OFFICIAL Suggested text for recommendation 4 as discussed on the last call, believe it should go between current 2 and 3. Thanks Chris The GDPR protects natural persons in relation to the processing of their personal data. "It does not cover the processing of personal data which concerns legal persons and in particular undertakings established as legal persons, including the name and the form of the legal person and the contact details of the legal person." This allows for disclosure of legal persons' data because it is outside the remit of GDPR. Nevertheless, when processing legal persons' data, safeguards should be put in place to ensure that personally identifying data about a natural person is not disclosed within data marked as a legal person. This information is supplied in confidence by the NCA. The NCA is not listed as a Public Authority under the Freedom of Information Act 2000. Any information supplied by, or relating to, the NCA is also subject to an absolute exemption. It may also be subject to exemption under other UK legislation. Onward disclosure may be unlawful, for example, under data protection legislation. Requests for disclosure to the public must be referred to the NCA FOI single point of contact, by email on StatutoryDisclosureTeam@nca.gov.uk. All email sent and received by the NCA is scanned and subject to assessment. Messages sent or received by NCA staff are not private and may be the subject of lawful business monitoring. Email may be passed at any time and without notice to an appropriate branch within the NCA, on authority from the Director General or their Deputy for analysis. This email and any files transmitted with it are intended solely for the individual or entity to whom they are addressed. If you have received this message in error, please contact the sender as soon as possible.