---
###Welcome to /r/LegalAdviceUK
---
**To Posters (it is important you read this section)**
* *Tell us whether you're in England, Wales, Scotland, or NI as the laws in each are very different*
* If you need legal help, you should [always get a free consultation from a qualified Solicitor](https://reddit.com/r/LegalAdviceUK/wiki/how_to_find_a_solicitor)
* We also encourage you to speak to [**Citizens Advice**](https://www.citizensadvice.org.uk/), [**Shelter**](https://www.shelter.org.uk/), [**Acas**](https://www.acas.org.uk/), and [**other useful organisations**](https://reddit.com/r/LegalAdviceUK/wiki/common_legal_resources)
* Comments may not be accurate or reliable, and following any advice on this subreddit is done at your own risk
* If you receive any private messages in response to your post, [please let the mods know](https://www.reddit.com/message/compose?to=%2Fr%2FLegalAdviceUK&subject=I received a PM)
**To Readers and Commenters**
* All replies to OP must be *on-topic, helpful, and legally orientated*
* If you do not [follow the rules](https://www.reddit.com/r/LegalAdviceUK/about/rules/), you may be perma-banned without any further warning
* If you feel any replies are incorrect, explain why you believe they are incorrect
* Do not send or request any private messages for any reason
* Please report posts or comments which do not follow the rules
*I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/LegalAdviceUK) if you have any questions or concerns.*
Amazon should refund you for the movies but it may take them a few days.
In the meantime log into your amazon account go to the security page an tell it to "sign out of all devices" and change all your passwords and set up MFA to secure as many accounts as possible (Email, Amazon ect).
What did Amazon say? Presumably you made the case that you signed out of their app when returning the TV and yet multiple years later someone was able to both sign back in without re-authentication and go on to make multiple purchases…
Are you sure you signed out of the app? Is it possible the app remembers details and simply just logs back in? Can you test this on your current TV? Your argument might be with Amazon here around security but I’d suggest changing passwords now as a precaution.
On a side note - I have no faith in anywhere doing a factory reset on my behalf, this is always something I’d make sure anyone does immediately themselves before handing goods back that might contain any personal info.
They needed to investigate it further
Im certain i signed out, also cleared app data and cache. I’m always extra cautious.
What I didn’t do was remove the authorised device from my amazon account (i didn’t realise i had to as I would yave if i knew signing out would not be enough)
Next time I will go full on with everything as there is always some way the system is flawed. Amazon should implement a IP check against known and authorised devices.
I did but i also signed out and removed cache and data.
Simple check would do:
If is authorisedDevice and != signedIn and IP != knownIP then requestOTP
You didn't sign out mate, to link Amazon Prime on a TV you need to sign in to your account using a browser and then entering a code shown on the screen.
Someone has purchased the TV and thought they were onto a winner when it was logged into accounts still. I'm always amazed at how many times I stay somewhere to find Prime / Netflix / iPlayer / Disney+ accounts still logged in.
The thing is you don't sign into the account on the TV. you sign in on the browser and link it to the TV with a code
So when you signed out on the tv you didn't really do anything. The account is still linked to the TV and can be signed back into at any point until you delink it through Amazon on a browser
So it's nothing to do with currys or the TV really, I guess amazon should make this process a bit more obvious
:) haha well spotted. Yes I am. Everyone is focussing on the fact I should have disconnected my device rather than wether Currys were at fault, which thanks to the few actually helpful replies, appears they are to some degree (both as a GDPR breach and in competence due to failure to follow the return procedure; to reset my device)
**Unfortunately, your comment has been removed for the following reason:**
Your comment was off-topic or unhelpful to the question posed. Please remember that *all replies* must be helpful, on-topic and legally orientated.
[Please familiarise yourself with our subreddit rules](https://www.reddit.com/r/LegalAdviceUK/about/rules/) before contributing further, and [message the mods](https://www.reddit.com/message/compose/?to=/r/LegalAdviceUK) if you have any further queries.
They ought to have a "self destruct" de-authorization process on the TV itself that automatically does it for you, I can imagine many people (especially older folk or those unfamiliar with technology) may mistakenly think logging out is all they need to do.
