I am dealing with a significant breach of Article 15 UK GDPR by a major software provider (Facepunch Studios) and their counsel (Wiggin LLP).

**The Issue:** Following a security breach verified by the platform provider (Valve Corp), the respondent has permanently seized $1,366 in assets. When I submitted a Subject Access Request (SAR), their legal counsel stated in writing that my own login history and IP timestamps are **"Trade Secrets"** under Article 15(4) and would not be disclosed.

**Escalation:**

1. The **Solicitors Regulation Authority (SRA)** has opened Case **RGC-000200263** against the lawyer for misleading legal assertions.
2. The **ICO** is reviewing Case **IC-544118-B8F2** regarding the automated decision-making and data obstruction.
3. The **EASS (Ref 260810-000062)** confirmed this appears to be **Direct Discrimination** as manual reviews are denied based on national origin.

Has anyone else encountered the "Trade Secret" defense for basic login logs in the UK? This seems like a dangerous precedent to avoid "Human Intervention" requirements of the new Data Act 2025.

(Evidence link in comments)

UK Law Firm claims personal login/IP history are "Trade Secrets" to block Article 15 SAR. SRA misconduct probe opened