Code changes in relation to data protection
A Consultation on data protection in the Code of Fundraising Practice took place between 5 October and 8 December 2017. Responses were received by or on behalf of 104 organisations, with a further 2 from individuals (see list of respondents at Annex B).
Annex A summarises amendments proposed in response to comments received from the consultation.
Content of responses
Annex A summarises amendments proposed in response to comments received in the consultation. The spread of responses received was as follows:
Type of respondent | Number of responses in this category
- Statutory bodies (including the Information Commissioner’s Office) - 2
- Umbrella bodies - 3
- Joint response from groups of charities - 2 (covering 36 individual charities)
- Direct marketing and legal specialist organisations - 11
- Individual organisations - 52
- Individuals - 2
Total - 106
Key points
Many responses centred on the technical application and interpretation of the law in specific areas of fundraising practice. However points repeated by a large proportion of participants included the need to:
- clarify the extent to which organisations are required to follow ICO guidance (see Annex A, section 5.1.2).
- ensure that future legal changes (including the Data Protection Bill and changes to PECR) are incorporated within the Code (see Annex A, section 5.1.1).
- ensure that wording and definitions in the Code are as close as possible to the wording in GDPR / PECR and in ICO guidance. (see Annex A, section 5.2, 5.2.2, 5.2.5, 5.5.3-4, 5.5.6, 8.2.3).
- The need to ensure that the relationship between GDPR and the Privacy and Electronic Regulations (2003) are made clear (see Annex A, section 5.5.1).
ICO response and the Data Protection Bill
The ICO have responded to the consultation and their amendments to the changes proposed are highlighted in Annex A. The Fundraising Regulator has also taken advice regarding publication timescales in light of the new Data Protection Bill being enacted (this will import GDPR into UK law and is unlikely to receive royal assent before April 2018). The ICO is content with the Fundraising Regulator publishing the revised Code in advance of the new Data Protection Bill as long as this impending new legislation is flagged in the revised Code.