Recommendation 27

To build a more personalised experience for its users, the BBC will need to increase its use of their personal data. The BBC plans to use these data to support commissioning decisions and to make tailored content recommendations, and needs to meet best practice and transparency in data-handling. There is potential for reputational damage if the BBC does not meet best practice in acquiring, storing and securing personal data, and being transparent about its use. In 2019, a BBC-commissioned report found it was only in the early stages of maturity in compliance with data protection legislation in its use of 43 C&AG’s Report, paras 8, 1.14 44 C&AG’s Report, paras 8, 1.14 45 Q 75 46 Q 59 47 Q 63 48 Q 62 14 BBC Digital audience data. The BBC has since improved its approach to users’ data and data protection, including appointing a data protection officer and creating a central Data Protection Office team in 2019.49