Originally Posted by
golfmad
I would start by reporting it to the Information Commissioner's Office. Mistakes happen but BA's failure to remedy it within a reasonable timeframe is unacceptable.
Absolutely this and inform BA you are doing so, they have already admitted it is their error.