1.1. The Financial Services Compensation Scheme (“FSCS”) is the UK’s statutory fund of last resort, and was set up under the Financial Services and Markets Act 2000 in order to provide compensation to customers of financial services firms who are unable, or are likely to be unable, to meet the claims against them (“in default”).
1.2. We can only provide compensation when the firm is or was authorised by the Financial Conduct Authority (FCA) and/or the Prudential Regulation Authority (PRA) (or the predecessor bodies such as the Financial Services Authority (FSA)), (a “firm”). The types of claim that FSCS can protect relate to:
1.3. FSCS's protection is governed by the PRA and the FCA’s rules. The PRA’s rules cover claims in relation to deposits as well as life and general insurance provision and are set out in the Depositor Protection and Policyholder Protection parts of the PRA Rulebook [http://www.prarulebook.co.uk/]. The FCA’s rules cover the remaining categories of claim. These are set out in the Compensation Sourcebook (the “COMP Rules”) in the Redress section of the FCA Handbook.
1.4. Although FSCS was set up by the Government, we are funded by authorised financial services firms that are still trading. The levy rules are made by the PRA and FCA. Our service is free and available to individuals and small businesses (and all claimants in a few certain cases).
2.2. We will only collect and process your personal information in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”), the Privacy and Electronic Communication (EC Directive) Regulations 2003 and any other applicable data protection legislation.
together, the “Services”.
3. Who we are?
3.2. Details of how to contact us are set out in section  below.
4. When do we collect your information?
4.1. We may collect, store and process certain personal information that you disclose to us when you use our Services. This includes:
5. Processing your data - the legal bases we rely on
5.1. Under data protection law, there are a number of different reasons for which FSCS can collect and process your personal data. FSCS will only use your personal information where we have a proper reason to do so.
5.2. We have explained below the legal bases which FSCS may rely on:
5.3. We have explained in section  the information we collect and how we use it, by reference to these legal bases.
6. What information do we collect and how do we use it?
6.2. Please note that we may process your personal data on the basis of more than one lawful ground. Please contact us if you would like any additional information about the specific legal ground we are relying on in order to process your personal data, where more than one basis is identified below.
Using our Website and Portal
6.3. When you use our Website or Portal, we may collect, store and process:
We use this information for system administration and technology support, and to provide statistics which help us to evaluate the use of, and improve, our Website and Portal.
We may also use this information as part of our use of Google Analytics. This includes using the Google Analytics User ID feature for capturing information regarding your engagement with and use of our Website and Services, including session information. We use your data in this way so that we can make improvements to our Website and Portal.
6.4. We process this data on the basis that we have a legitimate interest in providing the best possible service.
6.5. If you use our Portal to submit a claim, we will also collect data regarding your online account with us. This may include the date you created the account, the status of the account and date of expiry. This information is necessary to enable us to process your claim, in accordance with our public function.
6.6. If you make a claim to us we will collect, store and process the information you provide in connection with your compensation claim. Please note that this may include information obtained from the following sources:
6.7. The personal data which FSCS will collect, store and process in connection with your compensation claim may include:
6.8. FSCS requires this information in order to consider your claim for compensation, pursue recoveries against firms and others, and for the proper performance of its other public functions.
6.9. We may also use this information:
6.10. We may use your information to assist third parties, such as the FCA, or the PRA, in carrying out their public functions. Please see section  below for further information about third parties to whom we may disclose your information.
6.11. We may also collect and store copies of documents you provide with your application to prove your identity (for example, your passport or driver’s license). These documents may contain details including your name, address, date of birth, facial image, place of birth, gender and nationality. FSCS requires this information in order to consider your claim for compensation, in accordance with our public function.
6.12. In some cases, FSCS may pay compensation in respect of your claim without you submitting an application. For example, following the default of a bank, building society or credit union. FSCS may assess whether or not you are eligible for compensation, and may make any compensation payment, without requiring you to submit an application. In these circumstances, FSCS will obtain information about you, including your name, address and bank details, from a third party, including for example the firm in default or an insolvency practitioner. FSCS will collect and process this personal data in order to pay compensation in respect of your claim, in accordance with our regulatory obligations and to fulfil our public function.
6.13. If we discover any criminal activity, or alleged criminal activity, through our fraud monitoring and / or sanctions procedures, we will process this data for the purposes of preventing or detecting unlawful acts. We do this on the basis that we have a legitimate interest in preventing unlawful acts.
6.14. If you contact us with a query or to make a complaint, we may use the personal data we hold about you in order to respond. We may also use your personal information for training purposes. This may include, for example, using recordings of telephone calls made to FSCS for training purposes. Data privacy law allows us to do this as part of our legitimate interest in providing you with the best possible service.
