Purpose and legal basis for processing

If you have indicated that you would be interested in contributing to further ICO work on the subject matter covered by this consultation, we’ll process your contact details to get in touch with you.

We’ll process any other personal data provided in the responses so as to inform the development of our policy, guidance or other regulatory work in the subject area of the consultation. We’ll publish a summary of the consultation responses but this will not contain any personal data.

The legal basis we rely on to process your personal data is article 6(1)(e) of the GDPR, which allows us to process personal data when this is necessary to perform our public tasks as a regulator.

How long we keep it

For information about how long we hold personal data, see  our retention schedule.

What are your rights?

We process personal data in consultation responses in our capacity as a regulator, so you have a right to object to this processing of your personal data. There are legitimate reasons why we may refuse your objection, which depend on why we are processing it.

For more information on your rights, please see ‘Your rights as an individual’.

Do we use any data processors?

Yes – we may sometimes share the information you provide in your response. If we do this, we'll tell you in the consultation process. This may vary depending on the consultation, but we'll make this clear in each case.