The ICO exists to empower you through information.

View our 'what we do with your personal data when you...' infographic for a basic overview of the below information.


Purpose and lawful basis for processing

If you have indicated that you would be interested in contributing to further ICO work on the subject matter covered by this consultation or survey then we might process your contact details to get in touch with you about your response.

We will process the opinion or views you provide in the responses for the purpose of informing the development of our policy, guidance or other regulatory work in the subject area of the request for views.

The lawful basis we are relying on to process your personal data is article 6(1)(e) of the UK GDPR, which allows us to process personal data when this is necessary for the performance of our public tasks in our capacity as a regulator.

What we do with it

We may use the contact information you provide to contact you to discuss your response.

In the case of consultations, we will publish a summary of the consultation responses and, in some cases, the responses themselves. 

In the case of surveys or feedback, we may want to publish your name and / or job role alongside your response on our website and social media accounts. Where we are considering doing this we will make it clear what we plan to publish and will seek your agreement to this before doing so.

We process the information internally for the above stated purpose. We don't intend to share your personal data with any third party. Any specific requests from a third party for us to share your personal data with them will be dealt with in accordance the provisions of the data protection laws.

How long we keep it

We will retain consultation and survey response information until our work on the subject matter of the consultation is complete.

What are your rights?

You have the right to request access to the personal data that we hold about you.

You have the right to object to the processing of your personal data.

If you are unhappy with the way in which we have processed your personal data then you have the right to complain to a supervisory authority.

If you wish to exercise any of these rights, please contact [email protected] or call our Helpline on 0303 123 1113.

Do we use any data processors?

We do often use Snap Surveys to gather information on our behalf - it will be clear if we are using Snap Surveys. Any data collected by Snap Surveys for ICO is stored on UK servers. You can read their Privacy Policy here.

We may also create and run surveys using Smart Survey. You can find their Privacy Policy here.

We also use Microsoft Forms for the same purpose.

Occasionally we also use the poll function on the ICO’s LinkedIn account to engage with LinkedIn users. You can read their privacy policy.

We use PA Consulting and Yonder Data Solutions for stakeholder research and engagement.