Statement of Compliance 2021 (ext)

Closes 28 Jan 2022

Your details

Information about how we use and protect the data that you submit as part of the Statement of Compliance, as well as your rights regarding how we store and process your data, is given in the Privacy Notice below. 

Privacy Notice

This Privacy Notice is provided by The Office of Qualifications and Examinations Regulation (Ofqual), Qualifications Wales (QW) and the Council for the Curriculum, Examinations and Assessment (CCEA Regulation).

We are 'joint controllers' for the purposes of the General Data Protection Regulation (UK GDPR) and Data Protection Act 2018 ('Data Protection Laws').

We ask that you read this Privacy Notice carefully as it contains important information about our processing of Statements of Compliance (SoC) and your rights.


In accordance with the General Conditions of Recognition (Ofqual and CCEA Regulation), and Standard Conditions of Recognition (QW) awarding organisations must provide to Ofqual, CCEA Regulation and QW an annual Statement of Compliance.

A Statement of Compliance includes personal data, for example you are required to provide us with the name of the Responsible Officer and Chair, and may include additional personal data within the Statement of Compliance.  Ofqual will arrange for the collection of the Statement of Compliance and share responses with the respective regulators in accordance with the joint data controller arrangement.

Ofqual, QW and CCEA Regulation will use your response to inform our respective regulatory activities concerning an awarding organisation's compliance with our respective regulations. 

Our legal basis for processing your personal data

Our processing of personal data is necessary for the performance of a task carried out in the public interest and in exercise of official authority.

With whom will my personal data be shared?

Ofqual will share your response to relevant questions in full by excel file transfer through the shared collaboration space, with QW and CCEA Regulation where you are also recognised/accountable to them. This will include the AO name, the name of the Responsible Officer and Chair, and will include any other personal data contained within the statement of compliance. The relevant questions will be organisational stability, IT risk management, and compliance/non-compliance current/future. Ofqual is the only regulator interested in EPAs and so responses to these will not be shared with other regulators.

A Joint Controller arrangement has been established with QW and CCEA Regulation distributing the responsibilities among the data controllers.

Please note that we are using the platform Citizen Space which is part of Delib Limited to gather this information and they act as our data processor. They will only process your information in accordance with data protection law, and keep it secure. For further details please visit Citizen Space's Privacy Notice.

For further details of the Privacy Notices of each regulator, see Ofqual, Qualifications Wales and CCEA Regulation’s notices.

How long will we keep your personal data?

Ofqual and QW will keep the Statement of Compliance for 10 years, and CCEA Regulation will keep the Statement of Compliance for the time that the Awarding Organisation remains recognised. Your personal data will be retained with the Statement of Compliance as it may be important to know who submitted and signed off the Statement of Compliance in the future, should there be any future issues with an AO’s compliance.

How we keep your data secure

We implement appropriate technical and organisational measures in order to protect your personal data against accidental or unlawful destruction, accidental loss or alteration, unauthorised disclosure or access and any other unlawful forms of processing.

Your rights, e.g. access, rectification, erasure

You have the right to:

  • Tell us you don’t want us to use the personal data you have given to us
  • Ask to see the information we hold
  • Ask us to change information you think is wrong
  • Ask us to remove information when it’s not needed anymore
  • Be told how we use your information

Please note that some of these rights are qualified and may not apply.

The controllers are not carrying out any automated decision making.

If you have questions about your rights, you can speak to our Data Protection Officer, who will be able to help you and answer any questions that you have.

If you have any questions in relation to how we process your personal data as explained in this Privacy Notice or need extra help, would like this notice in another format (for example: audio, large print, braille) please contact the relevant Data Protection Officer using the contact details below:

Names of Data Protection Officers:

Shafim Kauser, Ofqual,

Earlsdon Park, 53-55 Butts Road, Coventry, CV1 3BH

Telephone number: 0300 303 3344

Contact via the Portal


Helen Murray, Qualifications Wales,

Q2 Building, Pencarn Lane, Imperial Park, Coedkernew, Newport, NP10 8AR

Telephone number: 01633 373222



David Wilson, CCEA Regulation,

29 Clarendon Road, Clarendon Dock, Belfast, BT1 3BG


If you want to speak to somebody not at one of the 3 regulators or issue a complaint, you can call the people who look after information, called the Information Commissioner’s Office ("ICO"), on 0303 123 1113 or visit their website

1. What is your name?
2. What is your email address?
If you enter your email address then you will automatically receive an acknowledgement email when you submit your response.
3. Are you the Responsible Officer?
4. What is the name of your Awarding Organisation?