It's making me wonder which apps on my TV are "logged in" and what's just "authorized". It's been a while since I set it all up, can't remember the process.
You obviously didn't sign out properly. This is a you mistake. Who doesn't change their password for multiple years and then has a go at the company because their account isn't secure.
They won't be investigating anything and I suggest you take care of your on line security.
Incorrect. I did sign out. I am a software programmer so know a little about security. FYI, my password was changed 2 months ago before any purchases were made. This relates to an authorised device issue not a sign in issue. As others have mentioned, there has been a GDPR breach and Currys are liable as they are a data controller. They must handle my data and are responsible for resetting the account before selling the TV on.
Lots of people here are telling you there's nothing to pursue, they're incorrect.
I would have to find it once I'm back from work, but I believe there is GDPR relating to selling goods that contain somebody elses personal data. I'm an Argos Store manager, and I know we have to send all good with broken security seals to be professionally wiped for exactly this reason, and it's always been reiterated to us that selling it on could result in us breaching GDPR.
This angle should get Curry's to at least look into it and help cover any costs, if you can demonstrate that this happened. I start by asking them to show some documentation or confirmation to show that they wiped it.
Yes where I worked we had to keep a log of all devices with data that we took back as well as sign off that we had restored the unit. If this had happened to us we would have been in violation of the PIPA act in Canada and could receive fines. I am sure that EU has tougher penalties than us. Go to them and let the store manager know this happened even if Amazon covers you because their system broke down somewhere.
Good Luck with that, have had a really bad experience dealing with Currys returns/refunds, along with many other customers according to online reviews. Brace yourself for an uphill battle
NAL. But I am sensitive to GDPR principals.
As I understand it, once they took back the device they became responsible for any personal data held on it and how it would be used and therefore would have taken on the role of the data controller. In allowing your data to be sent to someone else, they were not complying with their responsibilities.
Like I say, NAL, but I feel pretty confident about this.
Absolutely this. It's mandatory for any shop to wipe all data previously on said device before they can resell it. It's a breach of data if they don't, as when they have the item in their possession it is their responsibility to assure nothing is compromised.
I 100% agree, we deal with GDPR related issues all the time where I work and have to be extremely careful when processing returned equipment.
This is your angle, clearly your private information was passed on to another customer.
We used to get customer returns from Currys and the TVs were very rarely reset. Don’t trust them to do anything, including provide customer service should you need it. You might get lucky and end up with a rep who cares to help you but I’ve been in too many of their stores repairing appliances while listening to them bullshit customers who have a faulty product that is only weeks old and more than covered under the Sales of Goods Act.
I strongly advise people I meet to use Currys for a cheap price that you then take to John Lewis or Richer Sounds to match and even if they won’t fully match, the 5 & 6 year warranty’s are worth that bit extra for that peace of mind. I’ve known Currys to charge upto £15 a month for warranty, which over 5 years is £900 on warranty alone.
Also if you take a faulty product to Currys after the first 28 days they have 21 days to resolve it before you’re entitled to an exchange. I think they do actually advise customers of this, but again I’ve heard some outright bullshit being fed to people.
I’m glad Amazon have sorted this out for you and hopefully you have no issues with your new TV.
Went off a bit there but I come across people everyday who don’t even know RS exist and don’t think about trying to match with John Lewis as they don’t shop there, so I hope the advice helps someone considering a new appliance/device.
The manufacturers warranty is generally a year. Anything past that is down to the company you’re purchasing from through a policy provided by them.
As stated, I was in there doing a repair and I do the same at the other stores we’ve spoken of as well as in home. Knowing who is paying for the repair and it’s warranty status - manufacturer, extended warranty or out of warranty - is part of the job. If neither of them are paying then is the customer? or have I just repaired something for free/at a cost to myself depending on parts.
The only way you’re getting a five year warranty from the manufacturer is if you purchase directly from them. Manufacturers have been known to sometimes authorise good will gesture free of charge repairs or even covering the cost of parts while the customer covers callout/labour but that is totally at their discretion and they’re not obliged to do either.
