Your comments regarding third party access to SARNS is incorrect.(posted 7582 days ago)A data controller is entitled to refuse to supply a SARN to any third party it so wishes and send the data file directly to the data subject.
If legal representation want information they can either get the Data File from the subject or seek disclosure through the court.
Also 'they claim' is not exactly independant praise is it.
It is good that your friend was helped by them but I really would question as a percentage of people how many have actually helped?
I am very synical of this company and a friend of mine has also had dealings with them with little success.