Notice

Life Sciences Innovative Manufacturing Fund (LSIMF): privacy notice

Updated 5 September 2025

This notice sets out how we will process your personal data, and your rights. It is made under Articles 13 and/or 14 of the UK General Data Protection Regulation (UK GDPR).

The purpose for which we are processing your personal data is to support our assessment of bids in the LSIMF.

For the purposes of the UKGDPR, The Department for Science Innovation and Technology (DSIT) are the Data Controller.

Your data

We will process the following personal data collected directly via the application process:

  • name, job title and contact details (email addresses and telephone numbers) of lead contacts at applicant organisations
  • names, job titles and contact details (email addresses and telephone numbers) of key project personnel.

Personal data may also be collected outside the application process (see ‘how we collect your data’ below, and may also include:

  • Date or year of births
  • Partial or full addresses
  • Criminal offence data, media presence of directors, significant shareholders, lead or key project personnel
  • Published sanctions information
  • Publicly listed disqualifications

How we collect your data

  • Information provided to us through the application process, including during the due diligence process
  • Information provided to us by partner organisations in order to complete the application process and due diligence
  • information provided through screening software applications (which is open-source)
  • information obtained through open source, for example:
    • Published sanctions lists of designated persons (for example, HMT)
    • Publicly available notices of debarment and regulatory sanctions
    • Insolvency register
    • Company registries
    • The Charities Commission

Purpose

The purpose(s) for which we are processing your personal data includes:

  • To enable assessment of bids in the LSIMF, including due diligence assessment
  • To support monitoring of the operational delivery of the scheme
  • To enable evaluation of the scheme to understand its impact and to inform future government policy
  • For the prevention, investigation and detection of fraud
  • For compliance with sanctions legislation
  • To assess financial risks
  • To contact you as part of the appraisal of your application and to notify you that the window for submitting your application is due to expire or to request feedback.

The legal basis for processing your personal data under Article 6 of the UK GDPR is

1(e)Public task: Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller, which includes overseeing the proper execution of LSIMF to ensure funds are dispersed to eligible projects and companies and achieve highest value for money for the taxpayer.

Criminal offence data is processed under Schedule 1, Part 2, Paragraph 6 of the Data Protection Act 2018, which permits processing for reasons of substantial public interest where it is necessary for the exercise of a function of a government department.

Recipients

To enable appropriate processing and assessment of applications, your personal data may be shared, where necessary, with various parties to improve the government’s ability to support the Life Sciences sector, to ensure the effective assessment of applications, to enable monitoring and evaluation of the scheme, and to assist with the prevention, investigation, detection or prosecution of criminal offences, including fraud.

Data will be shared with other governmental bodies (His Majesty’s Government departments and agencies), agencies and industry experts if they are involved in assessment and proceeding monitoring period, the issuing of grant funding or to improve the government’s ability to support the Life Sciences sector. This includes, but is not limited to:

  • Department for Business and Trade (DBT)
  • Department for Energy Security and Net Zero (DESNZ)
  • HM Treasury (HMT)
  • Department for Health and Social Care (DHSC)
  • UK Health Security Agency (UKHSA)
  • Cabinet Office (CO)
  • National Audit Office (NAO)
  • UK Research and Innovation (UKRI)
  • Jeremy Benn Associates Limited (JBA)
  • Medicines and Healthcare Products Regulatory Agency (MHRA)
  • Trusted external Manufacturing Experts whose expertise fall within the requirements of the public task
  • The fund’s external evaluator

Jeremy Benn Associates (JBA) are contracted by UK government, manage the online platform through which candidates submit their applications. JBA host the application forms without assessing the bids and adhere to the same data retention requirements as the UK Government.

As part of our IT infrastructure, your personal data will be stored on systems provided by our data processors – Microsoft and Amazon Web Services. This does not mean we actively share your personal data with these entities; rather, they are technical service providers who host infrastructure supporting out IT systems.

Retention

The fund is open from summer 2024 to 2030 and will be made up of several application rounds according to the total investment size.

Application and assessment processing times vary, but typically take 6 months from the application date. Personal data retention aligns with customary periods for each individual application and assessment.

Automated decision making

Your personal data will not be subject to automated decision making.

International Transfers (include the relevant paras)

Your personal data will be processed in the UK and European Economic Area (EEA).

Due to the Department’s IT Infrastructure, your personal data may be processed at data centres outside of the UK, but will remain within the EEA. Your data will receive the same level of protection in the EEA as it does in the UK, through the safeguard of Adequacy Decisions.

Your rights

You have the right to request information about how your personal data are processed, and to request a copy of that personal data.

You have the right to request that any inaccuracies in your personal data are rectified without delay.

You have the right to request that any incomplete personal data are completed, including by means of a supplementary statement.

You have the right to request that your personal data are erased if there is no longer a justification for them to be processed.

You have the right in certain circumstances (for example, where accuracy is contested) to request that the processing of your personal data is restricted.

You have the right to object to the processing of your personal data

To exercise your rights please contact the Data Protection Officer using the contact details below.

Contact us

Data Controller

The data controller for your personal data is the Department for Science, Innovation and Technology (DSIT) You can contact the DSIT Data Protection Officer at:

You can contact the DSIT Data Protection Officer at:

DSIT Data Protection Officer

Department for Science, Innovation and Technology
22-26 Whitehall
London
SW1A 2EG

If you are unhappy with the way we have handled your personal data, please write to the department’s Data Protection Officer in the first instance using the contact details above.

Please contact LSIMF@officeforlifesciences.gov.uk if you need to update the personal details of the project lead.

Make a complaint

If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator. The Information Commissioner can be contacted at:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113.

Email:icocasework@ico.org.uk.

Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.

Updates to this notice

If this privacy notice changes in any way, we will place an updated version on this page. Regularly reviewing this page ensures you are always aware of what information we collect, how we use it, and under what circumstances we will share it with other parties. The ‘last updated’ date at the bottom of this page will also change.

If these changes affect how your personal data is processed, we will take reasonable steps to let you know.

Last updated: 15 July 2025