Improving our Services
6.15. We may use your personal information to send you survey and feedback requests, to ask for your views on our Services for customer satisfaction purposes. We have a legitimate interest in using your data for this purpose as it helps us to improve our Services.
6.16. If we contact you to ask for your views or feedback on our Services, we may then collect, store and process any information you provide in response. We may use this data to help us improve our Services, on the basis of our legitimate interest in improving our Services. We may also use this data for public relations or marketing purposes. This may include using some of your information for our publications, for example in a case study in order to illustrate the way in which FSCS handles claims for publication. We will not use your information for public relations or marketing purposes unless you have provided your consent for us to do so.
7. Disclosing your information
7.1. When using your data for the purposes set out above, FSCS may:
FSCS remains responsible for protecting your personal data, and will require these third parties to have in place technical and organisational security measures to protect your information, and to ensure that they comply with their legal obligations for handling your personal data. These third parties may only use your data for the specific purposes set out in our agreements with them.
7.2. In rare circumstances, FSCS may share your information with a regulatory body in another country in the European Economic Area. This would include, for example, that country’s equivalent to the PRA, the FCA or the FSCS. This may be because the authorised firm that you did business with had an overseas connection. This might mean FSCS having to work with an overseas regulator or compensation scheme to provide compensation to, or recover money paid in compensation to, customers of the UK authorised firm.
7.3. We will not provide your information to any third party for the purpose of marketing or sales.
7.4. If you make a claim to FSCS using a representative, solicitor or claims management company (a “Representative”), rather than making a claim directly, we may also share your personal data, and information relating to your claim, with your Representative.
7.5. We will only share information with your Representative if you authorise us to do so, by providing due authorisation.
7.6. FSCS will only share with your Representative information which is necessary to process your claim, pursue recoveries or otherwise assist with the proper performance of FSCS’s public functions.
7.7. We may share information with your authorised Representative via our Portal, even if you did not make your claim online. This is necessary to enable us to process your claim, in performance of our public function.
7.8. It is your responsibility to ensure that your Representative has in place appropriate security measures to protect any personal information which FSCS shares with them, and to ensure that they comply with their legal obligations for handling your personal data.
8. Obtaining information from third parties
8.1. FSCS may obtain information about you and your compensation claim from a third party, where this is necessary for the proper performance of FSCS’s public functions, including processing your claim for compensation and pursuing recoveries. These third parties could include the firm you have made a claim against (or its insolvency practitioner), the FCA, PRA, FOS or your product provider. For example, if you make a claim about pension misselling, FSCS will need to contact your current pension provider to check the value of your pension, to determine the amount of loss you may have suffered and calculate the amount of compensation (if any) which may be payable.
8.2. FSCS may obtain personal information about you from fraud prevention agencies, including for the purposes of verifying your identity when you make a compensation claim. FSCS will also check your personal data, including your name and date of birth, against government sanctions lists before it makes any compensation payment to you. FSCS processes your information in this way on the basis of its legitimate interest in preventing fraud and other criminal activity.
9. How long will we keep your information for?
9.1. We will not keep your personal data for any longer than is necessary for the purposes we have explained above. At the end of that retention period, we will securely delete you data. For example, information in relation to any claim you submit to us will usually be deleted 7 years after your claim is closed.
10. Information Security
10.1. We have put in place appropriate technical and organisational security measures to prevent the loss or unauthorised access of your personal information. We also have in place procedures to deal with any suspected personal data breach and will notify you, and the applicable regulator of any breach where we are legally required to do so.
10.2. Please note that whilst we have used our best efforts to ensure the security of your data, we cannot guarantee the security of information transmitted over the internet.
11. Your rights
11.1. You have the right to contact us in order to find out what information we hold about you or to access or correct any information that we hold about you. Please download and complete our Subject Access Request Form and return the completed form to the contact details listed in section .
11.2. You will not usually need to pay a fee to access your personal data, or to exercise any of your other rights. However, if your request is unfounded or excessive, we may charge a reasonable fee for complying with your request, or we may refuse to comply.
11.3. If you have given us your consent to use your personal information, you have the right to change your mind at any time and withdraw your consent. This will apply where, for example, you have consented to us using your information for marketing purposes.
11.4. If we are processing your personal data on the basis of our legitimate interest, you can ask us to stop for reasons connected to your individual circumstances. We will then stop processing your data unless we consider that we have a legitimate overriding reason to continue. This would include, for example, where we need to process your data in order to establish, exercise or defend a legal claim.
12. How to contact us
12.1. If you have any questions about the FSCS and our use of your information, please write to:
The Data Privacy Officer
10th Floor, Beaufort House
15 St Botolph Street
12.2. You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.