엔진오일 교환 수리 사례

2026. 9. 12. 작업

난이도 & 준비물

증상

I've been out of the (used) car game for a few years and I'm back in the market now. I have one non-negotiable rule: no service history, no interest. Full stop.I have never bought a used car without history. Apart from that one time on my first car that had fake history, but that's a different story and it didn't end well, perhaps that's why I have been fastidious ever since. Reliability is directly tied to maintenance. I'm not buying an older, higher-mileage car blind. I need to know what's been done, when, and by whom.So I've been on Autotrader for a few weeks but targeting one specific mode

처리 내용

_Rodders_ said: I'm pretty sure the details don't need to be redacted. Most people haven't actually read the GDPR's.It's just lazy or dishonest people. Here is what Ai search says: The "breach" that prompted the industry shiftThe most-cited case (reported in Car Dealer Magazine, 2021) involved a dealer who settled a civil claim for £3,000 after a service invoice with the previous keeper's address was left in the glovebox. The new owner wrote to the previous owner, who then engaged a no-win-no-fee solicitor threatening court action. Critically, this was not an ICO fine — it was a civil settlement. Legal expert Nona Bowkis (Lawgistics) stated the dealer "could have argued there had not been a breach" but chose to settle to avoid expensive court costs. She described these as "ambulance chasing" claims that put dealers "on the back foot." What the law actually saysUnder the UK GDPR and Data Protection Act 2018:Service invoices containing names/addresses are personal data, and the dealer is the data controller for that data once it comes into their possession. The dealer needs a lawful basis for processing (sharing) it. The most applicable is "legitimate interest" (Article 6(1)(f)), which requires a Legitimate Interest Assessment balancing the dealer's interest against the data subject's privacy. The GDPR does not explicitly prohibit passing on service history, and does not mandate destruction. As one 2026 legal analysis puts it: "the GDPR does not specifically prohibit the disclosure of such information either."The proper solution per legal experts (Lawgistics, CG Professionals) is redaction — blacking out names and addresses — not destruction. Why dealers bin it anywayRedacting hundreds of invoices is slow, expensive, and error-prone (a missed detail = potential breach).The "ambulance chaser" solicitor threat makes even a defensible position costly to litigate.A Legitimate Interest Assessment must be documented and can be challenged by any data subject under Artic