Privacy Notice

This notice sets out how we will use your personal data.  It also sets out your rights. It is made under Articles 13 and/or 14 of the General Data Protection Regulation (GDPR).

Your Data


The purpose(s) for which we are processing your personal data is:

  • to conduct an Investigation into the First Minister of Wales’ actions and decisions in relation to Carl Sargeant’s departure from his post as Cabinet Secretary for Communities and Children and thereafter; and
  • after the Investigation has been completed, to create a Welsh public record and to permanently preserve it under the terms of the Public Records Act 1958 (as amended).

The data

If it is given to us as part of the Investigation, we will process the following personal data:

  • your name, address, email address, phone number, date of birth, place of work, job title etc;
  • your opinions about the subject matter of the Investigation; and
  • other individuals’ opinions about you.

It is possible that sensitive personal data is given to us.  Sensitive personal data is personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation.

Legal basis of processing

The legal basis for processing your personal data is that processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller, such as the exercise of a function of the Crown, a Minister of the Crown, or a government department; the exercise of a function conferred on a person by an enactment; the exercise of a function of either House of Parliament; or the administration of justice.

This Investigation has been set up under s71 of the Government of Wales Act 2006.  This empowers the Welsh Ministers, First Minister or Counsel General to “do anything …which is calculated to facilitate, or is conducive or incidental to, the exercise of any of their other functions”.

The Welsh Government considers the relevant function is that contained in s48 of the 2006 Act.  This states, among other things, that:

  • The First Minister may, with the approval of Her Majesty, appoint Welsh Ministers from among the Assembly members…..

(3) A Welsh Minister appointed under this section may be removed from office by the First Minister.

The legal basis for processing sensitive personal data is that processing is necessary for reasons of substantial public interest for the exercise of a function of the Crown, a Minister of the Crown, or a government department, i.e. to conduct the Investigation.

It might also be necessary for archiving purposes, scientific or historical research purposes or statistical purposes because it is in the public interest that a permanent record of the Investigation is created under the Public Records Act. 


Your personal data may be shared by us with:

  • Core Participants to the Investigation
  • the National Assembly for Wales by tabling of the Investigator’s report (‘tabling’ is a technical phrase)
  • the public by the publication of the report
  • IT suppliers used by the Investigation.

If you share personal data with us under a condition of express confidentiality we will not share that data or a summary of that data without your explicit consent to do so. 

A statement which explains the technologies and encryption software we will use to safeguard your data, our relationship with our IT suppliers and their policies on data protection can be found towards the end of this Privacy Notice.


Your personal data will be kept by us for the duration of the Investigation and for shortly afterwards.  After the Investigator has completed his work and reported his conclusions, we will put together the permanent record of the Investigation.  Your personal data might be part of the permanent record, unless you have given us information under conditions of express confidentiality.  Any confidential data and any data not required for the permanent record will be destroyed.

Your Rights

You have the right to request information about how your personal data are processed, and to request a copy of that personal data.

You have the right to request that any inaccuracies in your personal data are rectified without delay.

You have the right to request that any incomplete personal data are completed, including by means of a supplementary statement.

You have the right to request that your personal data are erased if there is no longer a justification for them to be processed.

You have the right in certain circumstances (for example, where accuracy is contested) to request that the processing of your personal data is restricted.

You have the right to object to the processing of your personal data where it is processed for direct marketing purposes.

You have the right to object to the processing of your personal data.


We welcome your feedback. If you contact us asking for information, we may need to contact other government departments to find that information. If your question is technical, we may need to pass it to our technology suppliers.

We do not pass on any of your personal information when dealing with your enquiry, unless you have given us permission to do so. Once we have replied to you, we keep a record of your message for audit purposes.


IQCI tries to meet the highest standards when collecting and using personal information. For this reason, we take any complaints we receive about this very seriously. We encourage people to bring it to our attention if they think that our collection or use of information is unfair, misleading or inappropriate. We would also welcome any suggestions for improving our procedures.

