A debt collector has wrong data — or the debt isn’t mine. What now?
Dispute in writing, demand validation, freeze the data — and never pay “to make it stop”. Wrong-person collection is a data-quality failure the GDPR was built for.
- Never acknowledge, never small-payA “goodwill” payment can restart limitation clocks and reads as acknowledgement in many countries. First: establish in writing what this claim even is.
- Demand validation in writing“I dispute this claim. Provide: the original creditor, contract and date, the amount breakdown, and proof of assignment to you.” Reputable collectors must pause active collection on a documented dispute; many claims die right here for lack of paperwork.
- Wrong person / identity mix-up? Say it explicitlySame-name mix-ups and stale addresses cause a huge share of cases. State “you are pursuing the wrong person”, provide minimal distinguishing proof (not your full ID), and demand deletion of your data from the file (Art. 16-17).
- Freeze the credit-register damageIf the collector or creditor reported the disputed debt to a credit register: rectification (Art. 16) plus restriction (Art. 18) to the register AND the reporter — the entry stops feeding decisions while disputed. This is the step people skip and regret at mortgage time.
- Fraud underneath? Bridge to the identity-theft flowIf validation reveals a contract you never made, run the identity-theft steps (police report first) and send the collector the case number — collection on documented fraud stops or becomes their liability.
- Harassment or refusal? Two regulatorsAggressive practices (threats, workplace calls, ignoring disputes) go to your consumer-protection or collection-licensing authority; the data side (ignored rectification, wrongful register entries) goes to your DPA. File both; attach the paper trail.
The GDPR angle gives you leverage debt-law alone does not: an Art. 15 access request to the collector reveals what they hold, where it came from and what they fed to registers — collectors run thin files, and a data-subject exercising rights signals expensive. Accuracy (Art. 5(1)(d)) is not optional for them, and DPAs have fined collection firms for pursuing on unverified data. Keep everything written, keep the folder, and if real damage lands — a blocked loan over a wrong entry — Art. 82 damages are squarely in play.
Verified against the sources above on 18 July 2026. Information, not legal advice.