Skip to main content
Open call for evidence

The Marginal Cost Restriction on Public Sector Data Re-use: privacy notice

Published 15 July 2026

© Crown copyright 2026

This publication is licensed under the terms of the Open Government Licence v3.0 except where otherwise stated. To view this licence, visit nationalarchives.gov.uk/doc/open-government-licence/version/3 or write to the Information Policy Team, The National Archives, Kew, London TW9 4DU, or email: psi@nationalarchives.gov.uk.

Where we have identified any third party copyright information you will need to obtain permission from the copyright holders concerned.

This publication is available at https://www.gov.uk/government/calls-for-evidence/the-marginal-cost-restriction-on-public-sector-data-re-use-call-for-evidence/the-marginal-cost-restriction-on-public-sector-data-re-use-privacy-notice

This privacy notice explains how the Department for Science, Innovation and Technology (DSIT) will process personal data submitted as part of the Call for Evidence on Better Realising the Value of Public Sector Data. This notice is provided under Articles 13 and 14 of the UK General Data Protection Regulation (UK GDPR).

The Department for Science, Innovation and Technology (DSIT) is the Data Controller for the use of personal data covered by this privacy notice.

This Call for Evidence is seeking perspectives from third parties on whether it would be appropriate for public bodies to be able to charge for the re-use of more public sector data than they are currently legally able to.

Your data

DSIT may process the following personal data provided through your response:

  • Name
  • Job title
  • Organisation
  • Email address
  • Any personal data voluntarily included within your response

Respondents should avoid including unnecessary personal information about themselves or other individuals within free-text responses.

Purpose

DSIT is collecting and processing personal data to:

  • administer the Call for Evidence;
  • analyse and understand responses received;
  • inform the development of government policy relating to public sector data;
  • prepare analysis, summaries and publications arising from the Call for Evidence;
  • contact respondents where clarification of a response is required.

Responses may be used to help inform future policy development, stakeholder engagement and associated analytical work relating to public sector data.

The legal basis for processing your personal data under Article 6(1)(e) UK GDPR is that processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in DSIT.

DSIT is responsible for developing policy relating to data, innovation and the digital economy, and the processing of personal data as part of this Call for Evidence supports those official functions.

Recipients

Your personal data may be shared with:

  • officials within DSIT involved in the development of this policy;
  • other relevant government departments where necessary to support analysis of responses and policy development;
  • contracted suppliers providing analytical, research, digital or consultation support services who process your personal data only on DSIT’s instructions and do not retain or use your personal for their own purposes.

As part of our IT infrastructure, personal data may be stored on systems provided by Microsoft and Amazon Web Services. These organisations act as data processors supporting government IT systems and infrastructure.

Use of AI tools

DSIT may use analytical and artificial intelligence tools to assist officials in reviewing and summarising responses.

Retention

Personal data collected through this Call for Evidence will be retained only for as long as necessary, but no longer than 2 years, to support policy development, analysis, publication activities, record management requirements and compliance with public records obligations.

Responses and associated personal data will be retained in accordance with DSIT’s records management and retention policies.

Automated decision-making

Your personal data will not be subject to automated decision-making that produces legal effects or similarly significant effects.

International transfers

Your personal data will be processed in the UK.

Your rights

Under UK GDPR you have the right to:

  • request information about how your personal data is processed;
  • request access to your personal data;
  • request that inaccurate personal data is corrected;
  • request completion of incomplete personal data;
  • request restriction of processing in certain circumstances;
  • object to the processing of your personal data where processing is based on a public task.

To exercise these rights, please contact the DSIT Data Protection Officer using the details below.

Contact details

The data controller is the Department for Science, Innovation and Technology (DSIT).

DSIT Data Protection Officer
Department for Science, Innovation and Technology
22–26 Whitehall
London
SW1A 2EG

Email: dataprotection@dsit.gov.uk

Complaints

If you are unhappy with how your personal data has been handled, you should contact the DSIT Data Protection Officer in the first instance.

You also have the right to complain to the Information Commissioner’s Office (ICO).

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Make a complaint to the ICO

Updates to this notice 

If this privacy notice changes in any way, we will place an updated version on this page. Regularly reviewing this page ensures you are always aware of what information we collect, how we use it, and under what circumstances we will share it with other parties. The ‘last updated’ date at the bottom of this page will also change. 

If these changes affect how your personal data is processed, we will take reasonable steps to let you know. 

Last updated:   15 July 2026.

Back to top