Privacy Notice for Generation New Era families
Version 9: Applicable from: 3 June 2026
If you’d like to print this fair processing notice or export it as a PDF, please select Ctrl + P on your keyboard (or Cmd+ P for Mac users).
Contents
About Generation New Era
About this privacy notice
Giving and withdrawing your permission to take part in Generation New Era
Data controllers
Lawful basis for processing
Your individual information rights
Personal data we collect about you
Personal information that we collect from other sources
Why we process your data
Who we share your data with
Transfers of data outside of the UK
Data security
How long we keep your data for
Complaints
Cookies
Further information
Version control
About Generation New Era
Generation New Era is a research project commissioned by the Economic and Social Research Council. The study is led by the UCL Centre for Longitudinal Studies (CLS) and is one of several national longitudinal cohort studies at CLS. A longitudinal study collects information from the same people (cohort) over time.
Generation New Era aims to follow the lives of 30,000 children born in 2026 as they grow up in our changing world. By providing vital new insights into the health and development of children, Generation New Era will help researchers, governments and service providers to improve the lives of children and families in the UK.
An earlier phase (first phase) took place in 2023-24 with several thousand babies born in 2022-23, and their families, and paved the way for this larger study. If you are one of these families, you can find more about this here.
Before we start contacting families about joining Generation New Era later this year, we will be doing a final test with a small group of families with babies born in October 2025. This is called a pilot. The pilot will give us an opportunity to test out how the study is going and incorporate their feedback into our plans.
The study will capture the economic and social environments that these babies are born into, their health, wellbeing and early development, including building up a picture of the impacts of COVID-19 and the cost-of-living crisis. The data from the study will be made available to the research and policy community and be used to answer important research questions and to improve families’ lives. The study is managed by the CLS, with support from a consortium of partners including Swansea University in Wales, the University of Edinburgh in Scotland and Ulster University in Northern Ireland.
Ipsos (‘the survey agency’) carried out the interviews for the first phase of Generation New Era and are the lead independent research organisation for the larger study. Two other independent research organisations – NatCen and Verian – are also doing interviews for the larger study. All of these organisations follow the rules and Code of Conduct of the Market Research Society and associated regulations and guidelines. They have lots of experience in carrying out similar studies with children and families.
If you took part in phase 1 of the study, as no further interviews are anticipated, we do not intend to contact you about the study unless circumstances change. Your name, address and other contact information will be retained, and like all study information, this will be treated in strict confidence and kept securely.
About this privacy notice
This privacy notice explains how data collected for Generation New Era (“the study”) will be used. It applies to people who take part in, or are invited to take part in, the study.
CLS (“we”, “our” and “us”) values your contribution to the study. We respect your privacy and are committed to protecting your personal data. This notice explains why and how we collect and use your personal data, including data provided by you or by third parties, and outlines your rights. This notice applies to anyone whose data we hold for the study, including:
- Families invited to take part in the study
- Respondents – parents/carers who take part in the study
- The babies in the study
- Other family or household members
CLS applies to government agencies for a representative and inclusive list of people to invite to take part in the study. This includes names, addresses and limited additional information about you and your baby. We will also use this additional information for the purposes of understanding who does and doesn’t take part in the study, which helps ensure that statistics reported are as accurate as possible.
CLS collects data from respondents by asking for information about themselves, their babies and other family members.
CLS also collects some data from your own and your babies’ records from government departments and agencies. It’s your choice which of these records are added to the study.
We use the terms ‘you’ or ‘your’ in this document when referring to respondents.
This privacy notice does not yet cover one part of the study – the BabySteps app. It will be updated to include the BabySteps app before any families are invited to use the app.
Giving and withdrawing your permission to take part in Generation New Era
We ask for your informed consent to take part in the study. We provide information about the study and how your data will be used so that you can decide whether you would like to participate. You can tell us at any time if you no longer wish to be contacted about the study or if you change your mind about us using information from administrative records. You do not need to give a reason for this. Consent is not our UK GDPR lawful basis for processing study data for research purposes. The lawful basis section below gives more information about this.
