Privacy Notice – Automated Passenger Services Safeguarding Research

This Privacy Notice sets out how we will process information from everyone who takes part in this research. In line with UK General Data Protection Regulation (UK GDPR), it explains the legal basis for data processing; who will have access to participants’ personal data; how this data will be used, stored and deleted; and how to submit a query or a complaint.  

The Department for Transport (DfT) has commissioned the National Centre for Social Research (NatCen) to carry out a study to inform safeguarding standards for Automated Passenger Services (APS), which are vehicles that transport passengers without a driver in charge of the vehicle. This research will inform the future deployment of APS in the UK.  

As part of the study, NatCen is inviting a range of stakeholders with experience in passenger safety, safeguarding and operational delivery across a range of transport modes to take part in research discussions. More information about the study and what the discussion involves can be found in the Participant Information Sheet. 

How and why the DfT uses your information 

The DfT is the data controller for this study, responsible for deciding how and why personal data is processed. NatCen is the data processor, responsible for the collection, processing and storage of the data. Further information about NatCen can be found at http://natcen.ac.uk.

For this study, our legal basis for processing your data is ‘public task’, which means the processing is necessary for the delivery of a task carried out in the public interest. The DfT has commissioned this research to support their statutory functions and responsibilities, and we are carrying out this research on their behalf.

How we will collect your data 

The DfT will support recruitment by identifying relevant stakeholders and, in some cases, facilitating introductions with NatCen. If you are interested in taking part and consent to being contacted by NatCen, the DfT or the person who approached you about the study will share your contact details (name, role, work email address and phone number) with NatCen. A NatCen researcher will then contact you to invite you to take part in a discussion.

If you give your permission, the discussion will be recorded securely using Microsoft Teams and transcribed using Microsoft Transcribe. This is to ensure we have an accurate record of what you say. NatCen will hold and process this recording. This data will not be shared with the DfT or the stakeholders who have supported us with recruitment.

How NatCen will process your data

NatCen is collecting and processing the data for this research on behalf of the DfT. All data collected will be handled in accordance with data protection legislation (UK GDPR).  

The information that we collect will be used for research purposes only. What you say during the discussion will inform the report that we will write for the DfT, which will be published on their website. The report will be written in a way that protects the anonymity of those taking part as far as possible. We may quote individual participants in the report, but we will not use names or include any details that can identify you personally.  

However, please note that, as we are holding discussions with a small number of people, it may be possible that individual views could be recognised by the people who were involved in approaching you to take part (e.g. your employer or the DfT). At the end of the discussion, the NatCen researcher will ask you whether there is anything you shared during the discussion that you do not want us to include in the final report.  

If you would like to withdraw anything you said, or withdraw from the research entirely, you can do so by contacting the research team at APSResearch@natcen.ac.uk before 9th November 2026, when analysis begins. Any information you ask us to remove will be excluded from the discussion notes, analysis and final report. If you decide to withdraw from the research after analysis begins, we will not be able to identify and exclude what you shared during the discussion, but we will be able to remove your personal data from our records. 

Storing your information

The data held by NatCen will be stored securely in the UK, in line with international best practice and NatCen’s ISO 27001, ISO 20252 and Cyber Essentials Plus certifications. Data will not be stored in overseas servers. All personal information, and any other data held on the project, will be securely deleted six months after project completion. The project is expected to be completed by February 2027.  

Requesting access to your personal data 

You have rights with regards to your personal data. These include: 

• The right to request copies of your personal data.
• The right to ask us to correct any personal data that we hold about you that is inaccurate or incomplete.
• The right to ask us to delete personal data that we hold about you.
• The right to object or restrict how we are processing your personal data. 

Questions or concerns about personal data

If you have any questions about the research and how your data is processed, you can contact the research team via email at APSResearch@natcen.ac.uk.  

If you have any concerns about how your data is used, you can also contact NatCen’s Data Protection Officer at dpo@natcen.ac.uk.  

The DfT Personal Information Charter can be found here for more information about how DfT handles personal data and for further queries relating to handling of your personal data, you can email data.protection@dft.gov.uk.

Under UK GDPR, you can complain to the Information Commissioner’s Office if your query is not satisfactorily addressed. You can lodge a complaint at: 

Post:    

Information Commissioner's Office                                                                                             

Wycliffe House, Water Lane,

Wilmslow

Cheshire SK9 5AF

Phone: 0303 123 1113                    

Website: https://ico.org.uk/concerns