GDPR and Private Organisation Use of Personal Data

[jai.pancholi1]

Hi,

Please can someone advise on use of personal data provided by Companies House (Officer / Controller data) by private organisations use? How does GDPR / Data Protection Act impact this use and are there any exceptions?

Thank you,

[voracityemail]

There are some threads on this forum with questions in this area and responses from Companies House. Hopefully some of the following will be helpful to you:

Commercial Questions

Can we publicise on our website and in our product that we have CH data available for our clients? Are there any licencing requirements? Are there any costs to us or to the 3rd party client? Can we change any sort of ‘administration fee’ for the data? Are there any restrictions on the usage of the data?

Responding to GDPR requests

How should we respond to GDPR requests?

GDPR and ICO considerations

In the API calls there is a lot of information that could be considered personal information and I would suspect may be regulated under GDPR or ICO guidelines. But the data is released as OGL, Eg, All the ‘officer’ related endpoints return addresses, previous names and possibly eea, or non-eea IDs if available. I suspect that any OGL data will also need to follow ICO or GDPR guidelines, but I can’t find any guidelines in the API docs about which data is actually legally considered personal da…

Companies house data usage from Outside UK

Sorry for the delay, this had to be clarified with our Policy and Legal team. Our information is public, required by enactment, not restricted to UK citizens and is collected on a legal basis in terms of GDPR, not consent. So there are no issues with this testing being carried out overseas.

Good luck.