RCB Data Processing Statement

The Representative Church Body (”RCB”) is the Church of Ireland’s principal trustee, incorporated by Royal Charter in 1870. The RCB serves as a corporate trustee for many Church of Ireland buildings/land and funds/investments, providing a wide range of services supporting the mission, ministry, governance and administration of the Church throughout Ireland and Northern Ireland. The RCB serves the dioceses, parishes, bishops, clergy, committees and other Church organisations by providing central services including investment management, property management, trust administration, legal services, clergy stipend and pension administration, human resources support, synod services including committee support, charity compliance guidance, data protection advice, safeguarding support, education services, library and archive services, grant administration, and communications support.

In carrying out these responsibilities, as a data controller, the RCB holds and processes personal data relating to individuals, including serving and retired bishops and clergy, ordinands, current and former members of the Representative Body and RCB committees, General Synod representatives and members of Synod committees, diocesan and parish officers, employees, volunteers, pensioners, contractors, donors, service providers, library and archive users, safeguarding participants, grant applicants, correspondents and other members of the public. Personal data is any information that can be used on its own, or combined with other details, to identify a specific living person.

The RCB as Data Controller

For most of its activities, the RCB acts as a ‘data controller’ and determines the purposes and means of processing personal data. In some circumstances, the RCB may act jointly with other Church bodies or process personal data on behalf of another Church organisation where a formal arrangement exists. The RCB is committed to ensuring that personal data is processed lawfully, fairly, transparently and securely and in accordance with the principles of accountability, data minimisation, purpose limitation and integrity and confidentiality.

Legal Framework

The RCB processes personal data in accordance with:

• Regulation (EU) 2016/679 (EU GDPR)
• The Data Protection Act 2018 (Ireland)
• The Data Protection Act 2018 (United Kingdom); Data (Use and Access) Act 2025
• Applicable charity, employment, pensions, safeguarding and trust law obligations in both jurisdictions. As an all–island organisation operating across both jurisdictions, the RCB seeks to apply a consistent and high standard of data protection compliance throughout its activities. 

Legal Bases for Processing Personal Data

Depending upon the activity involved, the RCB processes personal data under one or more of the following lawful bases – performance of a contract; compliance with a legal obligation; legitimate interest; and in specific instances, consent.

Special Category Data

The RCB processes special category personal data, including information relating to health, safeguarding matters, clergy discipline, pension administration and employment matters, as well as data disclosing that an individual is a member of the Church of Ireland. Such processing will only occur where a lawful condition applies and where suitable safeguards are in place.

Archives, Library and Historical Records

The RCB maintains significant archival and historical records through the RCB Library and Archive. These collections support the preservation of the history, governance, ministry and heritage of the Church of Ireland and are maintained for archival, historical, research and public interest purposes, permitted by data protection legislation.

Protecting Personal Data

The RCB employs appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.

Further information is available from the RCB Data Protection Officer at [email protected] or +353 1 4125660