BMA & IPA privacy notice

In line with the EU General Data Protection Regulation (GDPR), in this privacy notice for research participants, we explain the legal basis for data processing for the evaluation of representative training. This includes who will have access to your personal data, how your data will be used, stored and deleted and who you can contact with a query or a complaint.

BMA is the data controller for this project. This means that they are responsible for deciding the purpose and legal basis for processing data. 

For this project, the legal basis for processing data is Article 6(1)(e) of the General Data Protection Regulation where “processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the [data] controller”.

This will include processing that information and sharing it with a third party conducting the review – the IPA, part of the Institute for Employment Studies (IES). 

You can contact CChamberlain@bma.org.uk if you have any questions.

Who will have access to my personal data?

The IPA, part of the Institute for Employment Studies has been commissioned to undertake an evaluation of representative training. This will mean that we will have access to details including your name, job role, employing organisation, and work email address. We will use these data to invite data subjects to take part in a depth interview or listening group.

How will my interview data be treated?

If you are invited and choose to take part in an interview, the data you give will be used for research purposes only. IPA will produce a report that summarises the main findings from all the interviews with project participants. Individuals will not be named on any handwritten notes taken from the interviews or listening groups or in the final report. Interviews or listening groups will not be recorded.

Your personal information will be securely deleted from the IES systems once the project is complete and the final report has been published, anticipated in October 2025.

Who can I contact if I would like to withdraw my interview data?

You also have to right to have your interview or listening group information deleted. If you have taken part in an interview or listening group but would like to withdraw your data (up to 72 hours after taking part), please contact: lucy.omelia@ipa-involve.com

Who can I contact with a query about how my data will be used?

If you have any questions about how your data will be used, please contact

tony.lloyd@employment-studies.co.uk marked “For the attention of the Data Protection Officer”.

Who can I contact with a complaint?

Under GDPR, you have the right to lodge a complaint with the Information Commissioner’s  Office at www.ico.org.uk