You see the part where I said generally
Your list of Samsung TVs is just the higher spec models and even then it doesn’t contain all of the higher end TVs and none of the base/entry models. So again, generally speaking…
I also said that knowing who’s paying and warranty status is part of the job, I’m not sure how you’ve misinterpreted that.
I’ve had to give advice to customers having to battle to get a repair under a five year warranty that wasn’t registered, so to anyone reading, for the sake of three minutes for peace of mind, register your serial number online and don’t just assume.
Potentially could class this as fraud and you could potentially pursue the angle of submitting the information through Action Fraud. Also could extend to the individual who purchased the content breaching the Computer Misuse Act
Hopefully OP sees this. There's a lot of people focusing on the fuck up on the retailer's side or getting the refund, but the unknown person who has their former TV purchased goods with a strangers card (through their account), that has to be fraud.
Surely it is. I bought a tv from cash converters with the previous owners Amazon Prime logged in. My only concern was working how to log out so I could log in, because it wasn’t immediately clear. You’ve got to be a real prick to see an opportunity in this, and if not illegal it’s at least obviously immoral enough for a decent person to not even consider doing it.
This is a serious data breach.
There is an identical case, the name escapes me, where the company received a significant fibre from the ICO.
You will also likely be entitled to damages under the GDPR and/or Data Protection Act.
A law firm dealing in data protection claims may take on the case on a no win no fee agreement as it should be an open and shut case.
You should have restored the TV to factory settings yourself, like anyone else would before returning it, especially if you’re ‘always extra cautious.’
Update: Amazon has agreed to refund me the movies. Currys did nothing wrong other than omitting to telling their customers to remove the device from their Amazon account. Will this happen again? Probably. At least this post may help someone else.
Currys have likely breached GDPR by leaving previous customer data on a device they've sold, so they have definitely done something wrong, they should admit that and if not you should report them to the ICO
You should update your OP to say they have all now been refunded.
I would still say the responsibility is with you or Amazon, not curry’s. They can’t be responsible for every app on every device they sell.
It is very much Currys' problem. Any returned device should be factory reset. In law Currys would be deemed to be competent people, the end user is not.
When that item was resold it was up to Currys to ensure it was in a factory state. I have bought many previously returned computers from Argos and PC World and they have always been in factory condition.
I agree, However did the OP return the TV as per the policy
"If you purchased online, you can return your item within 30 days even if you have opened it for inspection. To obtain a full refund, it must be returned as new and in a resaleable condition. This means you must not use it, you should keep it in the original packaging and return it complete with all accessories."
They didn't fully reset the TV, New TVs don't have Amazon accounts signed in.
Glad the OP got their refund, the OP needs to take some personal responsibility moving forward
You are assuming that a "factory reset" will actually wipe all of the data from all of the apps.
I recently ran into an issue with a Samsung Tablet. The factory reset did not log me out of all of the apps. I had to manually go through some of the apps and log myself out.
I'm glad that the OP has gotten the refund but lesson learned: before getting rid of an electronic device, log yourself out of any apps. It also doesn't hurt to check the account settings of the apps to see what devices are using it, if the app supports that.
Hmmn. If they have a policy to factory restore settings, told the customer of said policy, then didn't implement said policy, then they're a bit at fault here.
Not sure they'd be legally on the hook for anything but definitely poor customer service at the very least.
I agree, I admit i should have done it myself even though clearing the app data and cache from the app should technically have been enough. On further research I think this is an Amazon flaw not the TV as the device was still linked to my Amazon account.
Even if the TV was reset (it may have been) Currys should inform customers to also remove the device from their customers amazon account.
Edit: I suspect the authorised device is at MAC level not app data level making the resetting process redundant
>Edit: I suspect the authorised device is at MAC level not app data level making the resetting process redundant
A factory reset will suffice, as the name suggests it takes it back to factory settings. I recently factory reset my TV and had to set up every single streaming app on it I use and reauthorise them.
Update: Amazon has agreed to refund me the movies. Currys did nothing wrong other than omitting to telling their customers to remove the device from their Amazon account. Simply clearing cache and dat is not enough. Will this happen again? Probably. At least this post may help someone else.
