Will the Cabinet Secretary confirm which organisation is the data controller for the anti-racist metaverse project, and on what date that organisation completed a data protection impact assessment?
The anti-racist virtual world, commonly referred to as the Metaverse, was developed and delivered by further education colleges.
The original grant award to Cardiff and Vale College for the anti-racist curriculum project did not include the use of personal data, meaning no data controller needed to be identified in the grant award documentation for this project.
The processing of personal information for the purpose of the Metaverse is, consequently, wholly a matter for the organisation with the ‘means and purpose’ for the processing, in accordance with data protection legislation, and it is for this data controller to determine whether its processing requires a Data Protection Impact Assessment to be prepared.