Our role The Legal Ombudsman (LeO), as a data controller, is mandated by data protection legislation to process personal and sensitive data safely and securely. Under data protection legislation personal information we hold about individuals must be: Used lawfully, fairly and in a transparent way. Collected only for valid purposes that we have clearly explained and documented and not used in any way that is incompatible with those purposes. Relevant to the purposes it was originally collected for and limited only to those purposes. Accurate and kept up to date. Kept only as long as necessary. Kept securely. We are registered with the Information Commissioner’s Office (ICO) to process personal and special categories of information under the Data Protection Act 2018. Our registration number is Z1858613.