The Children’s Commissioner’s Office (CCO) collects non-identifiable data on children in order to produce up-to-date evidence on the lives, experiences, views and outcomes of children. This evidence informs the Children’s Commissioner’s priorities and policy recommendations, enabling her to better represent the rights, interests and views of children.
The CCO may collect data directly from you, for example through a survey, interview or focus group; or we may instruct other organisations to provide us with data. We then analyse this data to report general insights, themes and patterns across many children, rather than the details of a specific child. We never publish any information that could allow a person to be identified, unless that person has specifically consented to it or requested it.
If we collect your personal data from another source, we will:
If we collect data through a survey, we will never ask for your name or any other information which might identify you.
If you take part in an interview or focus group with our trained staff, we will ask you (or a parent/guardian) to sign a consent form so we have a record of your consent to take part. Click below for more information on consent forms.
If you take part in an interview or focus group with the CCO, we will ask you to sign a consent form first. A consent form confirms that you are happy to speak with us, that you understand what is happening, and that you have the right to stop any time for any reason. These forms are important for us to show that we have gathered information from you in ethical ways. If you are younger than 16, we may ask your parent/guardian to sign the consent form on your behalf.
We keep consent forms for as long as we keep the records from the interview or focus group. We keep consent forms because you have the right to withdraw your consent at any time, even after the research has finished.
You may be invited to take part in an interview remotely which will involve us calling you on the phone or using an online solution such as Microsoft Teams or Zoom.
If you take part in a remote interview we will always:
Information which will be collected by the online service provider when using an online solution:
The CCO does not keep any of this information. The online service provider will record this data for as long as required but will not provide anyone else with access.
We use data to provide the Children’s Commissioner with up-to-date evidence on children’s experiences, views, and outcomes. This evidence informs the rest of the work that we do. It also gives the Commissioner the evidence to stand up for children’s rights and represent their voices, and to support her policy recommendations to the government.
All staff receive training on how to handle personal information confidentially.
Use the links below to find out more about how we use information.
The Children’s Commissioner represents the rights and interests of children in England. To do this well, the Commissioner must have the latest evidence and often will look at issues in a way that no other organisation will. Data collected by the CCO will be used to provide this evidence to the Commissioner and answer the questions and address issues that children and young people have told her are important to them.
The data isn’t just used to make recommendations about changes that are needed nationally. The Commissioner will also provide information to local areas so that they can make positive changes in the services they offer to their communities.
The CCO does not use data for profiling or automated decision making.
The Children’s Commissioner can instruct individuals in public positions to provide information which they hold to the Commissioner if that data is relevant to issues affecting children. This ability is granted under Section 2F of the Children Act 2004.
For information to be shared with the Commissioner in this way it must be information which that person can legally share, and the Commissioner must demonstrate that the data is needed to further her work and perform her functions.
The Children’s Commissioner has a duty to involve children in her work by consulting with them and organisations working with children when investigating issues relating to them. This duty is set out under Section 2B of the Children Act 2004 and provides the lawful basis for research carried out directly with children, such as surveys, interviews or focus groups. Taking part in this kind of research is voluntary and no one has to take part if they don’t want to.
Section 2E of the Children Act 2004 grants the Children’s Commissioner and her staff the ability to enter premises other than private dwellings for the purpose of conducting interviews with children or observing the standard of care provided to children accommodated or otherwise cared for there. This is the lawful basis used by CCO to conduct interviews in a range of settings including care homes, residential schools, young offenders institutes or hospitals.
Click this link for more information about the lawful basis for processing personal and special category data.
The Data Protection Act (DPA) and the General Data Protection Regulations (GDPR) set out the rights of individuals when it comes to their data and the use of data by organisations. The DPA and GDPR have several articles which set out the requirements that organisations need to meet in order to process personal data. There are additional requirements for organisations that need to process sensitive information known as ‘special category’ data.
Section 2 of the Children Act 2004 sets out that:
The primary function of the Children’s Commissioner is to promote and protect the rights of children in England. This includes promoting awareness of the views and interests of children in England. In carrying out this function the Commissioner may: consider the potential effect on the rights of children of government policy proposals and government proposals for legislation; and, investigate any other matter relating to the rights or interests of children.
This function means that the CCO can process personal data under Article 6(1)(e) of GDPR: ‘processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller’.
Sometimes the Commissioner will require information on ‘special category’ data such as ethnicity or disability. Find more information on ‘special category data.
When we process special category data we do so under GDPR Article 9(2)(g): ‘processing is necessary for reasons of substantial public interest, on the basis of Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject’
In relying on the substantial public interest condition in Article 9(2)(g) the CCO must also demonstrate that it meets one of the 23 specific substantial public interest conditions set out in Part 2 of Schedule 1 of the DPA 2018.
The substantial public interest condition which is relevant to the CCO is Schedule 1, Part 2(6), ‘statutory and government purposes’.
Schedule 1 Part 2,6(1) sets out that:
6 (1) This condition is met if the processing—
(2) Those purposes are—
The CCO collects many different categories of data from different sources. The CCO rarely collects information which could be used to identify you such as name or date of birth. The exception to this is when consent forms are required; click here for more information. The CCO may collect ‘pseudonymised’ unique identifiers which indicate that a record belongs to a unique individual but does not reveal that person’s identity. Under GDPR this is still personal sensitive data.
The types of information we collect are:
We keep data for two years after we receive it. After that, if the data is no longer required it will be securely destroyed. We may decide to keep data for longer if we have a legitimate reason to keep it, for example, if we still need the data for ongoing research.
The CCO gathers data from other public sector bodies such as:
The CCO occasionally runs surveys directly with children through providers such as YouGov and Childwise.
The CCO will also work directly with children for qualitative research. We get in touch with children and young people in lots of different ways, for example through:
Under the terms of the Data Protection Act 2018 you are entitled to ask any data controller:
Requests for your personal information in this way are known as subject access requests.
Unless you have taken part in an interview or focus group with us, we cannot identify you in in any research data that we hold.
If you have taken part in an interview or focus group with us, you, or your parent or guardian, will have signed a consent form and can submit a ‘subject access request’ asking for the information that we hold on you. You can do this using the contact information below. If you submit a subject access request, we may ask for proof of your identity to ensure that we are releasing the correct information.
For all other data we collect, such as that from the Department for Education, we do not collect personally identifiable information. This means that while we may possess large sets of data that may contain your details alongside those of many other children, we will not know which specific data is yours because our data does not include people’s names, addresses or contact details. In cases such as this, you will need to make the subject access request to the original data controller who has provided your data to CCO.
If you have any questions about how we look after your personal information or this policy, please contact us:
Post: Data Protection Officer, The Children’s Commissioner’s Office, Sanctuary Buildings, Great Smith Street, London, SW1P 3BT
Telephone: 020 7783 8330
This policy was last modified on 1 June 2020.