Version 7: Applicable from: 25 March 2025
About Child of the New Century
About this privacy notice
Giving and withdrawing your permission to take part in CNC
Data controllers
Contact details of the Data Controller
Contact details of the UCL Data Protection Officer (DPO)
Lawful basis for processing
Personal data we collect about you
Personal information that we collect from other sources
Why we process your data
Who we share your data with
Transfers of data outside of the UK
Data security
How long we keep your data for
Complaints
Cookies
Further information
Version control
CNC is one of several national longitudinal cohort studies at the UCL Centre for Longitudinal Studies (CLS). Child of the New Century (CNC) follows the lives of around 19,000f young people born across England, Scotland, Wales, and Northern Ireland in 2000-02. CNC researches your physical, socio-emotional, cognitive (thinking) and behavioural development over time, as well as detailed information on your daily life, behaviour, and experiences. The study also collects information on economic circumstances, parenting, relationships, and family. We share our findings from the study with researchers who are discovering the topics that affect your generation.
CLS (‘we’, ‘our’ and ‘us’) values your contribution to CNC (‘the study’). We respect your privacy and are committed to protecting your personal data. This privacy notice tells you why and how we collect and use your personal data and provides information about your rights. This privacy notice applies to personal data provided to us, by you and about you by third parties. This privacy notice is for anyone whose data that we hold for the research purposes of the study including:
We use the terms ‘you’ or ‘your’ in this document when referring to study cohort members.
We seek your informed consent to be part of the study. We provide you with appropriate information about the study and how your information will be used. We do this so that you know what to expect when you choose whether you would like to take part. You can tell us at any time that you no longer want to be contacted about the study. You can also tell us if you’ve changed your mind about us adding information from administrative records or about the use of any biological samples you have given us including your DNA. You do not need to give a reason for this. Our UK GDPR lawful basis for processing study data for research purposes is public task rather than consent. The lawful basis section below gives more information about this.
UCL is the Data Controller of the study. Other organisations have been the data controller of CNC in the past. When we share data with other organisations, these organisations may also be Data Controllers. We tell you about how UCL and other organisations that we work with process your data and whether these organisations are data controllers in the information that we provide when we collect data from you.
You can contact us at the details below if you:
Call: 0800 092 1250
Email: childnc@ucl.ac.uk
Post: Child of the New Century, Centre for Longitudinal Studies, UCL Social Research Institute, 20 Bedford Way, London WC1H 0AL
If after contacting us, you need more help or wish to complain about how we use your personal data or use any of your individual information rights, please contact UCL’s DPO:
Email: data-protection@ucl.ac.uk
Post: Data Protection Officer, UCL, Gower Street, London WC1E 6BT.
Study data is processed for research purposes under GDPR Article 6 (e) ‘Public task’. CLS processes sensitive or special category personal data for research purposes under Schedule 1, Paragraph 4 of the DPA 2018. Consent is not the UK GDPR lawful basis for processing study data for research purposes.
If required, we may also process your personal data according to GDPR Article 6(c): ‘processing is necessary for compliance with a legal obligation to which the controller is subject’.
The NHS supply us with updated addresses and notify us when study members die or move outside of the UK. We use this information to keep your contact details up to date and to stop us attempting to contact those who have died or emigrated. The information we receive about deaths (date and cause) is also used for important research. For this purpose, for England and Wales, we apply to the Confidentiality Advisory Group to set aside the common law duty of confidentiality under Section 251 of the National Health Service Act meaning that we do not ask your permission to receive this information. The legal bases within the UK GDPR and the Data Protection Act 2018 are separate and in addition to, the permission you gave to take part in the study.
Personal data, or personal information, means any information about an individual from which that person can be identified. Access to personal data is strictly controlled. The study collects, uses, stores, deposits, shares, and transfers different kinds of personal data about study members to understand what life is like for your generation. The data that we hold for the study includes:
Information that you share with us during surveys:
Information from the data that you share with us during surveys:
Information provided by other organisations:
As part of our linked data programme (e.g., government departments and agencies such as NHS organisations or Department for Work and Pensions) and for contact tracing purposes (e.g., to help us keep your contact details up to date).
Data relating to family members of study cohort members:
During surveys we have asked you to provide information about family members. Family members may also have provided information about themselves by participating in surveys, providing biological samples or by taking part in our linked data programme.
