Why we collect your personal data

As part of our consultation process, you are not required to provide your name or any personal information that will identify you. However, we are aware that some respondents would like to provide contact information. If you or your organisation are happy to provide personal data, with regard to this consultation, please complete the details below. We would like to hear as many views as possible and ensure that we are reaching as many people as possible. In order for us to monitor this, understand views of different groups and take steps to reach specific groups, we may ask for sensitive data such as ethnicity and disability to understand the reach of this consultation and views of specific groups. You do not have to provide this information and it is entirely optional.

If there is any part of your response that you wish to remain confidential, please indicate at the appropriate point in the survey.

Where you have requested that your response or any part remains confidential, we will not include your details in any published list of respondents, however, we may quote from the response anonymously in order to illustrate the kind of feedback we have received.

Your data

Your personal data:

  • will not be sent outside of the UK unless there are appropriate safeguards in place to protect your personal data
  • will not be used for any automated decision making
  • will be kept secure

We implement appropriate technical and organisational measures in order to protect your personal data against accidental or unlawful destruction, accidental loss or alteration, unauthorised disclosure or access and any other unlawful forms of processing.

Your rights: access, rectification and erasure

As a data subject, you have the legal right to:

  • access personal data relating to you
  • object to the processing of your personal data
  • have all or some of your data deleted or corrected
  • prevent your personal data being processed in some circumstances
  • ask us to stop using your data, but keep it on record

If you would like to exercise your rights, please contact us using the details below. You can also find out more about Ofqual's privacy information.

Freedom of Information Act and your response

Please note that information in response to this consultation may be subject to release to the public or other parties in accordance with access to information law, primarily the Freedom of Information Act 2000 (FOIA). We have obligations to disclose information to particular recipients including members of the public in certain circumstances. Your explanation of your reasons for requesting confidentiality for all or part of your response would help us balance requests for disclosure against any obligation of confidentiality. If we receive a request for the information that you have provided in your response to this consultation, we will take full account of your reasons for requesting confidentiality of your response and assess this in accordance with applicable data protection rules.

Members of the public are entitled to ask for information we hold under the Freedom of Information Act 2000. On such occasions, we will usually anonymise responses, or ask for consent from those who have responded, but please be aware that we cannot guarantee confidentiality.

If you choose 'no' in response to the question asking if you would like anything in your response to be kept confidential, we will be able to release the content of your response to the public, but we won't make your personal name and private contact details publicly available.

How we will use your response

We will use your response to help us shape our policies and regulatory activity. If you provide your personal details, we may contact you in relation to your response. We will analyse all responses and produce reports of consultation responses. In the course of analysis, we will where possible avoid using your name and contact details. We will only process the body of your response, but we are aware that in some cases, this may contain information that could identify you.

Sharing your response

We may share your response, in full, with The Department for Education (DfE) and The Institute for Apprenticeships & Technical Education (IFATE) where the consultation is part of work involving those organisations. We may need to share responses with them to ensure that our approach aligns with the wider process. Where possible, if we share a response, we will not include any personal data (if you have provided any). Where we have received a response to the consultation from an organisation, we will provide the DfE and IFATE with the name of the organisation that has provided the response, although we will consider requests for confidentiality.

Where we share data, we ensure that adequate safeguards are in place to ensure that your rights and freedoms are not affected.

We use Citizen Space, which is part of Delib Limited, to collect consultation responses and they act as our data processor. You can view Citizen Space's privacy notice.

Your response will also be shared internally within Ofqual in order to analyse the responses and shape our policies and regulatory activity. We use third party software to produce analysis reports, which may require hosting of data outside the UK, specifically the US. Please note that limited personal information is shared. All personal contact information is removed during this process. Where we transfer any personal data outside the UK, we make sure that appropriate safeguards are in place to ensure that the personal data is protected and kept secure.

Following the end of the consultation, we will publish an analysis of responses on our website. We will not include personal details in the responses that we publish.

We may also publish an annex to the analysis listing all organisations that responded but will not include personal names or other contact details.

How long will we keep your personal data?

Unless otherwise stated, Ofqual will keep your personal data (if provided) for a period of 2 years after the consultation closing date.

Our legal basis for processing your personal data

Where you provide personal data for this consultation, we are relying upon the public task basis as set out in Article 6(1)(e) of UK GDPR to process personal data which allows processing of personal data when this is necessary for the performance of our public tasks. We will consult where there is a statutory duty to consult or where there is a legitimate expectation that a process of consultation will take place. Where you provide special category data, we process sensitive personal data such as ethnicity and disability, we rely on Article 9(2)(g) of UK GDPR as processing is necessary for reasons of substantial public interest.

The identity of the data controller and contact details of our Data Protection Officer

This privacy notice is provided by The Office of Qualifications and Examinations Regulation (Ofqual). The relevant data protection regime that applies to our processing is the UK GDPR[1] and Data Protection Act 2018 ('Data Protection Laws'). We ask that you read this privacy notice carefully as it contains important information about our processing of consultation responses and your rights.

How to contact us

If you have any questions about this privacy notice, how we handle your personal data, or want to exercise any of your rights, please contact our data protection officer at

We will respond to any rights that you exercise within a month of receiving your request, unless the request is particularly complex, in which case we will respond within 3 months.

Please note that exceptions apply to some of these rights which we will apply in accordance with the law.

You also have the right to lodge a complaint with the Information Commissioner (ICO) if you think we are not handling your data fairly or in accordance with the law. You can contact the ICO at:

Wycliffe House,
Water Lane,

Tel: 0303 123 1113

[1] Please note that as of 1st January 2021, data protection laws in the UK have changed. The General Data Protection Regulation (EU) 2016/679(GDPR) no longer applies to the UK. However, the UK has incorporated GDPR into domestic law subject to minor technical changes. The Data Protection, Privacy and Electronic Communications (Amendment etc.) EU exit Regulations (DPPEC) came into force in the UK on 1st January 2021. This consolidates and amends the GDPR and UK Data Protection Act 2018 to create the new UK GDPR.

Delib Privacy Information

Delib's software (this website) enables organisations to set up and operate activities, through which they can engage with you.

This site is managed by the controlling organisation, Ofqual Citizen Space. When you access and use this site, the personal information you have submitted to these activities will go to the organisation. Delib will not access your personal information unless requested to do so by the organisation, and only for the purposes of assisting them with the administration of this site.

Accessing your Personal Information

If you have any questions or requests about your personal information, for example to request a copy of it, or to ask for it to be corrected if you think it is wrong, please contact the organisation (as stated in their Privacy Notice / Privacy Statement / Privacy Policy). It is the controlling organisation's responsibility to answer any questions or requests about your personal information.

Collection of Browser Information

The information provided by your computer when you use this website is collected by Delib. For example, your browser type, IP address, language preference, referring site and the date and time. The purpose for collecting this information is to maintain the security of the website and for operating and improving the software.