This concerns my student loans repayment account which is managed by the gov.uk website. I have paid my loan back in full and have had a confirmatory letter stating this as well, as I wanted to ensure I have written proof.

When on the phone with the student loan repayment hotline, they told me that I couldn't delete my account (there is no such option anywhere) and that they would keep the account for my lifetime, during which I have to keep my contact details up to date. I said I didn't want that, and the response was that if I want to take out a loan again, they would have all the information.

I really, really disagree with this. I understand that the British government will probably have a track record of my student loan and this is fine; but I don't want to have a life-long account that I need to keep up to date with my home address, email, and two phone numbers.

I have read GDPR guides on how to request erasure, but I don't really feel this applies- I want to have my account deleted, not the track record of the loan and repayment. Also, all the guides keep talking about companies. Do governments count as companies? Probably not, I presume.

What can I do?

  • 2
    GDPR does not apply to the governement – Trish Mar 6 at 14:54
  • 2
    @Trish GDPR definitely also applies to government entities, though there are exceptions for things like national security. The Student Loan Company provides services on behalf of the government. Whether OP's right to erasure applies would depend on whether the SLC has a legal obligation or other legal basis to continue storing OP's data. If OP thinks their requests have been improperly denied they can lodge a complaint with the ICO, which is the supervisory authority for everyone excluding courts. – amon Mar 7 at 10:36
  • 1
    @amon there's a difference between Student loan company and the governement. The latter is for example the Police, the office of citizen services etc. You can't demand to have your birth certificate or history of bad driving erased. – Trish Mar 7 at 11:05
  • 1
    @Trish but the reason you can't demand to have those things erased isn't because of who holds them. The distinction you are trying to draw between government data processors and controllers on one hand, and non-governmental data processors and controllers on the other, is not found in the GDPR. Furthermore, the "SLC is an executive non-departmental public body, sponsored by the Department for Education" and its web pages are found on the gov.uk domain. – phoog Mar 8 at 3:16
  • 2
    marts: if I were you I would take the approach of asking what consequences I would face for failing to keep my contact details up to date. Probably there are none. Then you can just forget about it. – phoog Mar 8 at 3:20

You suffer no harm from not deleting the account. Leave it be and forget about it. Your concern is ill founded. You don't have to keep your contact information current because there is nothing left to contact you about.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.