As the Authority processes personal data, we are registered as a Data Controller (Registration Number Z4920231) with the Information Commissioner’s Office (ICO), which means we are responsible for deciding how the data we hold is processed and protecting it from harm.
The Authority has a Data Protection Policy Statement, available in the submenu on the right, setting out the Authority’s commitment to and how it will go about fulfilling its responsibilities to comply with data protection legislation and follow good practice in protecting the rights of data subjects.
The Authority’s full privacy notice in relation to the processing of scheme members’ and beneficiaries’ data is available from the submenu on the right.