As part of our linked data programme, we collect information from external sources for contact tracing and research into issues that affect your generation. We link records from external sources to the data collected in surveys as part of our linked data programme (described below). We have collected permission from you to link to data about you, and from your parents to link to data about them and about you and your siblings. So far, we have linked your mother’s maternity records and records about your birth and education records to the survey data. We are in the process of linking other health data about you to your survey data. Linked data is pseudonymised and deposited at the UK Data Service and similar research environments.
In the Age 23 Survey we are asking those of you with children for permission to add information from their health and education records.
We hold data about the partners, household, parents, children, and professional contacts of study cohort members that have been supplied by study cohort members during a survey.
Data about study cohort members has also been collected from family members of study cohort members.
We have also collected data from professionals (e.g., teacher or doctor).
We also receive information when our website is used (e.g., from cookies or similar technologies).
The data we have received about you from government departments and information about where you live may be used in combination, together with the data you have provided (e.g. your survey responses and information from your biological samples).
We process your data to keep in contact with you, to carry out and share our research about the issues that you experience in your life and to keep a record of our contact with you:
Your contact details
We collect your contact details from you to keep in touch with you and to invite you to take part in surveys and activities that relate to the study. Contact details are shared securely with organisations that provide services to us and with other data controllers as part of our linked data programme.
Contact tracing
We ask you for contact details of other people too – including your partner (if you have one) and someone outside of your household, (known as your ‘stable contact’). This is so that if you move to a new home and we’re not able to contact you, we can contact these people to try to find out where you have moved to. Please do tell us if your contact details change. If you provide us with contact details for anyone else, please check with them that they are happy for us to hold this information. Please let us know if not and we are happy to remove these details if they do not wish for us to hold them.
We also apply to the NHS and government departments for up-to-date contact details and for notifications about study members who have moved out of the UK or who have died. We match the contact details and personal information that we hold with similar data from NHS records or the records of other government departments.
We also use contact details validation services to update your contact details – this involves us sharing the latest contact details we hold with companies who match these against other databases and provide us with new information where possible. We also use information you’ve made publicly available online to update your contact details.
Survey research data
We collect your survey data (and other kinds of research data) with your permission to understand the things that are important to your generation. You have the option to refuse to answer any individual questions without explanation. You can also withdraw from the survey at any time. You do not need to give a reason. We share pseudonymised and de-research data securely and under licence arrangements for research purposes via the UK Data Service and other trusted research environments such as the UK Longitudinal Linkage Collaboration (UK LLC) and SAIL Databank. Information that would identify you is masked or removed from this data.
Qualitative research data
In addition to the main survey questionnaires, some of you will have taken part in an open in-depth conversation with a researcher. Recordings and/or transcripts of these interviews have been kept where you provided permission. These interviews are recorded then transcribed so that they can be made available for research. Any information which could allow you to be identified is removed from the transcripts made available to researchers. Copies of the original recordings and transcripts will be retained at CLS. These are stored securely with restricted access within UCL.
Linked data programme
Our linked data programme links a range of external data to study records to build up a fuller picture of participants’ lives. With your permission, we use your personal information to link data from government agencies (e.g., about your health, education, employment, finances, and criminal records) to your study record. Data from government agencies is generated when people use government services or come into contact with them.
When you turned 17, we asked your permission, to share your contact details and personal information with government departments and agencies, and NHS organisations. We did this to add information about your education and health from these organisations’ records to your survey data. We asked your permission to add other information to your records (e.g., about your economic circumstances or any criminal records) – we have not done this so far. Adding information to your records helps us to understand the things that affect your life and to produce research about your generation. When you were a child, we asked your parent or guardian for permission to add information about health and education to your record. We also asked your parents’ permission to link to information from their health and economic records, and from your siblings’ health and education records.
Linked data is pseudonymised and deposited at the UK Data Service and similar research environments.
Your address and postcode (and previous addresses) are also used to match data on your location/neighbourhood to your study data. The information that we add is about your local area as a whole, your street or sometimes your specific address. This includes a broad range of data including Ordnance Survey, housing, environment, weather data or economic characteristics of your area such as deprivation levels. We also add other data to your record, for example, about the characteristics of the school that you attended.
