I'm the co-founder of a UK-based startup, and we're on the cusp of raising a seed round from a number of angel investors, the majority of whom will invest as private persons.

Our lawyers advised us to conduct KYC on our angel investors. To do that, we are looking to use Amiqus, which is a UK government certified Identity Service Provider.

It's all fine and dandy as long as we store the KYC data with Amiqus. However, we may wish to eventually stop paying their monthly subscription. When we do that, we will be able to download the KYC data in PDF form and store it ourselves.

Here's the question: will we need to send a privacy notice to our investors (by that time, our shareholders) before we are able to cancel our Amiqus subscription?

I imagine that the relationship between a company and its customers is different than that between a company and its shareholders. At a minimum, I would suspect that in the latter case, the data protection requirements should be less stringent.

1 Answer 1


The GDPR applies to natural persons

If your shareholders are natural persons in the EU or UK, it applies to them it exactly the same way that it applies to customers or any other natural person about who you are collecting data. If your shareholders are body corporates (e.g. other companies) or not in the EU or UK, it doesn’t apply to them.

Putting aside the KYC aspect, you will need to process personal information: like your shareholder’s name and address. You need to have all the aspects of GDPR compliance in place, including giving the shareholders the reasons why you are collecting data and how it will be used, before you collect it

  • Note however that Article 13(4) provides an exception "where and insofar as the data subject already has the information". Depending on the context (e.g. shareholder who is also a director), they may well already have some or all of the information.
    – JBentley
    Commented Oct 1, 2022 at 16:13

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .