I have got a client , their company provide ourselves with a name, telephone number/email (often the risk details) we then provide the client with a quote and subsequent policy. to do this we also obtain their correspondence address etc to post them the policy documents, the client get their commission for introducing and any renewal thereafter, but they technically are still their client.

They have rang to ask for a list of their clients and address so they can offer them other products or make sure they are not offering them the same product,

i think its more to do with a person offering them another avenue for their clients business, after he left working for us

Personally I think we should not be giving them any more information than they originally provided, those in the know what are your thoughts  Former Mod/Member, with the most post & Chicken George Arch nemesis

Are you registered with the ICO? http://www.ico.org.uk/for_organisations/data_protection We are here - it only costs £35 a year. You should be by law if you are processing 'Data'. Check with them for a definitive answer. You could get in big trouble if you give out personal data and someone complains.  Past: FL2 TD4 HSE Auto
Evoque SD4 Dynamic Lux Auto
Present: Audi A3 S Line.

Yes we are, I guess thats the best thing to do, no point in guessing  Former Mod/Member, with the most post & Chicken George Arch nemesis