Data controllers
We apply to government agencies/public bodies for a representative and inclusive list of people to invite to take part in the study. UCL is the Data Controller of the study. The government agencies/public bodies that give us this list are independent Data Controllers of the information that they provide to UCL.
In Northern Ireland, the public bodies providing this information are the Health and Social Care (HSC) Northern Ireland Trusts and the Strategic Planning and Performance Group (SPPG) within the Department of Health. These organisations act as data controllers during the initial contact stage of the study. The HSC Business Services Organisation (BSO) sends an opt-out letter with information about the study on behalf of the HSC Trust, acting as their data processor for this contact stage. A list of those who do not opt-out is then provided to the survey agency, and UCL become data controllers for the further use of this information for the study.
When we share data with other organisations, these organisations may also be Data Controllers. In the study letters and leaflets and in table 1 below, we tell you about how UCL and other organisations that we work with process your data and whether these organisations are data controllers. We will also provide this information in the study Q&As: Your questions answered – Generation New Era.
Contact details of the Data Controller
You can contact us at the details below if you:
- Have any questions about the study or the way that we process your data
- Want to opt out of taking part in the study, to withdraw from the study, or from a survey, or from having your records linked
- Want to use your individual information rights
- Want to update your contact details
Email: gnestudy@ucl.ac.uk
Contact details of the UCL Data Protection Officer (DPO)
If after contacting us, you need more help or wish to complain about how we use your personal data or use any of your individual information rights, please contact UCL’s DPO:
Email: data-protection@ucl.ac.uk
Post: Data Protection Officer, UCL, Gower Street, London WC1E 6BT.
Lawful basis for processing
Study data is processed for research purposes under GDPR Article 6 (e) ‘Public task’. CLS processes sensitive or special category personal data for research purposes under Schedule 1, Paragraph 4 of the DPA 2018. Consent is not the UK GDPR lawful basis for processing study data for research purposes.
If required, we may also process your personal data according to GDPR Article 6(c): ‘processing is necessary for compliance with a legal obligation to which the controller is subject’.
To contact people to invite them into the study, we have sought approval from special committees. For England and Wales, we applied to the NHS Research Authority’s Confidentiality Advisory Group to set aside the common law duty of confidentiality under Section 251 of the National Health Service Act. For Scotland, we applied to the NHS Scotland Public Benefit and Privacy Panel for Health and Social Care which considers approvals to use specified health care data involving identifiable data whether with or without consent. The use of the data in Scotland is approved under GDPR Article 6 (e) ‘Public task’.
For Northern Ireland, the HSC Trusts have also approved the use of the data under GDPR Article 6 (e) ‘Public task’. Research for public benefit supports the remit of the HSC Trusts to improve public health and social wellbeing under the general terms of Section 21 of the Health and Social Care (Reform) Act (Northern Ireland) 2009. We have received guidance and support from the Northern Ireland Health and Social Care Privacy Advisory Committee (PAC) and the Department of Health.
To receive notifications of deaths and moves out of the NHS for contact tracing and research purposes, for England and Wales we apply to the Confidentiality Advisory Group to set aside the common law duty of confidentiality under Section 251 of the National Health Service Act. For Scotland, we apply to the NHS Scotland Public Benefit and Privacy Panel for Health and Social Care.
The legal bases within GDPR and the Data Protection Act 2018 are separate and in addition to, the permission you gave to take part in the study.
Your individual information rights
You are free to choose whether to provide us with your personal data. The UK GDPR gives people rights over their data. Some of these rights depend on the reason for collecting your data and do not apply in every circumstance. These rights, therefore, may be subject to our policies or ‘exemptions’ (opt outs) allowed by the UK GDPR. You can contact us at any time to tell us:
- to stop processing your child’s data, your data, or data you have provided to us about your partner or other family members for research
- to inform you about how your information is being used. We also do this in this document.
