gdpr currency data
Inactive account deleted under GDPR (data retention) laws. Should the credit on it have been refunded to the account holder?
<p>I have a situation where a UK utility (mobile phone) account has been inactive for more than 7 years.</p>
<p>The account was deleted under data retention laws (GDPR) but had a positive credit balance at the time. No attempt was made to contact the account holder and refund the credit on it.</p>
<p>Are the company entitled to do this, or is the account holder entitled to a refund?</p>
<p>In the latter case, is there any point in pursuing the case in the absence of verifiable records?</p>

<p>There are two &quot;cancellations&quot; here. There is a contract between the customer and the company. This contract was ended. Also, as part of GDPR obligations, the data of the former customer was removed.</p>
<p>Now the &quot;credit&quot; part suggests a pre-paid phone, which are often described as &quot;no contract&quot;. Legally this is incorrect. There is a contractual obligation for the phone company to deliver phone services (typically expressed in minutes of call time, # of text messages and/or MB of data).</p>
<p>Now the pre-paid contract with high likelihood had a clause which dealt with inactive accounts. For instance, the minutes of call time may expire after 5 years. A &quot;credit&quot; that has not been converted to minutes, messages, or megabytes may also expire. When this happened, the company might need to keep the customer data on their records for two more years (for legal reasons), so the 7 year period does not sound weird at all.</p>
<p>As soon as the legal reason to retain the data has ended, the GDPR indeed states that the data should be removed. That act is not connected to the credit expiring years before.</p>

<h2>No</h2>
<p>Claims (for money or otherwise) are subject to limitation periods under Statute of Limitations. For most contracts, the period is 3 years.</p>
