Guidance

Privacy notice: UK City of Culture 2029 Competition and Expert Advisory Panel Recruitment

Published 30 October 2025

© Crown copyright 2025

This publication is licensed under the terms of the Open Government Licence v3.0 except where otherwise stated. To view this licence, visit nationalarchives.gov.uk/doc/open-government-licence/version/3 or write to the Information Policy Team, The National Archives, Kew, London TW9 4DU, or email: psi@nationalarchives.gov.uk.

Where we have identified any third party copyright information you will need to obtain permission from the copyright holders concerned.

This publication is available at https://www.gov.uk/government/publications/uk-city-of-culture-2029-expression-of-interest/privacy-notice-uk-city-of-culture-2029-competition-and-expert-advisory-panel-recruitment

Who is collecting my data?

The Department for Culture, Media & Sport (DCMS) helps to drive growth, enrich lives and promote Britain abroad.

We protect and promote our cultural and artistic heritage and help businesses and communities to grow by investing in innovation and highlighting Britain as a fantastic place to visit. We help to give the UK a unique advantage on the global stage, striving for economic success.

This website (“Website“) is run by the Department for Culture, Media & Sport (“we”, “us” and “DCMS”).
DCMS is the controller for the personal information we process, unless otherwise stated.

Purpose of this privacy notice

This notice is provided to meet the obligations set out in Article 13 of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA).

It explains how we will use your personal data as part of our legal obligations with regard to data protection.

The DCMS personal information charter explains how we deal with your information and how you can ask to view, change or remove your information from our records.

What is personal data?

Personal data is any information relating to an identified or identifiable living person (a ‘data subject’).
A data subject is someone who can be recognised, directly or indirectly, by information such as:

  • a name
  • an identification number
  • location data
  • an online identifier
  • data relating to their physical, physiological, genetic, mental, economic, cultural or social identity

These types of identifying information are known as ‘personal data’.
Data protection law applies to the collection, use and storage of personal data.

Why are we collecting your personal data?

Data from bidders

At all bidding stages of the UK City of Culture competition, DCMS will process the names, addresses and email addresses provided by bidders, and information about which organisations respondents belong to (where provided).

This information is processed by DCMS to:

  • conduct organisational checks for the purposes of grant making
  • maintain contact during the programme

DCMS may use publicly available information about you to carry out background checks to assess any risks to public funding in making a grant to your organisation.

Data from expert advisory panel applicants

DCMS is conducting open recruitment to appoint members of the UK City of Culture 2029 Expert Advisory Panel, including a panel representative for each of the UK Devolved Governments.

Data collected during this recruitment will be processed by DCMS to:

  • manage applications for the purposes of recruiting the panel
  • maintain contact during the recruitment period

Our legal reason for collecting and processing this personal data is Article 6(1)(e) of the UK GDPR:
> It is necessary to perform a public task — to carry out a public function or exercise powers set out in law, or to perform a specific task in the public interest that is set out in law.

Who will your data be shared with?

Bidders’ data

All bidders’ data collected during the UK City of Culture 2029 competition is shared by DCMS with members of an assessment panel (consisting of expert external assessors) for the purposes of running this programme.

Data will be held by DCMS for oversight, audit and assurance purposes — to prevent fraud and ensure that money is being spent in accordance with regulations and programme objectives.

DCMS may also share data with an external evaluator for the purpose of evaluating this programme.

We will only share personal data necessary for their work, and subject to appropriate security measures.

Personal data may be shared with fraud prevention agencies to prevent fraud and money laundering and to verify your identity.
If fraud is detected, you could be refused certain services, finance or employment.

Expert advisory panel applicants’ data

All data collected from applicants (including names, supporting statements and CVs) will be shared by DCMS with the interview panel for the recruitment campaign.
The interview panel will include:

  • the UK City of Culture 2029 Panel Chair and Deputy Chair (expert external assessors)
  • for Devolved Government representatives, a nominated assessor from the Devolved Government

Data is shared only for the purposes of running the recruitment process and selecting a panel.

It will be held by DCMS for recruitment management and contact purposes during the period.

How long will my data be held for?

  • Successful applicants or grant recipients: 7 years, erased by March 2033
  • Unsuccessful applicants: 2 years

Will my data be used for automated decision making or profiling?

We will not use your data for any automated decision making.

Will my data be transferred outside the UK?

We will not send your data overseas.

What are your data protection rights?

You have rights over your personal data under the UK GDPR and the Data Protection Act 2018 (DPA 2018).

The Information Commissioner’s Office (ICO) is the supervisory authority for data protection legislation and provides a full explanation of your rights on its website.

DCMS will ensure your rights are upheld when processing your data.

How do I complain?

Data Controllers: dcmsdataprotection@dcms.gov.uk

Data Protection Officer
Department for Culture, Media & Sport
100 Parliament Street
London
SW1A 2BQ

Email: dpo@dcms.gov.uk

If you’re unhappy with the way we have handled your personal data, please write to the Department’s Data Protection Officer or Data Protection Manager.

How to contact the Information Commissioner’s Office (ICO)

If you believe your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator.
You may also contact them for independent advice about data protection, privacy, and data sharing.

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Any complaint to the ICO is without prejudice to your right to seek redress through the courts.

For wider queries about the competition, contact:
ukcityofculture2029-competition@dcms.gov.uk

Changes to our privacy notice

We may make changes to this privacy notice.
When we do, the ‘last updated’ date at the bottom of this page will also change.

If these changes affect how your personal data is processed, DCMS will take reasonable steps to let you know.

Last updated: 28 October 2025

Back to top