- to give you access to copies of your personal information.
- to rectify information that is factually inaccurate or misleading (e.g., to correct incorrect contact details).
- to erase (delete) your data in certain circumstances, (e.g., to delete incorrect contact details or data that is no longer required, or we’re legally required to erase).
- to restrict (limit) processing of your data in certain circumstances, for example if your contact details are incorrect.
- you object to the way we process your data.
- you want to use the right to data portability: You can receive a copy of your electronically held data and reuse it. We cannot send your data to others at your request.
- you want to use your right to object to solely automated decision making and profiling with legal effects for you: We use your data for research purposes and not to make decisions that would affect you individually.
When you contact us to exercise your rights, we will:
- tell you that your request has been received
- write to tell you if your request is not applicable and give the reasons
- act on your request within the time period required by the current data protection law
- write to inform you if we need to extend the period of time required to respond due to the complexity
Exception to the right to be informed
It would take disproportionate effort to inform all potential participants about the study prior to them receiving a letter (e.g. informing everyone registering a birth about the study and the possibility they could be invited to take part). We are therefore using the UK GDPR ‘disproportionate effort’ ‘opt out’ from the ‘right to be informed’. We recognise that not providing individuals with this privacy notice directly in advance of receiving their personal data to invite them to take part in the study, poses risks that:
- individuals are unaware that the study is collecting and using their personal information and therefore may not be expecting their data to be used in this way.
- individuals cannot control how their data is used and therefore cannot use their data protection rights.
To reduce these risks, we have the following safeguards in place:
- we have carried out a Data Protection Impact Assessment to identify and mitigate any data processing risks.
- in Northern Ireland, your HSC Trust will notify you of the intention for the HSC Business Services Organisation to share your contact details with the study’s fieldwork agency, so that you can opt-out of your details being shared. If you opt out, you will not be invited to take part in the study and your details will not be shared with the study.
- we’ve published this privacy notice prior to the study letters being sent
- a link to this privacy notice is included in materials we send to families that we invite to take part in the study.
- accessing the data requires approval from a research ethics committee, government agencies and a number of special committees.
- the third-party survey organisation that sends out the study invitations acts only on our instructions, and will delete your data when the contract ends.
- we have conducted research with members of the public to demonstrate the acceptability of the study and its approach to inviting people to take part.
- we publicise the study to raise awareness amongst the public and relevant health professionals, such as health visiting networks.
For those of you who choose not to take part in the study, we will use limited demographic information about you to understand who does and doesn’t take part. This information does not include your name or address, which will not be retained or used for any other purpose.
Personal data we collect about you
Personal data, or personal information, means any information about an individual from which that person can be identified. Access to personal data is strictly controlled. The study collects, uses, stores, deposits, shares and transfers different kinds of personal data about study members. The data that we will hold for the study includes:
Information from birth registration and/or health records that we obtain from other organisations to invite you take part in the study
We apply to UK government departments and agencies that hold birth registration and/or health records to provide our appointed survey agency with a random sample of people whose babies were selected for the study. In phase 1, this was babies born in two specific months (November and December 2022 in England, Wales and Scotland and June and July 2023 for Northern Ireland), and to also provide the survey agency with up-to-date addresses. In the pilot study, this was babies born in October 2025. In the main study, this is babies born across the whole of 2026 – from January to December.
In Northern Ireland, we have obtained permission from the HSC Trusts to allow the HSC Business Services Organisation to use your Encompass health records to send a notification letter to a random sample of people whose babies were selected for the study. This letter gives you the opportunity to opt out of the study and of your contact details being passed to the study’s fieldwork agency. We apply to the HSC Trusts to provide the survey agency with the names and up-to-date addresses of the people who have not opted out of taking part in the study.
