Personal Data
CIOL and CIOL Qualifications (CIOLQ) treat all personal data received with care and respect to make sure such data remains safe and secure. The handling of personal data in the UK is governed by the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA 2018), and the Data (Use and Access) Act 2025 (DUAA 2025).
Following the UK's exit from the European Union, the EU's General Data Protection Regulation (Regulation (EU) 2016/679) was transposed into UK national law as the UK GDPR, with technical amendments made under the Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019. The DPA 2018 supplements the UK GDPR by providing for exemptions and derogations under UK law.
The DUAA 2025, which came substantially into force in February 2026, introduced further updates including recognised legitimate interests for data processing and reforms to automated decision-making rules. Together, these instruments require organisations to maintain and publish a clear policy on data protection and the handling of personal data. You have a right to understand how we use and protect your personal data. You can download the full Privacy Notice as a PDF here.