We do not ask your permission to add this kind of geographical information because the data is not individual level information about you. Frequently, this information is publicly available and adding this information does not usually require us to share any of your personal information with any other organisations.
In the COVID-19 web surveys we explained that we aimed to link data from the COVID-19 symptom tracker app to your study data, unless you opted out. This linkage did not take place and will not take place in the future.
We also use data from the records of government departments to update your record for contact tracing purposes (described above) and for research into health and mortality.
UK Longitudinal Linkage Collaboration (UK LLC)
Across the UK, thousands of people are taking part in longitudinal studies like Child of the New Century which follow people over time. UK LLC, is bringing your data together with data from other studies, to make them even more valuable for science. The data includes the information you have given through the surveys, as well as linked administrative data (if you have previously provided us permission to access these). UK LLC was initially created in 2020 as a resource to support researchers to understand the impacts of the COVID-19 pandemic. UK LLC has now received further funding from the Economic and Social Research Council and the Medical Research Council, to make linked study data available for any ethically approved research which is in the public benefit – not just research into COVID-19.
If you have given permission for your health records to be linked, then UK LLC has now linked your study data with information from NHS hospital data. This includes information about hospital visits and treatment, critical care, emergency care, mental health, cancer diagnoses and treatment. Plans are also underway for UK LLC to link study data with administrative data from the Department for Work and Pensions (DWP), HM Revenue & Customs (HMRC) and the Department for Education (DfE) for those of you who provided permission.
UK LLC data is made available to approved researchers in the UK under licence. Only qualified and approved UK-based researchers can apply to access the data within the UK LLC Trusted Research Environment (TRE). The UK LLC’s application process adheres to the highest standards of information governance to ensure the safe use of data. UK LLC is ISO 27001 certified, accredited to the NHS Data Security and Protection Toolkit standard and also accredited by the UK Statistics Authority as a processor under the Digital Economy Act.
The University of Bristol is Data Controller of data placed in the UK LLC database. University of Swansea acts as a Data Processor for the University of Bristol UK Secure eResearch Platform (UKSeRP). Digital Health and Care Wales (DHCW) and the Office for National Statistics (ONS) are the UK LLC’s Data Processors for record linkages.
CLS sends your pseudonymised survey responses to the UK SeRP together with a unique ID. If you have given CLS permission for your records to be linked, CLS sends your personal data (such as full name, address, date of birth, sex, NHS Number) and a unique ID to DHCW. DHCW send your personal data and a different unique ID to the agencies that hold your records, such as NHS England for health records, Office for National Statistics (ONS) for employment, tax and benefits records from DWP, HMRC, and DfE for the education records. Those agencies will then send your pseudonymised linked data to the UKSeRP who match your study responses and linked data together before assigning an encrypted ID and passing them to UK LLC. Your survey responses will always be kept separate from your personal data that identifies you directly (name, address etc).
We provide further information about how we make data available for research in the privacy and data protection FAQs.
Your biological samples
We have Research Tissue Bank ethical approval for the storage, use and distribution of biological samples. Our collection, storage and use of these samples is regulated by the Human Tissue Act 2004. We gained permission from your parents to collect:
With your permission, we also collected a blood sample as part of the Covid-19 antibody testing project. Any blood which was left over after the antibody test was conducted was destroyed by the laboratory.
We will not provide you with feedback of the results of genetic (DNA) testing. This data is used for research and not clinical diagnostic purposes. This position is considered current ‘best ethical practice’ given we cannot be certain about the clinical relevance of any individual person’s results. However, scientific developments in genetics are happening rapidly and this policy will be regularly reviewed.
