Proposed changes to the assessment of GCSEs, AS and A levels in 2022

Closes 1 Aug 2021

Your details

Have you read and understood our privacy policy, as seen in annex C?

Annex C: consultation responses and your data

Why we collect your personal data

As part of our consultation process, you are not required to provide your name or any personal information that will identify you. However, we are aware that some respondents would like to provide contact information. If you or your organisation are happy to provide personal data, with regard to this consultation, please complete the details below. We would like to hear as many views as possible and ensure that we are reaching as many people as possible. In order for us to monitor this, understand views of different groups and take steps to reach specific groups, we may ask for sensitive data such as ethnicity and disability to understand the reach of this consultation and views of specific groups. You do not have to provide this information and it is entirely optional.

If there is any part of your response that you wish to remain confidential, please indicate at the appropriate point in the survey.

Where you have requested that your response or any part remains confidential, we will not include your details in any published list of respondents. However, we may quote from the response anonymously in order to illustrate the kind of feedback we have received. 

Your data

Your personal data: 

  • will not be sent outside of the UK unless there are appropriate safeguards in place to protect your personal data 

  • will not be used for any automated decision making 

  • will be kept secure 

We implement appropriate technical and organisational measures in order to protect your personal data against accidental or unlawful destruction, accidental loss or alteration, unauthorised disclosure or access and any other unlawful forms of processing. 

Your rights: access, rectification and erasure

As a data subject, you have the legal right to: 

  • access personal data relating to you 

  • object to the processing of your personal data 

  • have all or some of your data deleted or corrected 

  • prevent your personal data being processed in some circumstances 

  • ask us to stop using your data, but keep it on record 

If you would like to exercise your rights, please contact us using the details below. You can also find out more about  Ofqual's privacy information.

Freedom of Information Act and your response

Please note that information in response to this consultation may be subject to release to the public or other parties in accordance with access to information law, primarily the Freedom of Information Act 2000 (FOIA). We have obligations to disclose information to particular recipients including members of the public in certain circumstances. Your explanation of your reasons for requesting confidentiality for all or part of your response would help us balance requests for disclosure against any obligation of confidentiality. If we receive a request for the information that you have provided in your response to this consultation, we will take full account of your reasons for requesting confidentiality of your response and assess this in accordance with applicable data protection rules.

Members of the public are entitled to ask for information we hold under the Freedom of Information Act 2000. On such occasions, we will usually anonymise responses, or ask for consent from those who have responded, but please be aware that we cannot guarantee confidentiality.

If you choose 'no' in response to the question asking if you would like anything in your response to be kept confidential, we will be able to release the content of your response to the public, but we won't make your personal name and private contact details publicly available.

How we will use your response

We will use your response to help us shape our policies and regulatory activity. If you provide your personal details, we may contact you in relation to your response. We will analyse all responses and produce reports of consultation responses. In the course of analysis, we will where possible avoid using your name and contact details. We will only process the body of your response, but we are aware that in some cases, this may contain information that could identify you.

Sharing your response

This is a joint consultation undertaken by Ofqual and the Department for Education (DfE), with Ofqual collecting the responses. Therefore, your consultation response will be shared with DfE as this forms part of work involving both organisations.  

Where we share data, we ensure that adequate safeguards are in place to ensure that your rights and freedoms are not affected. You can read DFE’s personal information charter to find out how they process personal data. 

We use Citizen Space, which is part of Delib Limited, to collect consultation responses and they act as our data processor. You can view Citizen Space’s privacy notice

Your response will also be shared internally within Ofqual in order to analyse the responses and shape our policies and regulatory activity. We use third party software to produce analysis reports, which may require hosting of data outside the UK, specifically the US. Please note that limited personal information is shared. All personal contact information is removed during this process. Where we transfer any personal data outside the UK, we make sure that appropriate safeguards are in place to ensure that the personal data is protected and kept secure.  

Following the end of the consultation, we will publish an analysis of responses on the Ofqual website. We will not include personal details in the responses that we publish.  

We may also publish an annex to the analysis listing all organisations that responded but will not include personal names or other contact details. 

How long will we keep your personal data?

Unless otherwise stated, Ofqual will keep your personal data (if provided) for a period of 2 years after the consultation closing date.

Our legal basis for processing your personal data

Where you provide personal data for this consultation, we are relying upon the public task basis as set out in Article 6(1)(e) of UK GDPR to process personal data which allows processing of personal data when this is necessary for the performance of our public tasks. We will consult where there is a statutory duty to consult or where there is a legitimate expectation that a process of consultation will take place. Where you provide special category data, we process sensitive personal data such as ethnicity and disability, we rely on Article 9(2)(g) of UK GDPR as processing is necessary for reasons of substantial public interest.

The identity of the data controller and contact details of our Data Protection Officer

This privacy notice is provided by The Office of Qualifications and Examinations Regulation (Ofqual). The relevant data protection regime that applies to our processing is the UK GDPR and Data Protection Act 2018 ('Data Protection Laws'). We ask that you read this privacy notice carefully as it contains important information about our processing of consultation responses and your rights.

How to contact us

If you have any questions about this privacy notice, how we handle your personal data, or want to exercise any of your rights, please contact our data protection officer at

We will respond to any rights that you exercise within a month of receiving your request, unless the request is particularly complex, in which case we will respond within 3 months.

Please note that exceptions apply to some of these rights which we will apply in accordance with the law.

You also have the right to lodge a complaint with the Information Commissioner (ICO) if you think we are not handling your data fairly or in accordance with the law. You can contact the ICO at:

Wycliffe House,
Water Lane,

Tel: 0303 123 1113

[1] Please note that as of 1st January 2021, data protection laws in the UK have changed. The General Data Protection Regulation (EU) 2016/679(GDPR) no longer applies to the UK. However, the UK has incorporated GDPR into domestic law subject to minor technical changes. The Data Protection, Privacy and Electronic Communications (Amendment etc.) EU exit Regulations (DPPEC) came into force in the UK on 1st January 2021. This consolidates and amends the GDPR and UK Data Protection Act 2018 to create the new UK GDPR.

What is your name?
What is your email address?
If you enter your email address then you will automatically receive an acknowledgement email when you submit your response.
What is the name of your organisation?
Is this the official response from your organisation or your own, personal response? Please identify which of the following best describes you: