Skip to content 
Guidance
ECO4 & GBIS: How the Privacy Notice Affects Your Data & Rights
- From: James Parker
- Published 14 April 2025
I assume you might have applied for home energy improvements recently, and now you are worried about what happens to your personal information. Well, you are not the only one; this is the most common concern shown by the applicants, so feel at home.
To answer all the concerns, we will discuss how your data is handled under the Energy Company Obligation (ECO4) and the Great British Insulation Scheme (GBIS). These are the widely applied schemes in the UK.
What Are ECO4 and GBIS Schemes?
ECO4 and GBIS are government programs which help homeowners improve the energy efficiency of their homes without breaking the budget.. They offer various benefits such as:
- Better insulation to reduce energy bills for households.
- Cosy, comfortable, and warm homes.
- Increased property value (up to 14%).
What Personal Information Do They Collect?
When you apply for these schemes, various details about you and your property are gathered. Have you ever wondered exactly what information is being collected?
Your Personal Details
- Your name
- Home address
- Email address
- Phone number
- Benefit status (if applicable)
Your Property Information
- Installation address (including Unique Property Reference Numbers)
- Type of property (house, flat, bungalow)
- Current insulation status
- Existing heating systems
- Energy efficiency rating
Installation Details
- Type of improvements being installed
- Information about the installer
- Dates of assessment and installation
- Technical details of the insulation measures
This might seem like a lot of information, but each piece serves an important purpose in making sure the right help goes to the right homes.
Why Do Authorities Need All This Data?
You might be thinking, “Why application process need so much of my personal information?” It’s a fair question! There are three main purposes your data is used for:
1. Monitoring and Evaluation
Your data helps the government authorities:
- Track if installations are completed as per the standards.
- Keep the record of total installations under the scheme (for reporting and annual statistics release.
- Evaluating how well the schemes are working to detect potential improvements
- Improve future energy efficiency programs
2. Preventing Fraud and Errors
Unfortunately, where there are benefits, there can sometimes be people trying to abuse the system. Your data helps:
- Make sure only eligible households receive support
- Verify that installations actually take place
- Ensure quality standards are maintained
- Protect taxpayer money from being wasted
3. Developing Better Policies
Your information (when combined with others) helps:
- Design more effective energy efficiency programs
- Target helps those who need it most
- Track progress toward national energy goals
- Plan for future environmental improvements
Who Can See Your Personal Information?
Are you concerned about who has access to your data? That’s completely understandable. The good news is that your information isn’t shared freely. Access is strictly limited to organizations that need it for specific purposes.
Government Bodies
- Department for Energy Security and Net Zero
- Welsh and Scottish Governments (if you live in those nations)
- Office for National Statistics (for anonymous statistical purposes)
Partner Organizations
- Local authorities (to verify eligibility and prevent fraud)
- Delivery partners (installers and assessors)
- Accreditation bodies (ensuring quality standards)
- Research partners (using anonymised data)
Check Eligibility For Eco4 Grant!
If you or any of your household is on benefits, you may be eligible for Free ECO4 Grants.
How Long Do They Keep Your Information?
Have you ever wondered how long organizations hold onto your data? For ECO4 and GBIS, your personal information is generally kept for up to 10 years. For some purposes related to fraud prevention, data might be kept for different periods based on the type of installation:
| Type of Measure | Typical Retention Period |
| Simple measures | 5-10 years |
| Major installations | 10-20 years |
| Structural changes | Up to 25 years |
Remember, these longer periods only apply to data needed for specific purposes, not all your personal information.
Where Is Your Data Stored?
The systems used for ECO4 and GBIS are managed by providers like Microsoft and Amazon Web Services, which means your information might be transferred outside the UK at times.
Should this concern you? Not necessarily. The privacy notice explains that any international transfers are protected by:
- UK adequacy regulations
- Standard contractual clauses
- Data protection agreements
- Security safeguards
These protections ensure your data remains secure, even if it’s processed outside the UK.
What Rights Do You Have Over Your Data?
Did you know you have significant rights when it comes to your personal information? Under data protection laws, you can:
1. Access Your Information
You have the right to request copies of the personal data being held, ask for explanations about how it’s being used, and inquire about who can see your information.
2. Correct Your Data
You can ask to fix any mistakes or inaccuracies, update details that have changed or even add missing information from your data.
3. Control Your Data (In Some Cases)
You can request the deletion of your data under certain circumstances and ask for processing to be restricted. You can also object to certain types of processing.
4. Make Complaints
- Contact the DESNZ Data Protection Officer with concerns
- Escalate to the Information Commissioner’s Office if needed
These rights ensure you maintain some control over your personal information, even after sharing it with government schemes.
How to Exercise Your Data Rights?
Wondering how to actually use these rights? It’s simpler than you might think. The privacy notice provides clear contact details for the Data Protection Officer at DESNZ:
- Email them directly
- Write a formal letter
- Call their office
When contacting them, be specific about:
- Which right are you exercising
- Your relationship to the ECO4 or GBIS schemes
- Any reference numbers from your application
- The specific information you’re concerned about
Remember, they must respond to your request within one month, though complex requests might take longer.
Practical Tips for Protecting Your Information
While the government has responsibilities to protect your data, there are steps you can take too:
- Read the full privacy notice before applying for ECO4 or GBIS
- Keep records of your application and any communications
- Verify the identity of anyone requesting additional information
- Update your contact details if they change
- Ask questions if anything seems unclear or concerning
These simple steps help ensure your information remains as secure as possible throughout the process.
Conclusion
The ECO4 and GBIS schemes offer valuable benefits for homeowners and the environment, making homes warmer, bills lower, and reducing carbon emissions. To deliver these benefits effectively, they need certain personal information from you.
The privacy notice exists to ensure this data collection is fair, transparent, and secure. It balances the need for effective program administration with your right to privacy and data protection.
