Controller details

The Information Commissioner is the controller for any personal data that you provide in your response to this consultation.

You can find our contact details here.              

Data Protection Officer

Our DPO is Louise Byers, you can contact her at

Purpose and legal basis for processing

If you have indicated that you would be interested in contributing to further ICO work on the subject matter covered by this consultation then we will process your contact details to get in touch with you.

We will process any other personal data provided in the responses for the purpose of informing the development of our policy, guidance or other regulatory work in the subject area of the consultation. We will publish a summary of the consultation responses and, in some cases, the responses themselves but these will not contain any personal data. The consultation documentation will make it clear what we plan to publish.

The legal basis we are relying on to process your personal data is article 6(1)(e) of the GDPR, which allows us to process personal data when this is necessary for the performance of our public tasks in our capacity as a regulator.

Recipients of personal data – (who we will share your personal data with)

We don’t intend to share your personal data with anyone (else). Any specific requests from a third party for us to share your personal data with them will be dealt with in accordance the provisions of the data protection laws.

Retention periods (how long we keep your personal data for)

We will retain consultation response information until our work on the subject matter of the consultation is complete.

Your rights over the personal data you provide in your response

You have the right to request access to the personal data that we hold about you.

You have the right to ask for your personal data to be rectified or erased, or to restrict the way in which we process it.

You have the right to object to the processing of your personal data.

If you are unhappy with the way in which we have processed your personal data then you have the right to complain to a supervisory authority.

If you wish to exercise any of these rights, please contact or call our Helpline on 0303 123 1113.