The survey agency is also provided with information about deaths and moves out of the UK so that people who have died or moved out of the country are not invited to take part. We do not ask your permission for this. We do not ask you to put yourself forward for the study before we’ve invited you to take part. This is because expert research sampling statisticians and study funders agree that this approach is the best way of recruiting a representative and diverse study group.
These birth registration and/or health records are received from NHS England for England and Wales, Public Health Scotland and the Health and Social Care Business Services Organisation in Northern Ireland. The information we receive from these records is explained in detail in Table 1 below.
We will only keep the minimum amount of data required to ensure a representative and inclusive sample and data that is needed to invite families to participate in the study. If you choose to participate, the survey agency will provide UCL with your data from birth registration and/or health records, including your contact details so that we can keep in touch with you and invite you to take part in future surveys that are part of Generation New Era and to understand who does and doesn’t take part.
The study’s survey agency will only retain your data from birth registration and/or health records for the amount of time needed to conduct the survey and will delete it at the end of their contract with us.
Information that you share with us during surveys:
- Personal data that relates to and can identify you (e.g., contact details and personal information).
- Sensitive / special category personal data (e.g., details about race or ethnicity, religious or philosophical beliefs, sexual orientation, political opinions, trade union membership, information about health).
Information from the data that you share with us during surveys:
- Research data from your survey answers: We hold sensitive research data and other research data that could potentially identify you. This includes research data from the study survey, sensitive data and linked data. The information that would directly identify you is removed from this data before it is safely deposited at national data sharing stores.
- Information provided by other organisations: as part of our linked data programme (e.g. government departments and agencies such as NHS organisations or Department for Education) and for contact tracing purposes (e.g. to help us keep your contact details up to date).
Data relating to family members of study cohort members
During surveys we may have asked you to provide information about family members such as your child’s other parent (including if you don’t live with them) and/or your partner.
Family members may also have provided information about themselves by participating in surveys or by taking part in our linked data programme.
Information that we collect from you and other sources, and who we share it with, is summarised in table 2.
Personal information that we collect from other sources
We collect information from external sources for contact tracing and research into the topics that affect your baby’s generation. We link records from external sources to the data collected in surveys as part of our linked data programme (described below).
Administrative records are created when you interact with government services (e.g., use the NHS, pay taxes, access benefits, receive education etc).
We also use data from your birth registration and/or health records from NHS England in England and Wales and Public Health Scotland, and from the Northern Ireland Encompass System to update your record for contact tracing purposes (described below) and to understand how representative the study is.
You were only invited to take part in this study if you have NOT opted out of your NHS confidential patient information being used for research and planning via the NHS national data opt-out in England. Please note that the NHS national data opt-out in England does not apply where you have chosen for us to link your health records to your survey data.
Why we process your data
1. To contact you
We process your data to keep in contact with you, to ensure a representative sample and to understand who does and doesn’t take part, to carry out and share our research about the topics that you and your baby experience in your life and to keep a record of our contact with you:
We apply to use your contact details, such as name and address, from birth registration and/or health records to invite you to take part in Generation New Era. We do not ask your permission for this in England, Wales and Scotland. In Northern Ireland, we have obtained permission from the Health and Social Care (HSC) Trusts to allow the HSC Business Services Organisation to send you a notification letter to give you the opportunity to opt out of your contact details being shared with the study’s fieldwork agency.
If you agree to be part of the study, we will continue to use the details you provide as part of the interview to keep in touch with you and to invite you to take part in surveys and activities that relate to the study. We apply to the NHS and/or other government agencies for up-to-date contact details and for notifications about participants who have left the UK or died. This will make sure that we do not contact these people about the study. Contact details are shared securely with organisations that provide services to us, including the survey agency who collect the data on our behalf, and other data controllers as part of our linked data programme.
2. To ensure a representative sample and to understand who takes part
We apply for some limited additional information about you and your baby from birth registration records and/or health records. This may contain details of your race and ethnicity. We do not ask your permission for this. We have approval from special committees for this, after a careful review of the information the study will hold, and to ensure that your data and privacy are protected. The information we receive is explained in detail in Table 1 below. We apply for this information so that we can ensure that the study is inclusive of groups who are less often included in longitudinal studies and representative of the UK. We will also apply for access to other information that will make sure the study represents the UK.