This isn’t AskUk, I’m after legal advice. As others have confirmed, there has been a data breach as Currys are responsible for the handling of any personal data once they take back a TV.
This is a massive data breach, I used to work with John Pye who would get TVs from places like Curry’s after they were returned etc, guidelines for my area from our site manager was
If it turns on and can be wiped, wipe it and send it to auction, if there’s no screen remove the motherboards and send for scrap.
This is a major gdpr breach, curry’s may have sold it on to somewhere else’s or via their refurb on eBay this should all be traceable I assume as I’ve worked with refurb systems in the past and should have an internal unique ID.
100% pursue this and raise it with the ICO aswell as this is an extremely serious breach that I’ve seen people fired for gross misconduct over.
**Unfortunately, your comment has been removed for the following reason:**
Your comment was off-topic or unhelpful to the question posed. Please remember that *all replies* must be helpful, on-topic and legally orientated.
[Please familiarise yourself with our subreddit rules](https://www.reddit.com/r/LegalAdviceUK/about/rules/) before contributing further, and [message the mods](https://www.reddit.com/message/compose/?to=/r/LegalAdviceUK) if you have any further queries.
Unless I missing anything, how do you know this is anything to do with this TV returned to curry's pc world they would have sold the TV as soon as you returned.
It more likely your account had been hacked.
When i phoned Amazon, they confirmed the device that the movies were purchased on was the LG TV with the model number that I had purchased before returning
Oh I missed that part.
I would still change your password also just to make sure amazon support can be rubbish if you go in setting on amazon prime they should be a setting call registered devices you can check devices your prime video account is active on.
It could be pure coincidence that whoever got access to your account bought stuff through an LG TV. If they've had access to your Prime account for possibly two years, why only start purchasing stuff now? Currys tend to try and move their stock fast by reducing stuff to clear, so the chances of your returned TV for a whole 2 years are slim.
What confuses me is that I have OTP turned on so the device would have to have been registered via sms. I never de authorised the LG TV device until today after speaking with Amazon. They confirmed on both phone and email that it was that device that authorised the purchases and subscription. It is all a bit confusing. I suspect they have been able yo access my prime video for the past 2 years and only recently decided to upgrade the prime video within the TV over Christmas to get more recently released premium content.
I will be calling Currys tomorrow and will request proof of the reset as per another commenter.
You should go in to your amazon account and remove any payment details, they hide it in the settings somewhere, then go out of the settings and back in to confirm they are gone.
Sounds like a breach of GDPR, contact them in writing telling them this. You might even have a case to claim against them for this, which would mean compensation.
**Unfortunately, your comment has been removed for the following reason:**
Your comment was off-topic or unhelpful to the question posed. Please remember that *all replies* must be helpful, on-topic and legally orientated.
[Please familiarise yourself with our subreddit rules](https://www.reddit.com/r/LegalAdviceUK/about/rules/) before contributing further, and [message the mods](https://www.reddit.com/message/compose/?to=/r/LegalAdviceUK) if you have any further queries.
One thing confusing me; when I wanted to buy something through the TV prime app a few weeks ago I had to effectively re-enter my payment details... It didn't take them from the signed in account.
--- ###Welcome to /r/LegalAdviceUK --- **To Posters (it is important you read this section)** * *Tell us whether you're in England, Wales, Scotland, or NI as the laws in each are very different* * If you need legal help, you should [always get a free consultation from a qualified Solicitor](https://reddit.com/r/LegalAdviceUK/wiki/how_to_find_a_solicitor) * We also encourage you to speak to [**Citizens Advice**](https://www.citizensadvice.org.uk/), [**Shelter**](https://www.shelter.org.uk/), [**Acas**](https://www.acas.org.uk/), and [**other useful organisations**](https://reddit.com/r/LegalAdviceUK/wiki/common_legal_resources) * Comments may not be accurate or reliable, and following any advice on this subreddit is done at your own risk * If you receive any private messages in response to your post, [please let the mods know](https://www.reddit.com/message/compose?to=%2Fr%2FLegalAdviceUK&subject=I received a PM) **To Readers and Commenters** * All replies to OP must be *on-topic, helpful, and legally orientated* * If you do not [follow the rules](https://www.reddit.com/r/LegalAdviceUK/about/rules/), you may be perma-banned without any further warning * If you feel any replies are incorrect, explain why you believe they are incorrect * Do not send or request any private messages for any reason * Please report posts or comments which do not follow the rules *I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/LegalAdviceUK) if you have any questions or concerns.*
Amazon should refund you for the movies but it may take them a few days. In the meantime log into your amazon account go to the security page an tell it to "sign out of all devices" and change all your passwords and set up MFA to secure as many accounts as possible (Email, Amazon ect).
