Personal information charter

This information charter sets out the standards you can expect from the Office of the Secretary of State for Wales when we collect, hold or use your personal information.


  1. How to access your personal information
  2. Data Protection Officer

We will ensure that we will treat all personal information in accordance with data protection legislation, including the General Data Protection Regulation and Data Protection Act 2018.

When the Office of the Secretary of State for Wales collects, holds, uses or processes in any way your personal data, you are entitled to be told:-

  • the purpose for which the data is being used, and our lawful basis for processing it
  • how long we will keep your data, who we will share it with
  • whether it will be transferred or accessed outside the UK or EU, and what legal safeguards are in place to protect it
  • about any rights you may have, including the right to access your information, or to object to its being used
  • about your right to complain to the Information Commissioner if you feel that your personal information has been mishandled
  • about the identity of our Data Protection Officer (an independent advisor on data protection matters)

You are also entitled to have your personal information:-

  • protected and kept secure
  • kept accurate and up to date
  • not used for purposes which are incompatible with those for which it was collected
  • kept only for as long as it is needed for the purpose for which it was collected (unless it must be kept as part of the historic record)

More information

You can get more information about what we use personal information for in our Privacy Notice Privacy Notice_EN (PDF, 318KB, 6 pages) .

How to access your personal information

If you would like a copy of any personal information that we hold about you, please contact the Office of the Secretary of State for Wales:-

Correspondence Team
Gwydyr House


Telephone: 020 7270 0575

Data Protection Officer

If you have any concerns about how the department is handling your personal data, you may contact the department’s Data Protection Officer (DPO).

The DPO provides independent advice and monitoring of Office of the Secretary of State for Wales’s use of personal information. They can be contacted at the following address:-

Data Protection Officer
Office of the Secretary of State for Wales
Gwydyr House