In England, Wales and Scotland, this information is received from birth registration records and health records and is supplied to the survey agency along with your contact details. It may also be used during fieldwork to make sure the study represents the UK population and includes groups who are less often included in longitudinal studies. UCL is also provided with this information, including for families who do not take part in the study, and we will retain it for a limited amount of time to understand who does and doesn’t take part.
UCL is also provided with this additional information, including for families who do not take part in the study. For families who do not take part, the information provided to UCL does not include name or contact information. We retain this information for a limited amount of time to see if certain groups are more or less likely to participate in the study and to adjust the results of statistical analyses to better reflect the wider population. In Scotland and Northern Ireland, the data will be accessed securely through approved safe settings – the National Safe Haven in Scotland and the Honest Broker Service in Northern Ireland, hosted by the HSC Business Services Organisation. If you prefer us not use your data for this purpose, you can contact us and ask us to delete your data – see ‘Contact details of the data controller’ above.
3. To record that you were invited to take part in the study
We keep a record of all of the data listed in Table 1 to record that you were contacted to take part in the study.
4. Contact tracing
We ask you for contact details of other people too – including someone outside of your household (known as your ‘stable contact’). This is so that if you move to a new address and we’re not able to contact you, we can contact these people to try to find out where you have moved to. Please do tell us if your contact details change. If you provide us with contact details for anyone else, please check with them that they are happy for us to hold this information. Please let us know if not and we are happy to remove these details.
We also apply to the NHS for up-to-date contact details – for example, the address at which you are registered with your GP – and for notifications about study members who have moved out of the UK or who have died. In the future, we may also apply to other government departments for contact details that they may hold. We match the contact details and personal information that we hold with similar data from NHS records or the records of other government departments. We also use data checking services and information that you’ve made publicly available online to update your contact details.
5. Research into the topics that affect your and your baby’s life
Survey and research data
We collect your survey data (and other kinds of research data) with your permission to understand the things that are important to your baby’s generation. You have the option to refuse to answer any individual questions without explanation. You can also withdraw from the survey at any time. You do not need to give a reason. We share research data securely and under licence arrangements for research purposes via the UK Data Service, and other trusted research environments such as the (SAIL) Databank. Information that would directly identify you is removed from this data.
Linked data programme
We link a range of external data to study records to build up a fuller picture of participants’ lives.
It is your choice whether we will share your contact details and personal information with government departments and agencies, and NHS organisations. We will do this to add information about your and your child’s health, education, and social care records from these organisations to your survey data. Adding information to your survey responses helps us to understand the things that affect your and you child’s life and to produce research about a new generation.
Linked data is deposited with the UK Data Service and similar research environments after any information that could directly identify you has been removed.
Your address and postcode are also used to match data on your location/neighbourhood to your study data. The information that we add is about your local area as a whole, your street or sometimes your specific address or property. This includes a broad range of data including Ordnance Survey, housing, environment, weather data or economic characteristics of your area such as deprivation levels.
We do not ask your permission to add this kind of information because the data is not individual level information about you. Frequently, this information is publicly available and adding this information does not usually require us to share any of your personal information with any other organisations.
However, if you would prefer that we don’t add any information about your area or property to your study record then please let us know by contacting us at:
Email: gnestudy@ucl.ac.uk
For phase 1, we may still add information as part of our linked data programme. This hasn’t been decided yet. We will update these website pages with more information about this in the future. If you prefer that we don’t do this, please let us know.
6. Research, record keeping and archiving
Requests
We keep a record of any requests that we have from you.
7. Making the data available for research
We deposit your survey responses with the UK Data Service, based at the University of Essex, and similar data stores.