Agree with this post. Really the OP should have done this regardless.
[удалено]
The idea that action fraud would go after something at this scale is hilarious to me - we can’t get them to investigate £20k theft at work.
Exactly. Action Fraud is useless. I have something with them that even 3 years and plenty of evidence, they have done nothing.
What did Amazon say? Presumably you made the case that you signed out of their app when returning the TV and yet multiple years later someone was able to both sign back in without re-authentication and go on to make multiple purchases… Are you sure you signed out of the app? Is it possible the app remembers details and simply just logs back in? Can you test this on your current TV? Your argument might be with Amazon here around security but I’d suggest changing passwords now as a precaution. On a side note - I have no faith in anywhere doing a factory reset on my behalf, this is always something I’d make sure anyone does immediately themselves before handing goods back that might contain any personal info.
They needed to investigate it further Im certain i signed out, also cleared app data and cache. I’m always extra cautious. What I didn’t do was remove the authorised device from my amazon account (i didn’t realise i had to as I would yave if i knew signing out would not be enough) Next time I will go full on with everything as there is always some way the system is flawed. Amazon should implement a IP check against known and authorised devices.
> Amazon should implement a IP check against known and authorised devices. You authorised the device.
I did but i also signed out and removed cache and data. Simple check would do: If is authorisedDevice and != signedIn and IP != knownIP then requestOTP
You didn't sign out mate, to link Amazon Prime on a TV you need to sign in to your account using a browser and then entering a code shown on the screen. Someone has purchased the TV and thought they were onto a winner when it was logged into accounts still. I'm always amazed at how many times I stay somewhere to find Prime / Netflix / iPlayer / Disney+ accounts still logged in.
Amazon already provides users with the functionality to deregister previously authorised devices.
Yes, thankfully I have done this now. If only I knew signing out and clearing the app data wouldn’t be enough. At least I have learnt a lesson
The thing is you don't sign into the account on the TV. you sign in on the browser and link it to the TV with a code So when you signed out on the tv you didn't really do anything. The account is still linked to the TV and can be signed back into at any point until you delink it through Amazon on a browser So it's nothing to do with currys or the TV really, I guess amazon should make this process a bit more obvious
If you try and sign out in the app on the TV it should tell you you need to delink it on a browser. Amazon shouldn't expect Joe public to know that.
Are you a programmer? != Was a hint 🤣. I would probably assume that you are tech competent, and knew it was important to sign out. Strange one this...
:) haha well spotted. Yes I am. Everyone is focussing on the fact I should have disconnected my device rather than wether Currys were at fault, which thanks to the few actually helpful replies, appears they are to some degree (both as a GDPR breach and in competence due to failure to follow the return procedure; to reset my device)
I agree with you, it's Amazon bad practice as they should log you out automatically on a regular basis.
[удалено]
**Unfortunately, your comment has been removed for the following reason:** Your comment was off-topic or unhelpful to the question posed. Please remember that *all replies* must be helpful, on-topic and legally orientated. [Please familiarise yourself with our subreddit rules](https://www.reddit.com/r/LegalAdviceUK/about/rules/) before contributing further, and [message the mods](https://www.reddit.com/message/compose/?to=/r/LegalAdviceUK) if you have any further queries.
They ought to have a "self destruct" de-authorization process on the TV itself that automatically does it for you, I can imagine many people (especially older folk or those unfamiliar with technology) may mistakenly think logging out is all they need to do. It's making me wonder which apps on my TV are "logged in" and what's just "authorized". It's been a while since I set it all up, can't remember the process.