Questionnaires, forms, and requests
Where you, your family, contacts, or other respondents such as your teachers, have completed paper questionnaires as part of the study, we may store original copies or digital scans of these so that we have a record of you taking part in the study and for research purposes. We also store original copies of consent forms and administrative paper records used by interviewers during surveys. Paper copies are stored securely. Digital copies are held in a secure restricted access UCL database. Some of these original copies were collected by other organisations that managed the cohort before us. We also keep a record of any requests that we have had from you
Study members are under no statutory or contractual obligation to provide us with personal data. The UK GDPR gives people rights over their data. Some of these rights depend on the reason for collecting personal data and do not apply in every circumstance. These rights, therefore, may be subject to our policies or ‘exemptions’ (opt outs) allowed by the UK GDPR. You can contact us at any time to tell us:
When you contact us to exercise your rights, we will:
Table 1: Summary of the data that we hold for CNC and who we share it with
| Types of data that we hold about you |
Controllers |
Categories of recipients | Purposes of sharing your data |
| Name, contact details (for you, your family members or ‘stable contacts’ and your professional contacts)
Personal information
(e.g., name, address, email address, telephone number, sex, date of birth, NI Number). |
UCL | Contact details validation services
International email, marketing automation, and customer engagement service provider
Health data insights companies
Survey agencies |
To stay in contact about the study. |
| Survey answers | UCL | Health data insights companies
Survey agencies |
For research into the issues that affect your generation. |
| Cognitive test result | UCL | The Many Brains Project | For research, statistical and archiving purposes. |
| Biological samples (e.g., saliva, milk teeth) | UCL | Biobanks Courier services Health data insights companies International Licenced laboratories Nurse/survey agency Researchers Research organisations |
To collect and process your sample for health and DNA research. |
| DNA from saliva sample Genetic data/GenotypeResearch data derived from biological samplesDNA information, and potentially whole genome sequence data and other genomic datasetsHealth metrics:
|
UCL | Biobanks
Licenced laboratories Researchers Research organisations |
To collect and process your sample for health and DNA research. |
De-identified research data from the study and surveys including:
|
UCL (and public sector bodies for specific projects) | Organisations conducting research
Research organisations Public sector researchers Private sector researchers Survey agencies Trusted research data services Transcription service |
For health and social research. |
| Personal identifiers such as name, sex, postcode, date of birth, address, National Insurance number (if known), NHS number/ID (if known) and study ID (study-specific pseudonymised identifier). |
UCL | Government departments
NHS organisations Trusted third parties for data linkage Research/statistics organisations |
To stay in contact about the study.
For our records linkage programmes. |
| Mortality data
Information about where you live Other information from external data controllers Health data |
UCL
|
Research/statistics organisations | To stay in contact about the study.
For our linked data programme. For research purposes. |
|
Legacy data (e.g., original questionnaires and consent forms).
|
UCL | Researchers/research organisations | For social research and archiving purposes. |
| Personal information, sensitive/special category personal data | UCL, relevant authorities/bodies | Public sector bodies/authorities (e.g., police, NHS, social services)
Your stable contacts |
To meet our legal obligations.
For safeguarding purposes. |
| Personal information | UCL | UCL staff and third parties involved in managing participant contact and data security | To keep a record of participation in the study and manage contact with participants and data security. |
There may be rare occasions where it may be necessary to use your personal information to protect you or others. For example, when something you tell us indicates that someone is at risk of harm. We may share this information with your stable contacts or appropriate public sector bodies.
We share your contact details or personal information securely with other organisations, for projects that you have agreed to be part of, including:
We may also use selected pseudonymised quotes from your survey responses to promote our research findings.
CLS, and the organisations that we work with, transfer personal data outside of the UK and Europe. Some countries outside of Europe have different data protection rules and may not protect personal data to the same standard. In this case, we are required to have agreements in place to protect this information in accordance with the law.
We have put in place appropriate security and organisational measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. We have established procedures to deal with any suspected personal data breach and will notify study members and any applicable public body of a breach where we are legally required to do so.
As the study follows study members’ whole life course, we keep study data for at least as long as the study exists and as long as the law allows us to. We will review the data that we hold whenever we receive an individual rights request. Further information on how long we keep records for is included in the UCL records retention schedule.
Those who wish to complain about our use of personal data, may send an email with the details of the complaint to the Data Protection Officer (data-protection@ucl.ac.uk )so that we can look into the issue and respond.
Study members also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) (the UK data protection regulator). For further information on information rights and how to complain to the ICO, please refer to the ICO website.
When people visit our site, cookies are sent to their computer. Cookies are small text files placed on devices which web servers use to produce information about how our site is used.
Find out more on our Cookies page.
This privacy notice supplements the following UCL Privacy Notice(s):
Research participants for health case purposes privacy notice.
More information about how we use personal data including how we keep it secure is available in the privacy and data protection frequently asked questions (FAQs).
We keep this privacy notice under regular review to make sure it is up to date. The last update was on: 25 March 2025.