UK Data Service
The UK Data Service is funded by the Economic and Social Research Council (ESRC) to meet the data needs of researchers, students, and teachers from all sectors. The UK Data Service collection includes major UK government-sponsored surveys, cross-national surveys, longitudinal studies, UK census data, international aggregate data, business data, and qualitative data.
Who we share your data with
This Table reflects the information we hold and share for families in the study.
| Table 1: Summary of the sampling data that we hold about you, where we get this data from (sources), who receives this data and the purposes of processing. | |||
|---|---|---|---|
| Types of data that we hold about you | Sources of data/Data Controllers other than UCL | Who receives your data | Purposes of processing |
| ENGLAND AND WALES | |||
| Birth registration records: · Date of birth mother · Date of birth father · Date of birth baby · Sex of baby · Multiple births · Socio-economic status code of mother and (if registered) father · Occupation code of mother and (if registered) father · Date of registration · Registration type (joint/sole) · Birth registration informant type (e.g. mother, father) · Birth in / outside marriage · Name and address mother · Name and address father (if registered) · Baby name · Country of birth mother · Country of birth father (if registered) · Previous births of mother | NHS England | · Survey agency · UCL | To draw the sample, send out invites and carry out recruitment for the study. Methodological purposes (to understand how representative the study is of the wider population). For those who do not take part, UCL receive de-identified data. |
| Health records: · Age of mother · Multiple births · Birthweight baby · Address mother · Address father · Address baby · Ethnicity baby · Previous births mother · Gestational age baby · NHS Number mother · NHS Number father · NHS Number baby · Mortality data and moves out of the NHS for baby, mother and father | · NHS England birth notification records and Personal Demographics Service (PDS) | · Survey agency · UCL | To draw the sample and send out invites and carry out recruitment for the study. Methodological purposes (to understand how representative the study is of the wider population). For those who do not take part, UCL receive de-identified data. |
| SCOTLAND | |||
| Scottish Linked Pregnancy and Birth Dataset (heath and birth registration records): To survey agency – Mother month and year of birth – Number of births this pregnancy – Ethnicity mother – Ethnicity baby – Baby month and year of birth – Sex of baby – Address mother – Mortality data and moves out of the NHS for baby and mother | – Public Health Scotland – National Records of Scotland (NRS) – NHS Scotland Health Boards | · Survey agency · UCL | To send out invites, and carry out recruitment for the study. Methodological purposes (to understand how representative the study is of the wider population). For those invited to participate and who do not take part, UCL receive de-identified data. |
| Secure access provided to survey agency and UCL via Scottish National Safe Haven (de-identified for all) – Mother month and year of birth – Number of births this pregnancy – Ethnicity mother – Ethnicity baby – Baby month and year of birth – Gestational age baby – Birthweight baby – Country of birth mother – Country of birth father – Socio-economic status code of mother – Socio-economic status code of father – Employment status mother – Employment status father – Mother Datazone end of pregnancy – Father Datazone end of pregnancy – Parents married indicator – Number previous pregnancies mother – Father banded age | – Public Health Scotland (PHS) – National Records of Scotland | · Survey agency · UCL | To select the sample. For all, survey agency receive secure access to de-identified data via the National Safe Haven. Methodological purposes (to understand how representative the study is of the wider population). For all, UCL receive secure access to de-identified data via the National Safe Haven. |
| NORTHERN IRELAND | |||
| Health records: To survey agency · Name and address mother · Mother month and year of birth · Baby month and year of birth · Mortality data and moves out of the NHS for mother and baby Secure access provided to UCL via BSO Honest Broker Service (de-identified for all) · Multiple births · Birth type (multiple singleton) · Birthweight · Ethnicity baby · Ethnicity mother · Previous births · Gestational age · Baby month and year of birth · Mother month and year of birth · Mother’s country of birth · Baby’s sex | – Northern Ireland Encompass system / Northern Ireland Digital Identity Service (NIDIS) – Business Services Organisation (BSO) | · UCL · Survey agency | To send out invites and carry out recruitment for the study (following an opt out letter sent by BSO) Contact details only provided to survey agency for those who do not opt out. Methodological purposes (to understand how representative the study is of the wider population) For all, UCL receive secure access to de-identified data via the BSO Honest Broker Service. |
