In terms of including additional analysis on non-compliance in the Strategic Export Controls Annual Report - information provided to ECJU by exporters is subject to the requirements set out in the UK General Data Protection Regulation (GDPR) and under the law of confidentiality, as well as the provisions of DIT’s Privacy Notice for export control applications. These requirements prevent the release of certain information to others or into the public domain. This includes information that could identify companies that have been found non-compliant. Taking account of these restrictions, ECJU will consider how best to present information in our Annual Report that improves the transparency of the compliance process.