Ms Moyagh Murdock:

It is personal data between the operator and ourselves. However, it falls within a tendering process to tell an operator he or she needs to submit the risk indicator to comply.