Privacy notice

The Independent Commission on the Constitutional Future of Wales (‘the Commission’) has been set up to achieve 2 broad objectives. The first is to consider and develop options for fundamental reform of the constitutional structures of the United Kingdom, in which Wales remains an integral part. The second is to consider and develop all progressive principal options to strengthen Welsh democracy and deliver improvements for the people of Wales.

To help us achieve these objectives we engaging with the views of the most important people in this discussion – the citizens of Wales.

Personal data is defined under the General Data Protection Regulation (GDPR) as ‘any information relating to an identifiable person who can be directly or indirectly identified by reference to an identifier’. The engagement work of the commission does not explicitly ask for personally identifiable data. However, correspondents may choose to provide personal data as part of their communication with the commission.

Upon receipt of the information, the Welsh Government becomes the data controller for it.

The lawful basis of processing information in this exercise is our public task, which is exercising our official authority to undertake the core role and functions of the Welsh Government ^{[footnote 1]}. Individual participation is voluntary.

1 The commission is independent from government in the sense that it is able to develop recommendations, seek evidence and otherwise carry out its role without political interference from Ministers. The co-chairs and the commissioners are not employed by the Welsh Government. However, the operational support for the commission is provided by the Welsh Government, and Welsh Government officials will be managing the database of the mailing list.

The personal data of people contacting the commission is collected by Welsh Government officials and held on a database in a secure file, where data can only be accessed by a limited number of Welsh Government officials.

Personal and special category information that will be collected and held includes personal details such as name, address, and contact details.

If you have submitted information or evidence to the commissioner for their consideration, any personally identifiable data will be removed by Welsh Government officials before the information is passed on to the commission.

Personal data will not be shared outside of the Welsh Government. Personal data, such as names, will not be shared with the commission without explicit consent.

In our remit as the data controller, the Welsh Government uses the information received for the below purposes. These purposes are necessary so as to enable us to carry out our public task and in the exercise of our official authority:

• contacting individuals who have expressed a wish to be kept informed of the activity of the Commission
• monitoring the overall engagement with the commission

This list will be expanded as the work of the commission develops.

Under GDPR, you have the following rights in relation to the personal information you provide as part of this evaluation:

• the right of access (request a copy of your own data)
• the right of rectification (correcting incorrect information)
• the right to object to or restrict processing of data
• the right to erasure
• the right to lodge a complaint with the Information Commissioner’s office

If you would like to discuss the storage and processing of your data, you can contact the Welsh Government data protection officer:

Or contact the commission's secretariat:

As per the final right set out above, the information commissioner’s office can be contacted at: casework@ico.org.uk or on 029 2067 8400 / 0303 123 1113. Further details for the information commissioner can be found below.