There a 6 legal bases, or valid reasons, for an organisation to process your data. Empowering Enterprise relies on the legal basis of Public Task for all activities on Empowering Enterprise, except for case studies for which we need your consent. Public Task means that the processing is necessary for performing a task that is in the public interest or official function and has a clear basis in law.
Consent is another legal basis we will rely on, but this will only be if you agree to provide some information about your time on Empowering Enterprise so we can share your successes and show others the benefits of the project. To gain your consent for this, there is detailed paperwork for you to go through with your mentor.
Lawful Basis for Special Category Data
The DWP has confirmed that processing is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment and social security and social protection law in so far as it is authorised by Union or Member State law or a collective agreement pursuant to Member State law providing for appropriate safeguards for the fundamental rights and the interests of the data subject
For more information about the legal bases for collecting personal data, see the Information Commissioners Office website: https://ico.org.uk/your-data-matters/does-an-organisation-need-my-consent/