Arts Council England Privacy Notice: A Guide

Arts Council England (ACE) is committed to protecting the privacy and security of the personal information it collects. As a public body, the organization processes data to deliver its mission of championing, developing, and investing in arts and culture across England. This overview outlines how ACE handles data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Why We Collect Personal Information

The Arts Council processes personal data for several key operational reasons. Primarily, this information is required to manage grant applications, monitor funded projects, and maintain relationships with stakeholders. The primary purposes include:

• Grant Management: Assessing applications, processing payments, and monitoring the success of funded cultural projects.
• Communications: Sending newsletters, updates, and invitations to events for those who have opted in.
• Research and Advocacy: Conducting surveys and collecting data to better understand the cultural sector and support policy development.
• Regulatory Compliance: Fulfilling legal obligations, such as audit requirements or responding to Freedom of Information (FOI) requests.

Types of Information Collected

The specific data collected depends on the interaction with the Arts Council. Common categories include:

• Contact Information: Names, email addresses, phone numbers, and business addresses.
• Professional Details: Job titles, organizational affiliations, and professional biographies.
• Financial Data: Bank details provided for grant disbursements or payment processing.
• Equal Opportunities Data: Sensitive information provided on a voluntary basis to help the Arts Council monitor diversity and ensure its funding reaches a broad range of communities.

How Data is Stored and Protected

The Arts Council employs robust security measures to prevent unauthorized access, alteration, or disclosure of personal data. Data is stored on secure servers, and access is restricted to authorized personnel who require the information to perform their job functions. When external contractors or partners process data on behalf of the Arts Council, they are contractually obligated to adhere to strict data protection standards.

Your Rights Under Data Protection Law

Under current data protection regulations, individuals have specific rights regarding their personal information. These include:

• The Right to Access: You can request a copy of the personal information held about you.
• The Right to Rectification: You can request that inaccurate or incomplete information be corrected.
• The Right to Erasure: In certain circumstances, you may request the deletion of your data.
• The Right to Restrict Processing: You may request that the use of your data be limited.
• The Right to Object: You can object to the processing of your data for specific purposes, such as direct marketing.

Data Sharing and Disclosure

The Arts Council does not sell personal information to third parties. However, there are instances where data may be shared legally, such as with government departments, auditors, or law enforcement agencies when required by law. Additionally, aggregated and anonymized data may be published in reports to demonstrate the impact of arts investment, ensuring that no individual or organization is identified.

Changes to the Privacy Notice

The Arts Council regularly reviews its privacy policy to ensure it remains up to date with legislative changes and operational requirements. Users are encouraged to check the official Arts Council England website periodically for the most recent version of the Privacy Notice.

Contacting the Data Protection Officer

If you have any questions, concerns, or requests regarding the way your personal data is handled, you are encouraged to contact the Arts Councils Data Protection Officer. Formal inquiries help ensure that the organization remains transparent and accountable in its role as a steward of public funds and a supporter of the arts.