>> OK, to practical issues. The Data Protection Act prevents the disclosure
>> of information about a person to a third party (in this case, you).
>> There are no degrees to this, it's just a black-and-white rule.
>
> Utter, utter rubbish. See http://users.ox.ac.uk/~tony/dpa-foi-ripa.ppt
Which perfectly proves my point. Read it, especially the bit about consent.
(I note you are not a lawyer. IAAL)
> It's all about balance. Use of the DPA is inappropriate if it is
> hindering progress. Disclosure of information to a third party depends on
> what the information is, whether there is consent, what is in the
> subject's best interests and so on and so on.
>
>> We and Pipex only have your word that you are her husband.
>
> And we and pipex only have her word that she is she when she rings.
> Husband can probably provide all the account information and answer
> security questions just as well as she can!
Apart from sounding distinctly male! Having identified himself as the
putative account-holder's husband (and therefore not the person in
question), he automatically excludes himself from any right to the
information without the prior consent of the person concerned. In the event
that he deliberately attempted to mislead Pipex, they might, if they had no
reason to suspect that they were being conned, disclose the relevant
information, but could not be held liable if they could show that they have
made reasonable efforts to establish the identity of the person on the other
end of the telephone.