Who we are

The AV Governance Report (avsecurityreport.com) is run by Benedict Onodu, who is the data controller for the personal information described in this notice. You can contact us about privacy at any time at info@avsecurityreport.com.

What we collect and why

• Email sign-ups. If you subscribe for updates or the Governing the Room briefing paper, we collect your email address so we can send you what you asked for. Our lawful basis is your consent, which you can withdraw at any time.
• Enquiries. If you email us, including about the founding pilot programme, we use your name, contact details and message to reply and to manage any follow-up. Our lawful basis is our legitimate interest in responding to you, or taking steps at your request before entering into an agreement.
• Self-assessment responses (when available). If you complete an HCAIG-1 self-assessment, we collect your answers and any optional details you choose to give, such as organisation type, sector or country. We use answers to show your result and, in anonymised and aggregated form only, to produce benchmark research. Contact details are optional and used only if you ask us to get in touch. Our lawful basis is your consent.
• Website use. Our website is hosted on WordPress.com, which collects basic technical and usage information, such as pages visited and device type, to run and secure the site and provide visitor statistics.

We do not sell your personal information, and we do not use it for automated decision-making that affects you.

Who we share it with

We use trusted service providers to run the website and send emails, mainly Automattic (the company behind WordPress.com and Jetpack). They process data on our behalf and under their own security and privacy commitments. Some providers may process data outside the UK; where they do, they use legally recognised safeguards such as standard contractual clauses. See the Automattic privacy policy for details.

We will only share your information with anyone else if the law requires it or you have asked us to.

How long we keep it

• Email sign-ups: until you unsubscribe.
• Enquiries: for up to two years after our last contact, unless we start working together.
• Self-assessment responses: identifiable details for up to two years; anonymised, aggregated results may be kept for research.

Your rights

Under UK data protection law you have the right to access your personal information, ask us to correct or delete it, restrict or object to how we use it, ask for a copy in a portable format, and withdraw your consent at any time. You can unsubscribe from emails using the link in any message. To exercise any of these rights, email info@avsecurityreport.com. We will respond within one month.

If you are unhappy with how we handle your information, please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Cookies

WordPress.com uses cookies to run the site, remember preferences and measure visits. You can control cookies through your browser settings. See the Automattic cookie policy for more information.

Changes to this notice

We will update this notice when our services change, for example when the self-assessment tool launches. The date at the top shows when it was last updated.

---

© 2026 Benedict Onodu · The AV Governance Report · Contact