The short answer is: yes, referees, just like applicants, are required to consent to an institution's Privacy Notice prior to submitting any data.

Please note: referees can only consent to the Privacy Notice, once the institution the student is applying to has published the Notice. In cases when referees cannot see any Privacy Notice checkbox, the institution probably has not published it yet through the platform. 

The Privacy Notice is defined by the higher education institution the student is applying to and the referee will be submitting the recommendation letter to. The institution controls the data that is submitted through the Glowbase PhD Recruitment Platform and they ultimately decide how long they are going to keep it and where. 

If you have any questions about a Privacy Notice you are asked to consent to, we urge you to contact the institution you are supposed to submit the letter to and they will be able to answer your questions.