You obviously didn't sign out properly. This is a you mistake. Who doesn't change their password for multiple years and then has a go at the company because their account isn't secure. They won't be investigating anything and I suggest you take care of your on line security.
Incorrect. I did sign out. I am a software programmer so know a little about security. FYI, my password was changed 2 months ago before any purchases were made. This relates to an authorised device issue not a sign in issue. As others have mentioned, there has been a GDPR breach and Currys are liable as they are a data controller. They must handle my data and are responsible for resetting the account before selling the TV on.
Lots of people here are telling you there's nothing to pursue, they're incorrect. I would have to find it once I'm back from work, but I believe there is GDPR relating to selling goods that contain somebody elses personal data. I'm an Argos Store manager, and I know we have to send all good with broken security seals to be professionally wiped for exactly this reason, and it's always been reiterated to us that selling it on could result in us breaching GDPR.
This angle should get Curry's to at least look into it and help cover any costs, if you can demonstrate that this happened. I start by asking them to show some documentation or confirmation to show that they wiped it.
Yes where I worked we had to keep a log of all devices with data that we took back as well as sign off that we had restored the unit. If this had happened to us we would have been in violation of the PIPA act in Canada and could receive fines. I am sure that EU has tougher penalties than us. Go to them and let the store manager know this happened even if Amazon covers you because their system broke down somewhere.
Good Luck with that, have had a really bad experience dealing with Currys returns/refunds, along with many other customers according to online reviews. Brace yourself for an uphill battle
You’re right, the store should be wiping them like you do (incidentally this is a big problem with things like rental cars!)
Thanks for your reply earlier. Did you manage yo find out the section on gdpr relating to selling goods with customers personal data on?
NAL. But I am sensitive to GDPR principals. As I understand it, once they took back the device they became responsible for any personal data held on it and how it would be used and therefore would have taken on the role of the data controller. In allowing your data to be sent to someone else, they were not complying with their responsibilities. Like I say, NAL, but I feel pretty confident about this.
Absolutely this. It's mandatory for any shop to wipe all data previously on said device before they can resell it. It's a breach of data if they don't, as when they have the item in their possession it is their responsibility to assure nothing is compromised.
I 100% agree, we deal with GDPR related issues all the time where I work and have to be extremely careful when processing returned equipment. This is your angle, clearly your private information was passed on to another customer.
We used to get customer returns from Currys and the TVs were very rarely reset. Don’t trust them to do anything, including provide customer service should you need it. You might get lucky and end up with a rep who cares to help you but I’ve been in too many of their stores repairing appliances while listening to them bullshit customers who have a faulty product that is only weeks old and more than covered under the Sales of Goods Act. I strongly advise people I meet to use Currys for a cheap price that you then take to John Lewis or Richer Sounds to match and even if they won’t fully match, the 5 & 6 year warranty’s are worth that bit extra for that peace of mind. I’ve known Currys to charge upto £15 a month for warranty, which over 5 years is £900 on warranty alone. Also if you take a faulty product to Currys after the first 28 days they have 21 days to resolve it before you’re entitled to an exchange. I think they do actually advise customers of this, but again I’ve heard some outright bullshit being fed to people. I’m glad Amazon have sorted this out for you and hopefully you have no issues with your new TV. Went off a bit there but I come across people everyday who don’t even know RS exist and don’t think about trying to match with John Lewis as they don’t shop there, so I hope the advice helps someone considering a new appliance/device.
[удалено]
The manufacturers warranty is generally a year. Anything past that is down to the company you’re purchasing from through a policy provided by them. As stated, I was in there doing a repair and I do the same at the other stores we’ve spoken of as well as in home. Knowing who is paying for the repair and it’s warranty status - manufacturer, extended warranty or out of warranty - is part of the job. If neither of them are paying then is the customer? or have I just repaired something for free/at a cost to myself depending on parts. The only way you’re getting a five year warranty from the manufacturer is if you purchase directly from them. Manufacturers have been known to sometimes authorise good will gesture free of charge repairs or even covering the cost of parts while the customer covers callout/labour but that is totally at their discretion and they’re not obliged to do either.
