Go Back  FlyerTalk Forums > Miles&Points > Airlines and Mileage Programs > British Airways | Executive Club
Reload this Page >

BAEC requesting personal ID to respond to an email enquiry

Community
Wiki Posts
Search

BAEC requesting personal ID to respond to an email enquiry

Thread Tools
 
Search this Thread
 
Old Apr 21, 2019, 3:22 am
  #1  
Original Poster
 
Join Date: May 2008
Location: Berkshire
Programs: BA Lifetime Gold, GGL/CCR, Hilton Diamond, Accor Plat, Pucci Fan Club
Posts: 1,779
BAEC requesting personal ID to respond to an email enquiry

Each time I send an email to BAEC requesting some help, i am asked for the following information which I am not comfortable to provide so end up calling them instead which is not always convenient.

Am I being too sensitive here? I was affected twice by the recent data breach and have no confidence in BAs data governance. I’m happy to provide some info but nothing appertaining to credit card or passport.

you will need to provide the following information in your enquiry before we can answer you:

• The registered postal address on your account
• The name of a nominee on your account, the last 4-digits of a saved credit card, or your full passport number
Please also make sure you've given us your account number.
oxtailsoup is online now  
Old Apr 21, 2019, 3:48 am
  #2  
 
Join Date: Apr 2007
Location: Anywhere
Posts: 6,576
Same situation here. I’ve given up emailing. Having to take at least 2 emails to get a simple thing done is non productive.
carrotjuice is offline  
Old Apr 21, 2019, 3:51 am
  #3  
Ambassador, British Airways; FlyerTalk Posting Legend
 
Join Date: Apr 2012
Location: Leeds, UK
Programs: BA GGL/CCR, GfL, HH Diamond
Posts: 42,953
Earlier thread for additional reference on this which relates to emailing the GGL team Strange reply from Exec Club - GDPR or phishing
argonath likes this.
KARFA is online now  
Old Apr 21, 2019, 4:08 am
  #4  
 
Join Date: Jan 2016
Location: LON
Programs: BAEC
Posts: 3,916
Interestingly the information I provided to BA for a data subject access request was less than that demanded above, and wasn't queried by the Data Protection team. Go figure...
plunet is offline  
Old Apr 21, 2019, 4:15 am
  #5  
 
Join Date: Apr 2007
Location: Anywhere
Posts: 6,576
Replying to an email to ask for more information via email, when email is insecure and can be intercepted and read - is just plain stupid.
lhrpete and nancypants like this.
carrotjuice is offline  
Old Apr 21, 2019, 6:01 am
  #6  
 
Join Date: Aug 2010
Location: London Stratford, E7
Programs: BAEC Gold! Thanks to FT
Posts: 3,378
Originally Posted by carrotjuice
Replying to an email to ask for more information via email, when email is insecure and can be intercepted and read - is just plain stupid.

Got to love Flyertalk, on one hand people think there’s no problem with off duty travel staff viewing PILS yet aren’t happy about sharing information to get their query answered.

Id much rather checks done than someone who’s not me cancelling my booking or changing my seat or food option. I think BA are way to far away from secure messaging within the BAEC

The twitter team ask for the same, I’m happy to share that at 3am if they are helping me with a query when nobody else is open.

The only think I’m not overly happy with is the pre flight email with a link that you can click on that will take you directly to MMB.
KeaneJohn is offline  
Old Apr 21, 2019, 8:31 am
  #7  
 
Join Date: Mar 2018
Posts: 608
But if all this info is required when you send a general question about T&C's it's bit overkill
Last year I wanted to specify Best Price Guarantee conditions and sent an email. First reply:
"Thank you for your query, we are happy to confirm that you can find the price of your flight if you enter departure, destination and dates on ba.com opening page"
I thanked them for reply and asked the question again. Second reply
"... we are happy to confirm you can find out best prices if you click Discover and select Find our cheapest flights"
I thanked them for reply and asked the question again. Third reply
"For security reasons we need you to supply following information..."
flyslow is offline  
Old Apr 21, 2019, 9:06 am
  #8  
ECR
 
Join Date: May 2014
Posts: 411
The cynic in me suspects the reason for asking for this is just to get rid of the complaint or query because they know a lot of people will not be comfortable sending that personal information by insecure email and will just give up.
ECR is offline  
Old Apr 21, 2019, 9:25 am
  #9  
 
Join Date: Jul 2018
Posts: 38
Originally Posted by flyslow
I thanked them for reply and asked the question again. Third reply "For security reasons we need you to supply following information..."
I've had this before too. It depends on the type of question you're asking. If it's just a general question about something that doesn't require access to your account/booking for specific information relating to you, then they can answer it without needing to clear DPA. If your last question was more specific and they needed to access some of your info to answer it, then they have to come back and ask the security questions.

