How the Capture Redress Scheme Independent Panel and the Panel Chair Will Process Your Personal Data

Introduction
If you are engaged with the Capture Redress Scheme, you may wonder how the personal information you share is handled by the independent panel and the panel chair. This post explains, in clear terms, how your data is collected, used, stored, and protected throughout the case-handling process, and what rights you have as a data subject. It is written to help you understand the safeguards that are in place and the roles of those involved in the decision-making process.

What data is collected and from where
– When you submit a claim or request redress, the scheme collects information that identifies you (such as name and contact details) and information about your case. This may include dates, locations, the nature of the incident, supporting documents, and any statements or evidence you provide.
– The scheme may also receive information from third parties with your consent or as required by law (for example, from witnesses, medical professionals, or counsel involved in the case).
– In some circumstances, the panel may rely on information provided by the respondent or other relevant organisations that are part of the case record.

Why the data is processed (the lawful basis)
– UK GDPR and the Data Protection Act 2018 require a lawful basis for processing personal data. For the Capture Redress Scheme, data processing by the independent panel and the panel chair is conducted to perform a task in the public interest or under official authority, and to fulfil the scheme’s statutory duties.
– Where processing involves special category data (for example, health information or data revealing sensitive personal attributes), additional safeguards are applied. This may include ensuring that processing is strictly necessary for the purposes of handling the case and that suitable protections are in place, or relying on your explicit consent where appropriate.

How your data is used in the review process
– The data is used to assess eligibility for redress, to enable the panel to review the facts, and to make informed decisions. It also supports the preparation and delivery of decision letters and any accompanying explanations.
– The information may be used for internal management of the case, for creating a complete and auditable record, and for producing anonymised statistics to help improve the scheme’s operation without exposing individuals’ identities.
– The panel chair and other panel members rely on the data to ensure a fair and thorough consideration, in accordance with the scheme’s rules and procedures.

Who can see your data and why
– The independent panel members, including the panel chair, have access to the information that is necessary to carry out their duties in a given case.
– Scheme staff who administer and support the panel’s work may also access data strictly as required for case management (for example, handling communications, coordinating evidence, or organising hearings). They are bound by confidentiality and data protection obligations.
– External advisers (such as legal, medical, or technical experts) may be engaged to provide specialist input. Any sharing with external advisers is governed by data processing agreements that require them to protect your information.
– In some instances, it may be necessary to share information with regulators, auditors, or other bodies that oversee the scheme. In all cases, data sharing is limited to what is required and subject to appropriate legal and contractual safeguards.
– You will be informed if there is a need to disclose information to a third party who is not otherwise involved in the case, and your consent or another lawful basis will be sought where required.

Data security and integrity
– Personal data is stored securely and accessed only by authorised personnel. The scheme uses technical and organisational measures to protect data from unauthorised access, loss, or disclosure.
– Data is processed in a manner that ensures its accuracy and is kept up to date where you have provided updated information. Where data is no longer needed for the purpose it was collected, it will be securely disposed of in accordance with the retention schedule.

Retention and deletion
– The scheme maintains records for as long as is necessary to complete the case and to comply with legal, regulatory, and operational requirements. After the retention period ends, data is securely deleted or anonymised so that individuals can no longer be identified from the records.

Transfers and cross-border considerations
– If your personal data is stored or processed outside the United Kingdom, it will only be done in compliance with UK data protection law and with safeguards to protect your information (for example, standard contractual clauses or other approved transfer mechanisms).
– Where possible, data processing occurs within trusted environments that align with the scheme’s obligations and your rights under the UK GDPR.

Your rights as a data subject
– Access: You have the right to be informed about what data is held about you and to receive a copy of it.
– Rectification: You can request corrections to inaccurate or incomplete data.
– Erasure: In certain circumstances, you may request the deletion of your data, subject to the scheme’s legal obligations and its ability to continue processing for the purposes of the case.
– Restriction: You may request that processing of your data be restricted in certain situations.
– Objection: You can object to processing based on grounds related to your particular situation, where appropriate.
– Data portability: In some cases, you may request a portable copy of your data in a structured, commonly used format.
– Complaint: If you are unhappy with how your data is handled, you can raise a concern with the scheme and, if necessary, contact the Information Commissioner’s Office (ICO) in the UK.

Exercising your rights and getting help
– The scheme’s privacy notice and contact details for the Data Protection Officer or privacy team provide clear steps to exercise your rights. If you have any questions or concerns about how your data is processed, you should contact the privacy team in the first instance.
– If you are unsure about your rights or the handling of your data, you can seek independent advice or raise a complaint with the ICO.

A practical view of the process
– At the outset, you’ll be told how your data will be used and who may access it.
– Throughout the case, the independent panel and the panel chair will rely on the minimum amount of information necessary to reach a fair decision, with ties to the statutory duties of the scheme.
– You will be kept informed about key developments and any expected disclosures of information to third parties.
– After a decision is reached, your data is handled according to the retention policy, including any post-decision communications and the future use of anonymised data for improvement and reporting purposes.

Conclusion
Protecting your personal data is a fundamental part of how the Capture Redress Scheme operates. By understanding the flow of information—from collection through to retention and rights—you can engage with the process with confidence, knowing that safeguards and professional standards guide every step taken by the independent panel and the panel chair. If you have specific questions about how your data is being processed in your case, the privacy team is there to help and can provide a personalised explanation aligned with the scheme’s privacy notices.

February 10, 2026 at 02:05PM
指南：Capture Redress Scheme：独立评审小组及其主席隐私通知

Capture Redress Scheme 独立评审小组及其主席将如何处理您的个人数据。

阅读更多中文内容： Capture Redress Scheme 独立小组与小组主席如何处理您的个人数据