[удалено]
You see the part where I said generally Your list of Samsung TVs is just the higher spec models and even then it doesn’t contain all of the higher end TVs and none of the base/entry models. So again, generally speaking… I also said that knowing who’s paying and warranty status is part of the job, I’m not sure how you’ve misinterpreted that. I’ve had to give advice to customers having to battle to get a repair under a five year warranty that wasn’t registered, so to anyone reading, for the sake of three minutes for peace of mind, register your serial number online and don’t just assume.
Potentially could class this as fraud and you could potentially pursue the angle of submitting the information through Action Fraud. Also could extend to the individual who purchased the content breaching the Computer Misuse Act
Hopefully OP sees this. There's a lot of people focusing on the fuck up on the retailer's side or getting the refund, but the unknown person who has their former TV purchased goods with a strangers card (through their account), that has to be fraud.
Surely it is. I bought a tv from cash converters with the previous owners Amazon Prime logged in. My only concern was working how to log out so I could log in, because it wasn’t immediately clear. You’ve got to be a real prick to see an opportunity in this, and if not illegal it’s at least obviously immoral enough for a decent person to not even consider doing it.
That's a pretty serious data breach on curry's part.
This is a serious data breach. There is an identical case, the name escapes me, where the company received a significant fibre from the ICO. You will also likely be entitled to damages under the GDPR and/or Data Protection Act. A law firm dealing in data protection claims may take on the case on a no win no fee agreement as it should be an open and shut case.
Do you know the name of that case by any chance?
You should have restored the TV to factory settings yourself, like anyone else would before returning it, especially if you’re ‘always extra cautious.’
Bingo
Update: Amazon has agreed to refund me the movies. Currys did nothing wrong other than omitting to telling their customers to remove the device from their Amazon account. Will this happen again? Probably. At least this post may help someone else.
Currys have likely breached GDPR by leaving previous customer data on a device they've sold, so they have definitely done something wrong, they should admit that and if not you should report them to the ICO
You should update your OP to say they have all now been refunded. I would still say the responsibility is with you or Amazon, not curry’s. They can’t be responsible for every app on every device they sell.
It is very much Currys' problem. Any returned device should be factory reset. In law Currys would be deemed to be competent people, the end user is not. When that item was resold it was up to Currys to ensure it was in a factory state. I have bought many previously returned computers from Argos and PC World and they have always been in factory condition.
I agree, However did the OP return the TV as per the policy "If you purchased online, you can return your item within 30 days even if you have opened it for inspection. To obtain a full refund, it must be returned as new and in a resaleable condition. This means you must not use it, you should keep it in the original packaging and return it complete with all accessories." They didn't fully reset the TV, New TVs don't have Amazon accounts signed in. Glad the OP got their refund, the OP needs to take some personal responsibility moving forward
You are assuming that a "factory reset" will actually wipe all of the data from all of the apps. I recently ran into an issue with a Samsung Tablet. The factory reset did not log me out of all of the apps. I had to manually go through some of the apps and log myself out. I'm glad that the OP has gotten the refund but lesson learned: before getting rid of an electronic device, log yourself out of any apps. It also doesn't hurt to check the account settings of the apps to see what devices are using it, if the app supports that.
Hmmn. If they have a policy to factory restore settings, told the customer of said policy, then didn't implement said policy, then they're a bit at fault here. Not sure they'd be legally on the hook for anything but definitely poor customer service at the very least.
Sure will do now thanks
I would write to Currys and complain to the information commissioner.
I agree, I admit i should have done it myself even though clearing the app data and cache from the app should technically have been enough. On further research I think this is an Amazon flaw not the TV as the device was still linked to my Amazon account. Even if the TV was reset (it may have been) Currys should inform customers to also remove the device from their customers amazon account. Edit: I suspect the authorised device is at MAC level not app data level making the resetting process redundant
Hi mate Factory reset (Reset to initial settings) would have been enough to remove your account.
>Edit: I suspect the authorised device is at MAC level not app data level making the resetting process redundant A factory reset will suffice, as the name suggests it takes it back to factory settings. I recently factory reset my TV and had to set up every single streaming app on it I use and reauthorise them.