This privacy policy was drafted with brevity and clarity in mind. It does not provide exhaustive detail of all aspects of collection and use of personal information. However, we are happy to provide any additional information or explanation needed. Any requests for this should be sent to the address below.If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator.  The Information Commissioner can be contacted at:  

Information Commissioner’s Office – Wales
2nd Floor, Churchill House
Churchill Way
CF10 2HH

Telephone: 016 2554 5297


Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.

Contact Details

Please contact if you have any queries  

The contact details for the data controller’s Data Protection Officer is to be confirmed shortly. The Data Protection Officer provides independent advice and monitoring of our use of personal information.

Technologies and Encryption Software, Our relationship with IT suppliers and their policies on data protection.

We use leading technologies and encryption software to safeguard your data, and keep strict security standards to prevent any unauthorised access to it.

Visitors to our websites

When someone visits we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in an anonymous way which does not identify anyone individually. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. If we do want to collect personally identifiable information through our website, we will be open about this. We will make it clear when we collect personal information and will explain what we intend to do with it.

Use of cookies by IQCI

Cookies are small text files sent to your computer or mobile device by the websites that you visit. They help make websites work better and provide information to the owners of the site. For instance, we use language cookies to know what language you would like the web site displayed to you in, we also use YouTube cookies to embed videos in pages and Google Analytics cookies to track users’ behaviour whilst on the site. By understanding how people use our site, we can improve the navigation and content to better meet people’s needs. The information collected by the IQCI includes IP address, pages visited, browser and operating system. The data will not be used to identify any user personally. The cookies we use on our site are:





Language version


This cookie is created by the content management system and is essential for the site to display to correct language version of the site.

When you close your browser

Session Tracking


To track a session when cookies are disabled. This allows the browser to preserve your session.

At end of session



This cookie is used to find out how visitors use our site. We use the information to help us improve the site. The cookie collects information in an anonymous form, including demographic information, the number of visitors to the site, whether they have visited before and the pages they visit.

2 years



This cookie records whether a user has accepted the use of cookies on our site.

10 hours

Web browsers allow some control of cookies through browser settings. To find out more about cookies and how to manage them, visit

What information do we collect?

We monitor user activity to enhance content provided on this site. This website uses Google Analytics, a web analytics service provided by Google Inc. ('Google'). Google Analytics uses 'cookies' and JavaScript code to help analyse user activity on websites. The information generated about your use of the website (including your anonymised IP address) will be transmitted to and stored on Google servers in the United States.

Google will use this information to produce user activity reports for this website. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.

Google will not associate your IP address with any other data previously held. You may refuse the use of cookies by selecting the appropriate settings on your browser. Please note that if cookies are disabled, you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

Read Google's Privacy Policy and Google's Terms of Service for detailed information.

The Information you give us:

Where you correspond with us directly either by email, phone or via contact forms on our website, at these exchanges personal information is transmitted.  We are committed to only using that information as outlined in this privacy policy.  How we use the data is outlined below:

Newsletters – On a regular basis we will email with updates about the IQCI and appropriate notifications. This data will not be shared with any third party or used for any marketing related content.

Email / Contact Forms / Direct communication – Where you communicate directly with the IQCI via email, website contact forms or in direct communication including telephone. We will only use these details to respond to your query or suggestion.

We use Transport Layer Security (TLS) to encrypt and protect email traffic. If your email service does not support TLS, you should be aware that any emails we send or receive may not be protected in transit.

We will also monitor any emails sent to us, including file attachments, for viruses or malicious software. Please be aware that you have a responsibility to ensure that any email you send is within the bounds of the law.

Links to other websites

This privacy policy does not cover the links within this site linking to other websites. We encourage you to read the privacy statements on the other websites you visit.

Changes to this Privacy Policy

If this privacy policy changes in any way, we will place an updated version on this page. Regularly reviewing this page ensures you are always aware of what information we collect, how we use it and under what circumstances, if any, we will share it with other parties.

This privacy policy was published on 14 June 2018.