fransknorge

This is why I request the clarification. I do think storing CVV is a big no-no for security reasons.

BarneyMcGrew

Sorry, your post referred to a CCV and CIV number (whatever these are?) hence I asked if the OP was talking about a CVV.

I agree that storing the CVV is a serious security matter.

fransknorge

CIV is a customer value score. Plenty of threads about it on the BA board.

HIDDY

Unless there's something you're not telling us TTmex explanation seems a good one.

Wonder if mine says......'Parker Knoll Customer'.

Often1

CVV's may not be retained for more than 7 days in the UK. That is why unticketed reservations routinely drop off after the 8th day and why it is important to call BA back and have your card reentered if one has made a reservation and it is not ticketed after 6 days and thereafter until it is.

sku4525

This was never a CVV it was CCV I'm happy to share the screenshot but the forum won't let me post links until I have enough posts! It was 34

I'm confident BA are not storing card details. In fact there were no mentions of any card details bar the nicknames used to store them. It references the third party payments provider and details all transfers to and from them later in the document none of which contained any card details bar the last 4 digits.

corporate-wage-slave

Yes it's the same thing. The name has changed many times over the years, "customer individual value", "corporate customer value", "corporate individual value". At one stage you only had a CIV if you were working for one of BA's bigger customers, whereas now even some AAdvantage members have personal CIVs.

Which is a bit troubling. This falls directly into the category of "Sensitive Personal Data", and the grounds that you can hold this information were deliberately made extra strict. There is a Public Interest criteria which is a bit wide, plus there is the grounds for statistics etc. But I would query how this got through their GDPR preparations.

I'm also wondering how they get that 98% (49 trips to Key West and 1 to Riyadh?), which is perhaps subject to a more whimsical thread though unlikely to survive long!

fransknorge

Thanks for clarifying about the CCV.

As for :
What the frack ? This is very troubling and if unlawful would trigger another significant ICO fine.

Often1

Another possibility is that ir is a market to alert staff that there is sensitive information in existence which is not generally available. This might include information about medical conditions and the like which have been provided to BA for the express purpose of demonstrating "fit to fly" but which should not be reviewed by staff in the ordinary course. Having the flag alerts staff to the possibility that a given file may require a different channel review.

windowontheAside

I wonder how many new requests this thread has triggered.

alex67500

I agree with people above. That information would be outright illegal in France (and I believe in Germany too). The fact that it's held is quite worrying, both for the security reasons mentioned by the OP, and also for the fact that what the actual proverbial, really? If they're not planning on using it for some kind of (positive or negative) discrimination, why on Earth would they keep it???

alex67500

I must say it has made me curious

PrimaVista

I have many friends who are too...

Thomas PL

Count me as one :-)

adrianlondon

I've always wanted to know exactly how gay I am. I've just emailed the DPO at BA to ask. I just hope the op isn't trolling us else there's going to be a very confused recipient of my email