We will share your personal data with:

• if necessary the Department for Work and Pensions will profile your data in order to provide a YES/NO response via the Energy Saving Trust3 to verify whether or not you receive the relevant benefits to be eligible for the scheme;
• The Office of Gas and Electricity Markets (Ofgem)4 will:
  • use and share your information in order to fulfil its statutory duties;
  • if requested, share your information with the installer of the measure in order to verify whether it has been notified to Ofgem;
  • if necessary, share your information with auditors contracted to ensure the integrity of the
  • when required, disclose your personal information to the Secretary of State of the Department of Business, Energy and Industrial Strategy. They may use the data to review and develop Government policy, and for research and statistical purposes and may, for these purposes, link the data with other data sources they

¹ Article 9(2)(g), section 10(3), Part 2 to Schedule 1, paragraphs 5 and 6 to the Data Protection Act 2018 (DPA

2018).

² Article 9(2)(g), section 10(3), Part 2 to Schedule 1, paragraph 19 to the DPA 2018.

3 See the EST datamatch service: https://datamatch.est.org.uk/

4 To find out more about how Ofgem processes your information, refer to their privacy policy available online: https://www.ofgem.gov.uk/publications-and-updates/eco3-privacy-policy

hold. They may also share some of the data with other Government Departments and with the Scottish and Welsh Governments for these purposes.

• The obligated energy supplier5 (who will make a contribution towards the cost of the measure; and will process data as necessary to comply with a legal obligation6 and in accordance with their own privacy policies);
• Relevant companies supporting the installation:
  • the installer (who installs the measure);
  • the installer’s certification body (who monitor a sample of installations to ensure they meet the correct standards);
  • technical monitoring agents (who monitor a sample of installations to ensure they meet the correct standards);
  • managing agents (who facilitate the funding and installation of measures)
  • external auditing agencies (who provide assurance that the data being processed is correct);
  • building control inspectors (who check installations are installed in accordance with building regulations);
  • guarantee companies (who provide warranties for some measures such as wall insulation);
  • the property owner, social housing provider, local authority or managing agent (as and where applicable);
  • software providers (who process your data).
• Anyone else where it is required by law, where you have been notified of the sharing or for whom we have your
• The information you provide may be transferred to 3rd parties outside of the European Union. However, this will only take place where this is necessary for the Purpose outlined We will ensure all appropriate safeguards, including those set out by the ICO7, are in place to protect your data before any transfer takes place.
• Your data will only be processed for purposes relating to ECO, unless you have specifically consented