

I went to request an SAR for the broadband we cancelled almost 2 years ago exactly and the account number isn't there, I assume because it's been so long. Would I still be able to request an SAR for the broadband or has all of that data been deleted in accordance to some regulation?

If they did have any data would that account number be there to request any data? 

Also do sky delete the data upon closing/stopping services with them. So when the broadband was cancelled would they still retain that data for however long they retain it for? I can't find anywhere how long they retain stuff for.

Mant thanks,

Ethan 

[Chrisee]

@Anonymous suspect you will need to complete an online form https://www.sky.com/help/forms/customer-information-request to find out what is still stored. When you log in using your Sky id the form populates with the account numbers linked to that email address and id. 

The law says companies should only store data for as long as they need it which will vary. For example companies can store some account information for up to 7 years which is the current year plus 6 years which is the legal limit on bringing claims. Other data may only be stored for a few months it varies.

[PandJ2020]

The PN describes what they store, why and for how long: https://www.sky.com/help/articles/sky-protect-privacy

[Anonymous]

See, I've read the privacy notice. It doesn't state anything about IP logs or any other broadband data. It only states insurance and calls (and maybe one other). 

I've also seen that they can only hold broadband data for a maximum of 12 months in accordance with the Investagtory Powers Act 2016. But still nowhere it states how long sky hold theirs for.

Also @Chrisee I mention in the first paragraph that I have tried an SAR but the account number isn't there for that service. Now I'm wondering whether this is because that data doesn't exist or if that service isn't used anymore

[Anonymous]

It doesn't mention how long ISP logs or any other ISP data is held for. It only mentions a few other services

[Chrisee]

@Anonymous I strongly doubt Sky would retain IP logs for over 2 years and I think I have read these do not count as personal data as Sky have no way of knowing who looked at what. The only use is if the authorities link an IP address to an illegal activity they can give the account holders details. 

A SAR is for personal data linked to a named individual.

[PandJ2020]

What are you actually after?

[Anonymous]

Ah right, okay thank you. So do they keep assignment logs and the corresponding account holder forever? So if I was assigned an IP address say 2 and a half years ago. Would the account holder and their details still be connected to that IP address?

Apologies regarding SAR, I thought it was for like all data available on you

[Anonymous]

I want to know how long data is retained for, I'm unsure why it isn't clearly disclosed and why sky employees also don't know, hence why I'm asking on the forum. It just seems like basic information which customers should know?

and read my comment above this one 

[PandJ2020]

---

@Anonymous wrote:

Ah right, okay thank you. So do they keep assignment logs and the corresponding account holder forever? So if I was assigned an IP address say 2 and a half years ago. Would the account holder and their details still be connected to that IP address?

---

IP addresses are dynamically assigned on lease basis - you don't normally get allocated a fixed address (these are usually a chargeable extra if the ISP supports them).  I would expect they keep records of the IP addresses assigned to each account when the leased is requested/renewed.  (The exact period may not be listed under the law enforcement section)

---

Apologies regarding SAR, I thought it was for like all data available on you

---

PII (Personally Identifiable Information) may not always be what you expect - the ICO website has lots of information of what constitutes it.

[Anonymous]

So I just assume it's held for a maximum of 12 months in accordance to IPA 2016. Would this be correct, they hold any PII for up to 12 months?

[PandJ2020]

---

@Anonymous wrote:

I want to know how long data is retained for, I'm unsure why it isn't clearly disclosed and why sky employees also don't know, hence why I'm asking on the forum. It just seems like basic information which customers should know?

and read my comment above this one 

---

The link says, "If you are our customer, we keep your contact details & account information and insurance details for business, legal and regulatory purposes for 7 years after your account is cancelled. "

[Anonymous]

Yes but that isn't ICR or ISP data. That's account data.

I think you may be misunderstanding my question, apologies if I've explained it poorly.

but IPA 2016 states that ISP data such as ICR, communications data and meta data can be retained for up to 12 months. Meaning they're deleted after 12 months if I'm correct. But sky doesn't mention anywhere how long they retain this data for

[PandJ2020]

Ask their DPO?  A contact email address is listed.

[Anonymous]

Oh thank you, I didn't know there was someone I could contact about this