In this time of crisis, data has the potential to help in a number of ways, supporting organisations such as the Government, public authorities, the NHS and others to direct medical, economic support and other important resources to where they’re needed most.

In this notice, we’ll explain how your data might be used to tackle Coronavirus and your data rights. Our top concern is data protection and so your data will only be used where we believe it’s clearly the right thing to do.

People are relying on swift action from the Government and businesses to counter both the negative health and economic impacts of the Coronavirus in these unprecedented times.

We are committed to playing our part in helping the UK recover from this health emergency, whether that’s supporting our most vulnerable citizens, protecting the NHS or helping businesses navigate a challenging landscape. That’s why we’ve joined other businesses across the UK in signing-up to the C-19 Business Pledge, which promises support for employees, businesses and communities across the country not just during the outbreak but in the recovery as well.

We are talking to a wide range of organisations such as the Government, public authorities, regulators and commercial organisations to help tackle Coronavirus.

There are a number of ways the data Experian holds about you could be used to help during the pandemic. For example:

  • Identifying hospitals which will need more intensive care units as they respond to community impacts of Coronavirus, including the potential impact a second wave might have.
  • Identifying households which might be vulnerable and need more “at home” care or additional financial support.
  • Helping public bodies to distribute financial support to businesses that need it. This same data could also enable commercial organisations to identify areas most needing support in terms of the services they offer. Examples here might include:
    • Broadband providers who need to make sure levels of service are maintained in high demand areas to support individuals in their critical jobs and keep us entertained during periods of isolation.
    • Utility companies and financial service providers who are looking to identify individuals who may need additional support with paying their bills.

We think we could help many organisations by providing insight from aggregated data, without providing any personal data at all. However, we might need to initially process personal data to create the aggregated, non-personal view.

Aggregated data could help many organisations (such as the Government, public bodies, regulators or lenders) understand the stresses and strains that UK consumers and businesses are under so they can respond accordingly. The kinds of personal data that we might process to provide this analysis include data from lenders, such as credit account performance data and bank account turnover data. This data and the analysis we undertake are described in more detail in CRAIN, which describes how credit reference agencies obtain, process and share personal data about consumers and businesses.

Another example could be to use the aggregated and modelled data from our marketing services business to help understand the dynamics of which areas may be hit hardest and to help plan responses. You can find out more in the Consumer Information Portal, which also explains the kind of insights that we can create.

Where personal data is used in connection with a new initiative specifically requested to support the fight against Coronavirus, and where we believe it would be necessary to process your personal data in order for us to perform a task that is in the public interest, we will process it primarily under Article 6(1)(e) of the General Data Protection Regulation which makes this processing lawful. Where we do this, we’ll process personal data fairly, proportionately and only in ways that the law permits.

We will protect your data rights. Data will be retained and used by us only for as long as is necessary to help support the fight against Coronavirus and mitigate its impact on the vulnerable, consumers, businesses and the UK economy.

Further information and opting out

Should you wish to, you can ask for access to the personal information we hold about you and request that we correct any mistakes, restrict or stop processing or delete it. To request a copy of the personal information we hold about you see our data access page.

It’s worth being aware that in some cases if you ask us to correct, delete or stop processing it, we won’t always be required to do. This could be because the data is insight data we’ve created (representing our opinion and not actual data) or because of the legal basis we’ve relied on to process the data. We will consider every request we receive individually and, if for any reason, the right you wish to exercise does not apply, we will explain why.

If you have any questions about the content of this notice or how data is being processed to help fight the Coronavirus health emergency, please contact our Data Protection Officer at

You also have the right to contact the Information Commissioner’s Office (ICO), the supervisory authority that regulates handling of personal information in the UK. You can contact them by:

  1. Going to their website
  2. Phone on 0303 123 1113

You may also see our full complaints handling procedure and how to make a complaint. If we cannot resolve things under that procedure, then you may have the right to refer your complaint, free of charge, to the Financial Ombudsman Service.

The contact details for the Financial Ombudsman Service are:

  1. Telephone: 0300 123 9 123, or from outside the UK +44 20 7964 1000
  2. Email:
  3. Financial Ombudsman Service Exchange Tower London E14 9SR.

We’ll make sure that any updates that we make to this notice will be easily identifiable.

Version 1.1
Effective date: 8 June 2020