Hacker News Reader

> Under the GDPR they're legally required to give you all the data they have on you; this is non-negotiable.

To play devil's advocate: they might argue that the fraudulent transaction contains/might contain PII of the fraudster and they are protecting his privacy. Sounds crazy, but I wouldn't be that surprised.

View on HN

They refused to give me my information too, though. I wanted all the data they had on my transactions so I could analyze my card usage.

All the fraudulent transaction has is amount/merchant/date and card, it doesn't have any of the fraudster's info on it.

https://www.revolut.com/legal/privacy/#what-are-my-rights Send a ‘data subject access request’ to dpo@revolut.com, they should handle that properly.

Would love to hear an update when/if you hear back from GDPR compliance officials.

I will update the post with any updates, if any.

Reply on news.ycombinator.com