Who has access and how long can it be retained?
Who holds them to account? Would that be a role for PCG?
Agency "I wonder if you could forward on proof of your current address in xxxx to us for our records? This can be any bill (other than a mobile phone bill), a bank statement etc dated within the last 3 months."
Me "I'll get Cxxxxxx to sign off a copy. I'd be uncomfortable with an original sitting on a file somewhere. "
Agency "We’ll be more than happy with a scanned version that we can save securely in an electronic format."
Drowning in red tape