A Ford Credit customer reports that accessing their account requires 2FA via SMS, but customer support claimed receiving the verification text requires consenting to marketing texts, raising UK GDPR compliance concerns.
Post
Highlighted: the lines this signal was extracted from
To access my Ford credit account I have to receive a verification text message, there’s no other option for verification. I’ve been told that to receive the verification text I have to accept marketing texts. I don’t want marketing texts. Is this a breach of GDPR rules? If so what can I do?
“If that's exactly what's happening, Ford Credit may be breaching UK data protection and electronic marketing rules.”
u/ComplexConclusion6485 points · Oct 23, 2026View
“Is this a breach of GDPR rules? Sending you marketing texts in reliance on this consent mechanism would be a breach of UK GDPR and PECR because the consent would not be "freely given" (and would therefore be invalid). If so what can I do? Complain to the organisation and/or the ICO. In practice, if you need to access the credit account, it sounds like you'll just need to agree to the marketi”
u/BornInAWaterMoon2 points · Oct 23, 2026View
“Presuming there is no missing details and presuming you got an accurate answer from whoever you were communicating with (customer support can be wrong) then yes that would be breaching GDPR. They can mandate MFA (multi factor authentication) but they can't bundle in a 'strictly necessary' consent with marketing consent. They need to be separate. You can raise a formal complaint with the compan”
u/barog4061 points · Oct 23, 2026View
“they also have clicktrackers in their client notification emails. ICO doesnt care about this but the FCA does, especially with Ford. Keep an eye on your social media ads + google display/sponsored articles as you should start seeing ads from ford + unilever, nestle, nike, p&g, L'Oréal, coca cola (theyll all be shown one after the other) shortly after giving them your phone number. add that scree”
u/No-Anchovies1 points · Oct 25, 2026View
What this signalsUser posts often show product pain before it reaches reviews or churn.
Topics
Flair
Products named
reddit-companycustomerFeedbackGet every Reddit signal for Ford and the companies you sell to, in the tools you already use.
Connect Autobound to Claude, Claude Code or Cursor with MCP. Then ask: “What changed at Ford this week?”
The Signal API returns Reddit signals for any list of companies as JSON, for your CRM, warehouse or app.
Sign up and spend your free credits on the companies you sell to.
This page shows a preview. The full reddit-company record in the Signal API and MCP can also have these 8 fields. Some fields are empty for some signals.
Company
linkedin_urlValue in the APIindustriesValue in the APIemployee_count_lowValue in the APIemployee_count_highValue in the APIrevenueValue in the APIdescriptionValue in the APISignal
signal_nameValue in the APIassociationValue in the APIGET /v1/signals/b52599c9-bd5f-565d-a858-38dfdcd02a29 returns this record as JSON. POST /v1/companies/enrich returns every signal for ford.com.
{
"signal_id": "b52599c9-bd5f-565d-a858-38dfdcd02a29",
"signal_type": "reddit-company",
"signal_subtype": "customerFeedback",
"detected_at": "2026-10-23T17:24:19+00:00",
"company": {
"name": "Ford",
"domain": "ford.com"
},
"data": {
"nsfw": false,
"stage": "none",
"awards": 0,
"timing": "ongoing_state",
"topics": [
"gdpr",
"compliance",
"mfa",
"privacy"
],
"post_id": "1xdkava",
"summary": "A Ford Credit customer reports that accessing their account requires 2FA via SMS, but customer support claimed receiving the verification text requires consenting to marketing texts, raising UK GDPR compliance concerns.",
"category": "security",
"comments": [
{
"url": "https://www.reddit.com/r/gdpr/comments/1xdkava/comment/19rjkpdd0nfoh/",
"depth": 0,
"score": 5,
"author": "ComplexConclusion648",
