Credit Bureau Non Response Letter Template for England and Wales

A Credit Bureau Non Response Letter is a formal legal document you can use when a credit bureau fails to respond to your statutory request for personal data within the required timeframe under England and Wales law. This letter serves as official notice that the credit bureau has not complied with their legal obligations under data protection legislation, creating a formal record of their non-response that can be used in subsequent regulatory complaints or legal proceedings.

When do you need this document?

You need this letter when you have submitted a Subject Access Request or other formal inquiry to a credit bureau such as Experian, Equifax, or TransUnion, and they have failed to respond within the statutory 28-day period required under GDPR. This commonly occurs when requesting your credit file, disputing inaccurate information, or seeking clarification about data processing activities. The letter is particularly important if you are preparing to escalate your complaint to the Information Commissioner's Office or if you need to demonstrate the bureau's non-compliance for legal proceedings. You may also need this document when the credit bureau has acknowledged your request but failed to provide the requested information within the extended timeframe they specified.

Key legal considerations

The letter must clearly reference your original request and include specific dates to establish the timeline of non-compliance. You should cite relevant legislation including GDPR Article 12 (which requires responses within one month), the Data Protection Act 2018, and where applicable, the Consumer Credit Act 1974. Include any reference numbers provided by the credit bureau and maintain copies of all previous correspondence. The letter should specify exactly what action you require from the bureau and set a reasonable deadline for their response, typically 14 days. Consider including a statement about your intention to escalate the matter to regulatory authorities if they continue to fail to respond, as this often motivates compliance.

Legal requirements in England and Wales

Under England and Wales law, credit bureaus must respond to Subject Access Requests within one calendar month of receipt under GDPR Article 12. The Data Protection Act 2018 reinforces these obligations and provides individuals with rights to complain to the Information Commissioner's Office about non-compliance. The Financial Conduct Authority also regulates credit reference agencies under the Consumer Credit Act 1974, requiring them to handle consumer inquiries promptly and fairly. Your letter should reference the Credit Information Market Investigation Order 2021, which sets specific standards for credit reference agencies' complaint handling procedures. The FCA Handbook requires credit bureaus to acknowledge complaints within five business days and provide substantive responses within eight weeks, creating additional compliance requirements you can reference in your letter.