Whistleblowing at the Environment Agency: privacy notice
Published 25 April 2024
Applies to England
This privacy notice explains how the Environment Agency will process personal data related to:
- reporting an issue by your employer
- wrongdoings by an Environment Agency member of staff
What personal data we collect
If you decide to provide it, the Environment Agency collects your:
- name
- phone number
- email address
What we do with your personal data
We use your personal data to help us:
- contact you if we need more information about a report you’ve submitted
- update you on the outcome of the report, should we be able to do so
- distinguish records where more than one person reports the same or similar things
- link multiple reports should you report further issues or provide an update on an existing complaint
Who we share your personal data with
The Environment Agency may share your personal data with other Category 1 and 2 incident responders in an emergency as part of our duties in the public interest that are set out in law.
In an emergency, the Environment Agency may share your personal date with:
- category 1 incident responders the police and the Health and Safety Executive (HSE)
- category 2 incident responders such as telecoms providers and water companies
These are part of our duties in the public interest that are set out in law. For example, providing intel to the police.
Where your personal data is stored, transferred and processed
We store, transfer and process your personal data on our servers in the UK.
How long we keep your personal data
The Environment Agency keep your personal data for 7 years. It may be kept for longer if it’s need for an investigation.
Complaints
You have the right to make a complaint to the Information Commissioner’s Office at any time.
Environment Agency’s personal information charter
Our personal information charter explains:
- your rights and how to complain to the Information Commissioner’s Office
- what we do with your personal information (personal data)
- how to contact our Data Protection Officer