| Table 2: Summary of the data that we hold for participants in Generation New Era and who we share it with | |||
|---|---|---|---|
| Types of data that we hold about you | Controllers | Categories of recipients | Purposes of sharing your data |
| Contact details, personal information, email address | UCL | International email, marketing automation, and customer engagement service provider Survey agencies Collaboration platforms | To contact you and keep your record up to date for the purposes of Generation New Era. |
| Survey answers | UCL | Survey agencies Trusted research environments | For research, statistical and archiving purposes. |
| Research data from the study including: – Data from the data linkage programme (e.g., received from NHS organisations, government departments, research and statistics organisations, databanks). | UCL (and public sector bodies for specific projects) | Survey agencies Trusted research data services Researchers/research organisations SAIL | To add information to your record. For research purposes. For contact tracing. |
| Name, sex, postcode, date of birth, address, NHS number/ID (if known) and study ID (study-specific pseudonymised identifier). | UCL | Government departments NHS organisations Trusted external organisations for data linkage Research/statistics organisations | To contact you and keep your record up to date for the purposes of the study. |
| Publicly available information (e.g., contact details from social media) | UCL | To contact you and keep your record up to date for the purposes of the study. | |
| Personal information, sensitive/special category personal data | UCL, relevant authorities/bodies | Public sector bodies/authorities (e.g., police, NHS, social services) your stable contacts | To meet our legal obligations. For safeguarding purposes. |
There may be rare occasions where it may be necessary to use your personal information to protect you or others. For example, when something you tell us indicates that someone is at risk of harm. We may share this information with your stable contacts or appropriate public sector bodies.
Transfers of data outside of the UK
The personal data that we process for the purposes of inviting you take part in the study will not be transferred outside of the UK. CLS, and the organisations that we work with, transfer research data outside of the UK and Europe. Some countries outside of Europe have different data protection rules and may not protect personal data to the same standard. In this case, we are required to have agreements in place to protect this information in accordance with the law.
Data security
We have put in place appropriate security and organisational measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered or disclosed. We have established procedures to deal with any suspected personal data breach and will notify study members and any applicable public body of a breach where we are legally required to do so.
How long we keep your data for
We keep your sampling data for as long as is required for the purposes of contacting you about the study and for understanding who does and doesn’t take part and as long as is allowed in the agreements we hold with the organisations who’ve provided the information, and in accordance with our statutory and legal obligations.
As the study follows study members’ whole life course, we keep study data for at least as long as the study exists and as long as the law allows us to. This includes for phase 1 participants, where no further interviews are planned. We will review the data that we hold whenever we receive an individual rights request. Further information on how long we keep records for is included in the UCL records retention schedule: https://www.ucl.ac.uk/library/about-us/records-office/records-retention.
Complaints
Those who wish to complain about our use of personal data, may send an email with the details of the complaint to the Data Protection Officer (data-protection@ucl.ac.uk) so that we can look into the issue and respond.
Study respondents also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) (the UK data protection regulator). For further information on information rights and how to complain to the ICO, please refer to the ICO website: https://ico.org.uk/.
Cookies
When people visit our site, cookies are sent to their computer. Cookies are small text files placed on devices which web servers use to produce information about how our site is used. Please refer to gnestudy.info/cookies/.
Further Information
This privacy notice supplements the following UCL Privacy Notice(s): Research participants for health case purposes privacy notice: https://www.ucl.ac.uk/legal-services/privacy/ucl-general-privacy-notice-participants-and-researchers-health-and-care-research-studies
Version control
We keep this privacy notice under regular review to make sure it is up to date. The last update was on: 3 June 2026.