Skip to main content

0800 917 1000   Open weekdays 9am-5pm


General Information

This privacy notice tells you what you can expect the Inquiry to do with your personal information when you make contact with us.

We’ll tell you:

  • Why we are processing your information

  • What information we require

  • Why we need to process your information

  • What we do with your information

  • How long we will keep your information

  • Your rights relating to the personal information we hold

The first part of this notice is general information for everybody.

Controller’s Contact Details

The Independent Inquiry into Child Sexual Abuse is the data controller for the personal information we process, unless otherwise stated.

The scope and terms of reference of the Inquiry are set out on our website

There are several ways you can contact us, including by phone, email and post. More details can be seen here.

Our postal address is:

Freepost IICSA Independent Inquiry

Information line number: 0800 917 1000

For general enquiries please email

DPO Contact Details

If you have any questions about anything in this document, would like to exercise your data protection rights or think your personal data has been misused or mishandled, you can contact the Data Protection Officer (DPO).

The Data Protection Officer can be contacted by email, phone or post.

Data Protection Officer Freepost IICSA Independent Inquiry

020 3789 2136

Where we keep your personal information

We keep your information secure and only share it with those who have a need to see it. All personal information we receive is handled fairly and lawfully in line with data protection legislation. For our investigations, personal information is included as part of the evidence received.

We design, build and run our systems to make sure that your data is as safe as possible at any stage, both while it’s processed and when it’s stored.

Your personal data may, throughout the course of its processing, be transferred outside of the Eurpoean Economic Area (EEA). Where this is the case, all appropriate technical and legal safeguards will be put in place to ensure that you are afforded the same level of protection as within the EEA.

How long we keep your personal information

Where you use the form to submit information on the Independent Inquiry into Child Sexual Abuse website, we will record your email address and other information you provide, for the purpose of entering into correspondence with you about the matters raised in your form but there is no obligation to share any personal information with IICSA.

All personal details and accounts of child sexual abuse provided to us by those wishing to share their experience through the Truth Project, either in writing or in person, will be securely destroyed at the close of the inquiry.  

Anonymised versions of accounts of child sexual abuse will be published, with permission of those who provide them, on our website. Otherwise, the records of the work of the inquiry will be permanently preserved at The National Archives, in accordance with their guidance, including the evidence used in our hearings and reports, anonymised data used by our Research team, and the website.

Your data protection rights

Under data protection law, you have rights over your personal data. The rights available to you depend on our reason for processing your information.

  • Your right of access You have the right to ask us for copies of your personal information. This right applies for all processing. There are some exemptions, which means we may not always be able to provide all the information we process.

  • Your right to rectification You have the right to ask us to correct information you think is inaccurate or to complete information you think is incomplete. This right always applies.

  • Your right to erasure You have the right to ask us to erase your personal information in certain circumstances. The Inquiry is required to retain some information but will remove as much information as possible following an erasure request.

  • Your right to restrict processing If you have concerns about the accuracy of your information, or about how it is being used, you have the right to restrict the processing until your concerns have been resolved.

  • Your right to object to processing You have the right to object to processing when we are processing you personal information to perform our public task. If you wish to object to processing, the Inquiry will assess whether the requirements of the public task outweigh the grounds of the objection and the DPO will inform you of the outcome of the assessment.

You are not required to pay any charge for exercising your rights. We have one month to respond to you.

Please contact if you wish to make a request or contact our information line on 0800 917 1000.

Sharing your information

In accordance with our Terms of Reference, the Inquiry must pass on to the police a summary of all allegations of child abuse. 

We will ask you if you would like us to give your name and contact details to the police. If you say yes, the police may contact you and they may investigate or take action. We will not be involved in that. If you say no, we will pass the allegations to the police without your name and contact details. 

In a small number of situations, we may have to pass your details to the police or social care without your agreement. We will only do this if you tell us something that suggests that someone might be at risk of significant harm.

The Inquiry might receive a request to disclose the information we hold relating to what you share with us, if you are involved in criminal proceedings. For example, information might be requested by either the prosecution or defence teams where an individual is being prosecuted for child sexual abuse. We will only pass this information on with your consent, or if we are ordered by a court to do so.

We share documents received as part of the Inquiry's investigation with core participants, and redactions are applied in accordance with the Inquiry's Protocol on the Redaction of Documents. Material that is adduced during the Inquiry's public hearing and relied upon by the Panel in their reports is also published on the Inquiry's website.

We use data processors who are third parties who provide elements of services for us. We have contracts in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will not share your personal information with any organisation apart from us. They will hold it securely and retain it for the period we instruct.

Your right to complain

The Independent Inquiry into Child Sexual Abuse works hard to protect your information and maintain high standards when it comes to processing your personal information. If you have any queries or concerns, please contact us at

If you remain concerned about how your personal information is being processed, you can make a complaint to the ICO as the UK supervisory authority.

Managing contact

We may impose a restriction on your access to the Inquiry if it’s necessary to protect our staff from unacceptable behaviour.

If we do this, we’ll explain the restriction we have applied and why we feel it’s necessary. We’ll create a record of the restriction for administration purposes, so relevant staff members know the restriction is in place. This will include your name, contact details and a description of why we have imposed a restriction.

The legal basis we rely on to process your personal data in this way is article 6(1)(e) of the GDPR, which allows us to process personal data when this is necessary to perform our public task. You have the right to object to our processing of your personal data for this reason, however there are legitimate reasons why we may refuse your objection.

The decision to impose a restriction will be taken, and reviewed, by a manager. We’ll write to you explaining why we’ve applied the restriction and we’ll review the restriction periodically. If you no longer communicate with us or if your behaviour has changed, we’ll remove the restriction.

How you can contact us

  • Calling our information line We use a third party provider, Victim Support, to supply and support our information line. These calls will be recorded and a summary provided to IICSA through a secure electronic transfer system, Egress. We also hold statistical information about the calls we receive, but this does not contain any personal data.

  • Sending us post When you send us post a third party screening service, Swiss Post, will scan your mail. They will not open the mail unless there is a significant concern to investigate.

Visitors to our website

  • Analytics When you visit, we use a third-party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of our site. This information is only processed in a way that does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.

    We do collect personal data through our Expression of Interest form, but we’re upfront about this. We make it clear that we’re collecting personal information and explain what we intend to do with it.

  • Cookies You can read more about how we use cookies on our Cookies page. We use a cookies tool which requires explicit opt in action by users of our website. This applies to the non-necessary cookies. Any necessary cookies for functionality and security are not deleted by the tool.


Contact the DPO

If you wish to know what data is held on you, or to make a Subject Access Request please contact the Data Protection Officer (DPO).

  • Call: 020 3789 2136
  • Email:
  • Write: Freepost IICSA INDEPENDENT INQUIRY, for attention of the DPO
Back to top