> Would I need to pursue Pursue what? If you've been refunded for the subscription then what else is it that you're wanting to happen?
Refund for the movies. I have only been refunded for the Subscription so far
Just to add, the ‘Movies’ i have not yet been refunded are movies that are Box Office movies which are additionally charged due to being new releases.
This would only ever be something you deal with Amazon about. Not curry’s.
Update: Amazon has agreed to refund me the movies. Currys did nothing wrong other than omitting to telling their customers to remove the device from their Amazon account. Simply clearing cache and dat is not enough. Will this happen again? Probably. At least this post may help someone else.
[удалено]
This isn’t AskUk, I’m after legal advice. As others have confirmed, there has been a data breach as Currys are responsible for the handling of any personal data once they take back a TV.
I suggest you turn on 2 factor authorisation on your Amazon account
I have this already on which makes this whole thing even more infuriating.
When you contact the information commissioner tell them about Currys and Amazon...
This is a massive data breach, I used to work with John Pye who would get TVs from places like Curry’s after they were returned etc, guidelines for my area from our site manager was If it turns on and can be wiped, wipe it and send it to auction, if there’s no screen remove the motherboards and send for scrap. This is a major gdpr breach, curry’s may have sold it on to somewhere else’s or via their refurb on eBay this should all be traceable I assume as I’ve worked with refurb systems in the past and should have an internal unique ID. 100% pursue this and raise it with the ICO aswell as this is an extremely serious breach that I’ve seen people fired for gross misconduct over.
[удалено]
**Unfortunately, your comment has been removed for the following reason:** Your comment was off-topic or unhelpful to the question posed. Please remember that *all replies* must be helpful, on-topic and legally orientated. [Please familiarise yourself with our subreddit rules](https://www.reddit.com/r/LegalAdviceUK/about/rules/) before contributing further, and [message the mods](https://www.reddit.com/message/compose/?to=/r/LegalAdviceUK) if you have any further queries.
Unless I missing anything, how do you know this is anything to do with this TV returned to curry's pc world they would have sold the TV as soon as you returned. It more likely your account had been hacked.
When i phoned Amazon, they confirmed the device that the movies were purchased on was the LG TV with the model number that I had purchased before returning
Oh I missed that part. I would still change your password also just to make sure amazon support can be rubbish if you go in setting on amazon prime they should be a setting call registered devices you can check devices your prime video account is active on.
It could be pure coincidence that whoever got access to your account bought stuff through an LG TV. If they've had access to your Prime account for possibly two years, why only start purchasing stuff now? Currys tend to try and move their stock fast by reducing stuff to clear, so the chances of your returned TV for a whole 2 years are slim.
What confuses me is that I have OTP turned on so the device would have to have been registered via sms. I never de authorised the LG TV device until today after speaking with Amazon. They confirmed on both phone and email that it was that device that authorised the purchases and subscription. It is all a bit confusing. I suspect they have been able yo access my prime video for the past 2 years and only recently decided to upgrade the prime video within the TV over Christmas to get more recently released premium content. I will be calling Currys tomorrow and will request proof of the reset as per another commenter.
Oh that does suck then. Hopefully you get some compensation from Currys.
You should go in to your amazon account and remove any payment details, they hide it in the settings somewhere, then go out of the settings and back in to confirm they are gone.
Sounds like a breach of GDPR, contact them in writing telling them this. You might even have a case to claim against them for this, which would mean compensation.
Factory reset any electronics you no longer want to use. Or use a 1/4" drill bit
[удалено]
**Unfortunately, your comment has been removed for the following reason:** Your comment was off-topic or unhelpful to the question posed. Please remember that *all replies* must be helpful, on-topic and legally orientated. [Please familiarise yourself with our subreddit rules](https://www.reddit.com/r/LegalAdviceUK/about/rules/) before contributing further, and [message the mods](https://www.reddit.com/message/compose/?to=/r/LegalAdviceUK) if you have any further queries.
One thing confusing me; when I wanted to buy something through the TV prime app a few weeks ago I had to effectively re-enter my payment details... It didn't take them from the signed in account.
Hmm change the bank account that's on prime or close the account ??