How we use your information
Information we collect
By contacting us, the Bank of England (‘we’ or the ‘Bank’) may collect personal data about you.
This information may include contact details, professional information, and any other further information you decide to share with us.
Where personal data is processed, the Bank takes steps do this in a manner that is fair and transparent and that protects individuals’ information rights.
Why we need your personal data
We collect your personal data to process the information you provide to us under the whistleblowing scheme. As such, we process your personal data as necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Bank.
What we do with your personal data
Safeguarding your personal data is important to us. The Bank is committed to information security and we use a range of layered information security measures. Personal data will be put into a secure intelligence database with restricted access arrangements. Reports are clearly marked as related to a confidential and sensitive whistleblower's disclosure. The whistleblower may or may not be identified in the report. This protective marking system highlights the fact that neither the information, nor the whistleblower's identity, should be disclosed internally or externally without reference to the whistleblowing team.
We may share this information in confidence with other regulators such as the Financial Conduct Authority, or law enforcement agencies such as the Police. In complying with applicable laws and for law enforcement purposes, we may also disclose data in confidence (for example to a relevant government entity or regulatory authority). This may mean that personal data is transferred outside the European Economic Area.
We will keep your personal data for as long as the Bank needs in order to fulfil its obligation with regard to your whistleblowing report.
Further information about how we handle personal data can be found here at Privacy and the Bank of England.
You have a number of rights under data protection laws. For example, you have the right to ask us for a copy of the personal data the Bank holds about you. This is known as a ‘Subject Access Request’. You can ask us to change how we process or deal with your personal data, and you may also have the right in some circumstances to have your personal data amended or deleted.
To contact us about those rights, including making a request for the personal data we hold about you or to make a complaint, please see the Privacy and the Bank of England page or write to us at:
The Privacy Team
Bank of England
London, EC2R 8AH
If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can complain to the Information Commissioner’s Office (ICO).
The Bank’s Data Protection Officer can be contacted via the details above and you can also find out more about how the Bank deals with your personal data via the Privacy and the Bank of England page.