Utilities & Energy
A utility holds dull data that is verified and current: identity, address, payments and meter readings. It runs to credit and fraud agencies for the life of the account, the promise never to sell it comes qualified, and some vendors use what they receive for themselves.
The read at a glance
A smart meter reports your household in half-hourly readings.
A leak exposes when you are home and how you live, minute by minute.
Account and consumption data is kept for years for billing and regulation.
Setup needs identity and address; ID documents are uncommon.
Industry profile reviewed 23 August 2026. Also machine-readable via the free API.
If it leaks
Utility records are how people get found: a name tied to a current address and a payment history. That pairing is where stalking and identity theft start, and it is exactly what these files hold.
What repeats in the policies
Boring data, verified and current
A utility account binds verified identity, date of birth and bank details to a current address and a usage stream: how much you use, and when. It looks dull, but it is verified and current, exactly what identity databases and people-finding tools want.
Credit agencies get a feed for the whole account
Your payment record goes to credit and fraud agencies, and their data comes back, for the life of the account. Suppliers also buy broker profiles and add them to your file. A promise never to sell your data usually excepts the supplier's own group and its own marketing.
The usage stream is a record of when you are out
A meter that reports through the day rather than once a year shows when a home wakes up, when it empties, and when it is left standing for a week. Once that pattern is relabelled as de-identified, it sits outside every other promise in the notice, and the policies keep it.
What a company here typically holds
Worked out from the industry, not from any one company. What you actually handed over is yours to record.
What this can reveal about you
Built only from what this kind of service actually collects. A dimension that the data does not support is not listed.
Where you go Likely
Consumption reveals when you are home and awake.
Health Possible
Medical-equipment use shows in the load profile.
What lawfully stays after you leave
Two kinds of hold. Law sets it: a statute makes them keep it. They set it: a ground the company grants itself.
Tax and accounting records Law sets it about 6 years
Tax and company law makes them keep billing and payment records.
Fraud-prevention markers They set it about 2 to 6 years
To flag suspected fraud, often on a shared industry database you cannot reach through the company.
Records tied to a live or potential dispute They set it the limitation period of the claim
They can keep records to defend a live or possible legal claim.
Who wants this data
Utility and phone records covering hundreds of millions of people have been sold into identity tools used by police and investigators, and your payment record flows to credit bureaus by design. Some carriers say plainly that customer data trains their own AI.
Sold or shared Possible
Smart-meter consumption data is shared with third parties.
AI training Moderate
Consumption patterns train demand models.
Even anonymised, this can still be you
Pseudonymised smart-meter load profiles have been re-linked to the households that produced them (Jawurek, Johns and Rieck, 2011).
Name, date of birth, postcode Typical
Fifteen demographic attributes re-identify 99.98% of Americans in a released dataset (Rocher, Hendrickx and de Montjoye, Nature Communications, 2019); date of birth, postcode, and sex alone did it for most people in the first study of the problem (Sweeney, 2000).
Payment patterns Typical
Four card transactions identify 90% of people in payment data (de Montjoye et al., Science, 2015).
The studies Estimating the success of re-identifications in incomplete datasets using generative models (Nature Communications 10, 3069, 2019)·Simple Demographics Often Identify People Uniquely (Carnegie Mellon University, Data Privacy Working Paper 3, 2000)·Unique in the shopping mall: On the reidentifiability of credit card metadata (Science 347 (6221), 2015)·Smart Metering De-Pseudonymization (Annual Computer Security Applications Conference, 2011)
The wording that does the work
Clauses that recur across this industry, and what each one actually permits.
“to provide and improve our services”
The catch-all purpose. Analytics, profiling, personalisation and AI training all fit under it. When they want to do something new with your data, this sentence usually already allows it.
The move An objection tells them to use your data to run the service and nothing more.
“we do not sell your personal information”
Usually this means no cash changes hands. Your data can still go to ad networks, analytics firms and partners, because they count that as sharing rather than selling.
The move Use the do-not-sell switch where there is one, and put an objection in writing as well.
“service providers, partners, and affiliates”
This is how your data leaves with no name attached. Recipients are described by what they do rather than named, and you cannot send a request to a company you cannot name.
The move An access request can ask for recipients by name rather than by category, and UK and EU law put that choice with you.
“aggregated or de-identified information”
Taking your name off does not take away the pattern, and the pattern often still points at you. Policies give themselves free use of this data with no end date, on the basis that it is no longer about you.
The move If a deletion comes back as 'anonymised', keep the reply. It usually means de-identified, and it is their claim, not a fact you can check.
“retained as long as necessary, or as required by law”
They can keep it for legal duties, tax rules, fraud prevention, possible lawsuits and their own business reasons. None of those has a firm end date, so deletion turns into something you have to argue for.
The move Which reasons apply to you, and how long each runs, is a request of its own.
“you grant us a licence to use your content”
This is a contract term rather than a data setting, so a privacy request cannot undo it. A careful version ends when your account does. A broad one can be passed on, never expires and survives deletion.
The move Their terms say whether the licence ends when the account does. Close the account and log the date here.
“credit reference and fraud prevention agencies, both when you sign up and routinely afterwards”
The feed runs both ways for the life of the account. Missed payments change your credit file, and fraud markers follow you across the industry.
The move Much of this pipe is in the contract, but an access request still covers what was reported about you, and to whom.
“we never sell your data to anyone outside our group for their own marketing use”
The exceptions do the work: sharing across the whole corporate group, passing your details to firms that buy debts, and using your data to aim their own ads.
The move An objection draws the line in writing: supply and billing, nothing else.
“in some circumstances these entities may use your information for their own legitimate business purposes”
The vendor stops working only to the utility's instructions and starts using your data for itself. From that point the promises in this notice no longer travel with it.
The move An access request covers which vendors received your data, and in the UK and EU they can be asked for by name.
Their own policy is the one that binds them. Pin it down with a request, and keep the reply.