"excerpt": "If that's exactly what's happening, Ford Credit may be breaching UK data protection and electronic marketing rules.",
"posted_at": "2026-10-23T17:27:54.000Z",
"author_url": "https://www.reddit.com/user/ComplexConclusion648/"
},
{
"url": "https://www.reddit.com/r/gdpr/comments/1xdkava/comment/19rjkzgwlncbn/",
"depth": 0,
"score": 2,
"author": "BornInAWaterMoon",
"excerpt": "Is this a breach of GDPR rules?\n\n Sending you marketing texts in reliance on this consent mechanism would be a breach of UK GDPR and PECR because the consent would not be \"freely given\" (and would therefore be invalid).\n\n If so what can I do?\n\n Complain to the organisation and/or the ICO. In practice, if you need to access the credit account, it sounds like you'll just need to agree to the marketi",
"posted_at": "2026-10-23T17:34:11.000Z",
"author_url": "https://www.reddit.com/user/BornInAWaterMoon/"
},
{
"url": "https://www.reddit.com/r/gdpr/comments/1xdkava/comment/19rjmpni6z8dd/",
"depth": 0,
"score": 1,
"author": "barog406",
"excerpt": "Presuming there is no missing details and presuming you got an accurate answer from whoever you were communicating with (customer support can be wrong) then yes that would be breaching GDPR.\n\n They can mandate MFA (multi factor authentication) but they can't bundle in a 'strictly necessary' consent with marketing consent. They need to be separate.\n\n You can raise a formal complaint with the compan",
"posted_at": "2026-10-23T18:12:55.000Z",
"author_url": "https://www.reddit.com/user/barog406/"
},
{
"url": "https://www.reddit.com/r/gdpr/comments/1xdkava/comment/19rlvn957xxk2/",
"depth": 0,
"score": 1,
"author": "No-Anchovies",
"excerpt": "they also have clicktrackers in their client notification emails. ICO doesnt care about this but the FCA does, especially with Ford.\n\n Keep an eye on your social media ads + google display/sponsored articles as you should start seeing ads from ford + unilever, nestle, nike, p&g, L'Oréal, coca cola (theyll all be shown one after the other) shortly after giving them your phone number. add that scree",
"posted_at": "2026-10-25T00:27:27.000Z",
"author_url": "https://www.reddit.com/user/No-Anchovies/"
}
],
"evidence": [
"[post] To access my Ford credit account I have to receive a verification text message, there’s no other option for verification.",
"[post] I’ve been told that to receive the verification text I have to accept marketing texts. I don’t want marketing texts. Is this a breach of GDPR rules?"
],
"virality": "medium",
"post_date": "2026-10-23T17:24:19.000Z",
"post_kind": "text",
"post_text": "To access my Ford credit account I have to receive a verification text message, there’s no other option for verification. I’ve been told that to receive the verification text I have to accept marketing texts. I don’t want marketing texts. Is this a breach of GDPR rules? If so what can I do?",
"sentiment": "negative",
"subreddit": "gdpr",
"event_date": "2026-10",
"post_flair": [
"UK 🇬🇧"
],
"post_title": "Forced to accept marketing texts",
"prominence": "core",
"source_url": "https://www.reddit.com/r/gdpr/comments/1xdkava/forced_to_accept_marketing_texts/",
"entity_role": "vendor",
"post_author": "walkerteddy_",
"upvote_ratio": 0.75,
"mention_count": 1,
"mention_surge": false,
"subreddit_url": "https://www.reddit.com/r/gdpr/",
"total_upvotes": 4,
"comments_total": 11,
"total_comments": 11,
"post_author_url": "https://www.reddit.com/user/walkerteddy_/",
"signal_category": "feedback",
"comments_included": 4,
"products_mentioned": [
"Ford Credit"
]
}
}
curl https://signals.autobound.ai/v1/signals/b52599c9-bd5f-565d-a858-38dfdcd02a29 \
-H "X-API-KEY: $AUTOBOUND_API_KEY"curl -X POST https://signals.autobound.ai/v1/companies/enrich \
-H "X-API-KEY: $AUTOBOUND_API_KEY" \
-H "Content-Type: application/json" \
-d '{"domain":"ford.com","limit":20}'Long text fields are shortened on this page.
Looking up one signal by its id is free. Enrich costs 2 credits per signal returned; a call with no results is free.