Open consultation

Energy Code Reform: secondary legislation and code manager licensing consultation - privacy notice

Updated 24 April 2024

This notice sets out how we will process your personal data, and your rights. It is made under Articles 13 and/or 14 of the UK General Data Protection Regulation (UK GDPR).

This is a joint privacy notice issued by the Department for Energy Security and Net Zero (DESNZ) and the Office for Gas Electricity Markets (Ofgem) as joint controllers. When we refer to “we” or “us” in this notice we mean DESNZ and Ofgem.

Your data

This notice only refers to your personal data (your name, address and anything that could be used to identify you personally) not the content of your response to the consultation.

We will process personal data including your name, job title, and contact details. As this is a joint consultation, your personal data will be shared between DESNZ and Ofgem.

Purpose

The purpose(s) for which we are processing your personal data is to record responses to the public consultation titled ‘Energy Code Reform: Consultation on Secondary Legislation and Code Manager Licensing’. This is an essential part of the consultation process so that we:

• know that you’re a real person
• can respond to your comments
• can contact you in relation to future steps and engagement in relation to this consultation and the Energy Code Reform

Legal basis of processing

The legal basis for processing your personal data is Article 6(1)(e) GDPR – (Public Interest Task). In this instance, processing is necessary in order to record responses to our public consultation on ‘Energy Code Reform: Consultation on Code Manager Licencing and Secondary Legislation.’

Recipients

Your personal data will be shared between DESNZ and Ofgem as we are acting as joint data controllers for this consultation. Your personal data may be shared by us with other government bodies where necessary to facilitate Energy Code Reform ^{[footnote 1]}, ^{[footnote 2]}. We may share your data if required to do so by law, for example by court order to prevent fraud or other crime.

We will not:

• sell or rent your data to third parties
• share your data with third parties for marketing purposes

As your personal data will be stored on our IT infrastructure it will also be shared with our data processors Microsoft and Amazon Web Services who provide email, and document management and storage services.

Retention

As this consultation is part of the wider multi-year energy code governance reform programme, the responses received will have an impact on future work, therefore retention may be needed up until 2026.

International transfers

Your personal data will be processed in the UK.

Your personal data will not be processed in the European Economic Area (EEA), or by an international organisation. 

As your personal data is stored on our IT infrastructure and shared with our data processors Microsoft and Amazon Web Services, it may be transferred and stored securely outside the UK. Where that is the case, it will be subject to equivalent legal protection through an adequacy decision, the use of Standard Contractual Clauses or a UK International Data Transfer Agreement.

Your rights

You have the right to:

• request information about how your personal data are processed, and to request a copy of that personal data
• request that any inaccuracies in your personal data are rectified without delay
• request that any incomplete personal data are completed, including by means of a supplementary statement
• request that your personal data are erased if there is no longer a justification for them to be processed
• request in certain circumstances (for example, where accuracy is contested) that the processing of your personal data is restricted
• object to the processing of your personal data where it is processed for direct marketing purposes
• object to the processing of your personal data

To exercise your rights please contact the Data Protection Officer using the contact details below.

Contact details

The data controllers for your personal data are DESNZ and Ofgem.

Contact the DESNZ Data Protection Officer

DESNZ Data Protection Officer
Department for Energy Security and Net Zero
3-8 Whitehall Place
London
SW1A 2EG

Email: dataprotection@energysecurity.gov.uk

Contact the Ofgem data protection officer

Ofgem Data Protection Officer
Ofgem
10 South Colonnade
Canary Wharf
London
E14 4PU

Email: dpo@ofgem.gov.uk

If you are unhappy with the way we have handled your personal data, please write to both Data Protection Officers in the first instance using the contact details above. Please ensure that you copy both email addresses into your correspondence.

Complaints

If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an UK independent regulator. 

Contact the Information Commissioner

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Make a complaint

Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.

Updates to this notice

If this privacy notice changes in any way, we will place an updated version on this page. Regularly reviewing this page ensures you are always aware of what information we collect, how we use it, and under what circumstances we will share it with other parties. The ‘last updated’ date at the bottom of this page will also change.

If these changes affect how your personal data is processed, we will take reasonable steps to let you know.

Last updated: 11 March 2024

1. Background overview of Energy Code Reform ↩

2. Publications relating to Energy Code Reform ↩