RFPT review privacy notice

1. Your data (Data Subject Categories)

The personal information relates to you as either a member of the public, parliamentarians, and representatives of organisations or companies.

2. The data we collect (Data Categories)

Information may include your name, address, email address, job title, and employer of the correspondent, as well as your opinions. It is possible that you will volunteer additional identifying information about yourself or third parties.

3. Legal basis of processing personal data

Where the processing of personal data takes place, the legal basis relied upon for processing is it is necessary for the performance of a task carried out in the public interest, or in the exercise of official authority vested in the data controller. The processing of data is necessary to inform the RFPT Panel in the exercise of its official capacity to conduct the statutory review on ring-fencing and proprietary trading in line with the ToR set by HM Treasury. For the purpose of this call for evidence the task is to consult to inform policy or proposals or obtaining opinion data in order to develop good effective policy recommendations on ring-fencing and proprietary trading.

4. Special categories data

Any of the categories of special category data may be processed if such data is volunteered by the respondent.

5. Legal basis for processing special category data

Where special category data is volunteered by you (the data subject), the legal basis relied upon for processing it is the processing is necessary for reasons of substantial public interest or exercise of official authority vested in the RFPT Review.

6. Purpose

The personal information is processed for the purpose of obtaining the opinions of members of the public and representatives of organisations and companies, about obtaining public opinion data on the issue of ring-fencing and proprietary trading.

7. Who we share your responses with?

Following the completion of the RFPT Review all records will be passed to HM Treasury for archiving in line with HM Treasury records disposal policies. These records will be subject to the Freedom of Information Act (FOIA)

Any personal data provided to the RFPT Review will be held and processed in accordance with our legal obligations under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA).

All written responses relating directly to this call for evidence provided to the RFPT Review will be made public in accordance with the access to information regimes. Personal data will not be published or disclosed to a third party except as required by law, and following completion of the review transferred to HM Treasury.

If you would like any of the information provided in your response to be treated confidentially, please state this clearly in a covering note or email identifying the relevant information and explaining why it is confidential. While the RFPT Review will seek to abide by such confidentiality requests, it cannot guarantee confidentiality where disclosure is required by law. Under the FOIA there is a statutory Code of Practice which deals with obligations of confidence. Confidentiality request are taken into account for FOI requests, but we cannot guarantee that confidentiality will be maintained in all circumstances.

This also applies to other written communications which the RFPT Review receives during its work. An automatic confidentiality disclaimer generated by your IT system will not, in itself, be regarded as binding on the RFPT Review. Where someone submits special category personal data or personal data about third parties, we will endeavour to delete that data before publication takes place.

As the personal information is stored on our IT infrastructure, it will be accessible to our IT contractor, NTT who will only process this data for our purposes and in fulfilment with the contractual obligations they have with us.

8. How long we will hold your data (Retention)

Personal information contained in your responses will not be published and will be retained for three calendar years after the consultation has concluded.

9. Your Rights

  • You have the right to request information about how your personal data are processed and to request a copy of that personal data.
  • You have the right to request that any inaccuracies in your personal data are rectified without delay.
  • You have the right to request that your personal data are erased if there is no longer a justification for them to be processed.
  • You have the right, in certain circumstances (for example, where accuracy is contested), to request that the processing of your personal data is restricted.
  • You have the right to object to the processing of your personal data where it is processed for direct marketing purposes.

10. How to submit a Data Subject Access Request (DSAR)

To request access to personal data that we hold about you, please contact: projectmanagement@rfptreview.org.uk


If you have any concerns about the use of your personal data, please contact: projectmanagement@rfptreview.org.uk If we are unable to address your concerns to your satisfaction, you can make a complaint to the Information Commissioner, the UK’s independent regulator for data protection. The Information Commissioner can be contacted at:

Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF 0303 123 1113