Seems logical to me as I wouldn't want them to access my personal details for a general question that could be answered without having to provide all of my details.
KeaneJohn likes this.
Talking Penguin is offline  
Old Apr 21, 2019, 9:30 am
  #10  
 
Join Date: Mar 2014
Programs: BAEC Gold, IHG Spire Elite
Posts: 289
Emails will be encrypted (provided your own email provider is doing the right thing), and your personal information is exactly as safe as it was before: as the details they are after are a shared secret. They have them all in a convenient database!

Not a big deal, apart from the fact it adds another unnecessary roundtrip on the email exchange.
CloudGazer likes this.
jerub is offline  
Old Apr 21, 2019, 9:40 am
  #11  
 
Join Date: Oct 2015
Location: London
Programs: BAEC Gold, Hotels.com Gold
Posts: 576
Originally Posted by carrotjuice
Replying to an email to ask for more information via email, when email is insecure and can be intercepted and read - is just plain stupid.
Can you elaborate on the insecure and can be intercepted bit?

​​​​​​
CloudGazer is offline  
Old Apr 21, 2019, 12:03 pm
  #12  
 
Join Date: Sep 2014
Location: Brexile in ADB
Programs: BA, TK, HHonours, Le Club, Best Western Rewards
Posts: 7,067
Originally Posted by jerub
Emails will be encrypted (provided your own email provider is doing the right thing), and your personal information is exactly as safe as it was before: as the details they are after are a shared secret. They have them all in a convenient database!

Not a big deal, apart from the fact it adds another unnecessary roundtrip on the email exchange.
There are a lot of Yahoo (& btinternet) mail users who would disagree with this assessment.
https://money.cnn.com/2017/10/03/tec...nts/index.html

Email like everything stored electronically is by definition insecure.
Worcester is offline  
Old Apr 21, 2019, 1:18 pm
  #13  
Ambassador, British Airways; FlyerTalk Posting Legend
 
Join Date: Apr 2012
Location: Leeds, UK
Programs: BA GGL/CCR, GfL, HH Diamond
Posts: 42,953
Originally Posted by ECR
The cynic in me suspects the reason for asking for this is just to get rid of the complaint or query because they know a lot of people will not be comfortable sending that personal information by insecure email and will just give up.
Not really. This is for the dedicated email for the GGL team not a general query or complaint email.
KARFA is online now  
Old Apr 21, 2019, 1:51 pm
  #14  
 
Join Date: Mar 2014
Programs: BAEC Gold, IHG Spire Elite
Posts: 289
Originally Posted by CloudGazer
Can you elaborate on the insecure and can be intercepted bit?

​​​​​​
It was historically true that anyone who could insert equipment at any of the connections between you and your mail provider or between your mail provider and where they were sending email to, could read everything you wrote.

These days we use encryption at every layer by default, and it's very rare to transmit email without it.

I can go on about this at length, but it's very boring.

One thing that is extremely easy to do and remains easy to do is fake where an email is from. Anyone can pretend to send an email from me, and so it's very important to verify my identity every time before doing what I ask.
jerub is offline  
Old Apr 21, 2019, 3:29 pm
  #15  
Suspended
 
Join Date: Aug 2010
Location: DCA
Programs: UA US CO AA DL FL
Posts: 50,262
While there is always a risk that emails can be hacked, the same can be said for phone calls, and even in-person visits to a counter could be subject to an impostor.

But, unless you are deliberately using a non-secure email system, pretty rare these days, I don't see the security issue. That is particularly so as to the physical address associated with the account or the last four digits of the credit card.
Often1 is offline  


Contact Us - Manage Preferences - Archive - Advertising - Cookie Policy - Privacy Statement - Terms of Service -

This site is owned, operated, and maintained by MH Sub I, LLC dba Internet Brands. Copyright © 2024 MH Sub I, LLC dba Internet Brands. All rights reserved. Designated trademarks are the property of their respective owners.