Ms Marguerite Sayers:

No. From a GDPR perspective, I do not believe that they are.

I suppose they would have to inform every one of the 7,000 direct debit originators. As the Deputy said, we are one of the larger ones but we are by no means the only one. It may be a complex process.