Confidentiality policy
Updated 17 July 2026
© Crown copyright 2026
This publication is licensed under the terms of the Open Government Licence v3.0 except where otherwise stated. To view this licence, visit nationalarchives.gov.uk/doc/open-government-licence/version/3 or write to the Information Policy Team, The National Archives, Kew, London TW9 4DU, or email: psi@nationalarchives.gov.uk.
Where we have identified any third party copyright information you will need to obtain permission from the copyright holders concerned.
This publication is available at https://www.gov.uk/government/publications/dbt-standards-for-official-statistics/confidentiality-policy
Introduction
The Department for Business and Trade (DBT) produces official statistics in line with practices required in the Code of Practice for Statistics. This statement sets out the department’s commitments on confidentiality (standard 4.5).
Data management and retention
For information relating to data management and retention, including the handling of personal data, see our Data management policy.
Disclosure and confidentiality
DBT is prohibited from disclosing data relating to individual undertakings without consent. DBT’s management of personal data is also regulated by the General Data Protection Regulation (GDPR). Where DBT outputs are produced from data provided by other bodies, they may also be subject to the legislation, policies and data-sharing agreements of that body.
DBT follows the Government Statistical Service (GSS) disclosure control guidance to inform its approach to confidentiality. There is separate guidance covering:
DBT protects the security of our data to maintain the privacy of individuals and businesses, putting in place practices so that statistics will be produced that are unlikely to identify an individual or business. It is not possible to fully eliminate the risk of disclosure, but in line with GSS guidance DBT balances the risk of disclosure against maintaining the utility of the data.
Due to the complexity of decisions around managing confidentiality, policies for different individual DBT outputs may vary from this central policy. Such differences will be detailed in the respective publication.
In the case of a suspected breach of confidentiality, DBT’s Chief Statistician will be notified. The Chief Statistician will investigate whether this needs to be escalated to the Office for Statistics Regulation (OSR).
Our statistical practice is regulated by the OSR.