Green Gas Levy Privacy Notice

Publication date:
Scheme name:
GGSS

About this privacy notice 

This privacy notice explains how we will process the personal information of individuals who represent obligated suppliers (registered users) for the purposes of the Green Gas Levy (GGL), administered by Ofgem. This privacy notice also sets out the registered users’ rights as a data subject. 

It applies to information we process concerning: 

  • GGL scheme suppliers, former scheme suppliers, new scheme suppliers (and employees of these suppliers), registered users of the GGL portal, and other obligated persons; 
  • individuals who contact Ofgem with a query, for example, a right of access request, regarding the GGL; and 
  • people who sign up to receive newsletters and regular correspondence. 

Controller 

The Controller for the processing of any personal information as outlined in this privacy notice is the Gas and Electricity Markets Authority, (GEMA). For ease of reference this privacy notice refers to the administrative office of GEMA, “Ofgem” throughout. 

What personal information do we collect and why do we collect it? 

We only collect and process personal information that we need to carry out our functions in relation to the Green Gas Levy (GGL). 

The personal information we collect and process may include: 

  • Identity and contact information, including your name, work address, work email address, and telephone number. We use this information to identify and communicate with registered users and other relevant contacts and to administer the GGL. 
  • Role and registration information, including information relating to GGL, Portal user roles, such as Authorised Signatories, Finance Contacts and Data Contacts, Responsible Officers and potential Responsible Officers, and documentary evidence provided in support of registration to the GGL Portal. We use this information to register and verify relevant users and contacts and administer access to the GGL Portal. 
  • Identity verification information, including information and documentary evidence required to verify the identity of individuals holding GGL Portal user roles. We use this information where necessary to verify the identity of users and administer the GGL securely. 
  • Financial and credit cover information, including bank statements and letters of credit relating to the GGL. We use this information for the calculation, collection, and administration of credit cover, including drawing down credit cover where required; repayment of excess cash credit cover and/or interest on cash credit cover held; calculation and collection of levy and mutualisation payments; and assessment and granting of provisional exemptions and exemptions from the levy. 
  • Audit and assurance information, including documentary evidence received directly from you or indirectly through third parties contracted by us to undertake audit or assurance work. We use this information to verify information provided to us, carry out audits and assurance activities, monitor compliance, and administer the GGL. 
  • Correspondence and engagement information, including information you provide when contacting us with an enquiry relating to the GGL or its Regulations, and information relating to applications to receive CSAT surveys. We use this information to respond to enquiries, communicate with you, and review and improve our administration of the scheme. 

We also process relevant information to verify meter point data for each supply licence held by scheme suppliers, report non-compliance where required in the default register and Ofgem Supplier Performance Report and assist us in identifying fraud. 

In some cases, we use data analytics software to identify suspected fraud, improve the services we provide and monitor compliance with the GGSS regulations. 

Registered users’ personal information may also be shared internally within Ofgem for scheme related research and/or development, to inform future policy development of our Environmental and Social Schemes and support continuous improvement of scheme administration. 

Registered users’ personal information will not be used for profiling, including computerised processing which may use personal information to evaluate certain things about an individual, for example, a decision relating to your registration on the GGL portal. 

When do we collect personal information of registered users? 

We collect your personal information when you: 

  • visit our website, including through the use of cookies to allow you to make repeat visits. You can find out more about how we use cookies on the Ofgem website; 
  • engage with us when we carry out our statutory and administrative functions; 
  • provide details of Responsible Officers, Authorised Signatories, Finance Contacts and Data Contacts; 
  • submit information and data to us through the GGL Portal; 
  • use our services, for example, when you subscribe to our RSS feeds, e-newsletters, social media sites or email alerts, or request a publication from us; 
  • contact us by email, telephone, or in writing; or 
  • contact us in relation to information requests, complaints or general enquiries. 

How and when we will process and disclose registered user information 

  • where the disclosure is required by law, statutory direction, court orders, or is necessary for the purposes of the administration or development of the GGL; 
  • where you give us explicit permission to disclose it; and 
  • for the processing and sharing of relevant information during audits. 

We will only share registered user information with the following organisations or official bodies: 

  • third-party auditors or other third party for the purposes of either auditing the information provided to us by you or providing an assurance report (we will require such third parties to agree to treat the information in accordance with this Privacy Policy); 
  • third-party suppliers, appointed by us in connection with our scheme administration. This may include research companies or agencies appointed to conduct surveys on our behalf; 
  • action Fraud or the Police in England or Wales or the Police in Scotland when we have found instances of suspected fraud; 
  • the Department for Energy Security and Net Zero (DESNZ), who may issue a notice that legally compels Ofgem to disclose specified information collected for the purposes of administering the GGL and for evaluation surveys (DESNZ may share your information with their contractors and sub-contractors for this purpose); 
  • a DESNZ approved biomethane certification schemes for the purposes of the Green Gas Levy exemption mechanism; 
  • the Scottish Government and their approved contractors for the Scottish Government to report on and monitor devolved heat policy in Scotland; 
  • the Welsh Government; 
  • local Authorities in Great Britain (upon request); 
  • the Environment Agency; 
  • Department for Environment Food and Rural Affairs (Defra); 
  • Department for Transport; 
  • Trading Standards and the Serious Fraud Office (SFO); 
  • Xoserve and its subsidiary Correla; and  
  • the Public Service Ombudsman, where a complaint about Ofgem is escalated to the Ombudsman for independent review, including the sharing of personal information relevant to the complaint where it is necessary for the Ombudsman to consider and investigate it. 

We may share some registered user personal information with Gas Distribution Network companies to verify information you have provided for the purposes including, but not limited to, investigating suspected fraud. 

Legal basis for processing your information 

We would not be able to fulfil our obligations as the administrator of the GGL without collecting and using your information. 

We collect and process your information under the ‘Public Task’ legal basis for processing as part of our remit as the GGL administrator (UK GDPR, Article 6(1)(e)). 

We may process your information for the purpose of conducting surveys. Where we do so, our legal basis for processing your information is public task under article 6(1)(e) UK GDPR, due to our role as administrator of the scheme. Where you agree to participate in a survey, we will also process your information based on your consent.  

How long do we keep your information 

Your personal information is deleted when we no longer need it for our functions in administering the GGL. As such, it is retained by Ofgem for the duration of your obligation on the GGL (up to 21 years and 4 months), and for a period of 7 years thereafter. 

Your rights 

We hold information about registered users who have the right to: 

  • be informed about the data we hold about you; 
  • access the information we hold about you; 
  • have your personal information corrected if it is incomplete or inaccurate; 
  • ask us to restrict how we process your information; 
  • object to certain ways we use your information; 
  • in some circumstances, you may have a right to object to Ofgem processing your information; 

To see the full suite of new consumer rights available to you under UK GDPR, please refer to the Ofgem Privacy Policy or the ICO website. 

Further information 

To find out more information on how Ofgem processes personal data, please refer to the Ofgem Privacy Policy. 

How to contact us 

If you would like to: 

The Data Protection Officer 

Ofgem 

10 South Colonnade 

Canary Wharf 

London 

E14 4PU 

Complaints to the Information Commissioner 

Registered users have a right to complain to the Information Commissioner. If you want to raise a concern about how we have handled your information, you can report it direct to the Information Commissioner’s Office at the following address: 

Information Commissioner's Office 

Wycliffe House 

Water Lane 

Wilmslow 

Cheshire 

SK9 5AF 

Telephone: 0303 123 1113 

Online: Live chat 

Changes to this privacy notice 

We keep our privacy policy under regular review. This privacy notice was last updated on 9 November 2026. 

Print this page