Guidance

Whistleblowing at the Environment Agency: privacy notice

Published 25 April 2024

Applies to England

This privacy notice explains how the Environment Agency will process personal data related to:

  • reporting an issue by your employer
  • wrongdoings by an Environment Agency member of staff

What personal data we collect

If you decide to provide it, the Environment Agency collects your:

  • name
  • phone number
  • email address

What we do with your personal data

We use your personal data to help us:

  • contact you if we need more information about a report you’ve submitted
  • update you on the outcome of the report, should we be able to do so
  • distinguish records where more than one person reports the same or similar things
  • link multiple reports should you report further issues or provide an update on an existing complaint

Who we share your personal data with

The Environment Agency may share your personal data with other Category 1 and 2 incident responders in an emergency as part of our duties in the public interest that are set out in law.

In an emergency, the Environment Agency may share your personal date with:

  • category 1 incident responders the police and the Health and Safety Executive (HSE)
  • category 2 incident responders such as telecoms providers and water companies

These are part of our duties in the public interest that are set out in law. For example, providing intel to the police.

Where your personal data is stored, transferred and processed

We store, transfer and process your personal data on our servers in the UK.

How long we keep your personal data

The Environment Agency  keep your personal data for 7 years. It may be kept for longer if it’s need for an investigation.

Complaints

You have the right to make a complaint to the Information Commissioner’s Office at any time.

Environment Agency’s personal information charter

Our personal information charter explains:

  • your rights and how to complain to the Information Commissioner’s Office
  • what we do with your personal information (personal data)
  • how to contact our Data Protection Officer