Guidance

Development and Partnering Team privacy notice

Updated 23 April 2024

The Government Digital and Data profession Capability Development and Partnering team runs talent development programmes for civil servants, people from private sector companies and students. It’s run by the Central Digital & Data Office (CDDO).

The data controller for CDDO is the Cabinet Office - a data controller determines how and why personal data can be processed. Read the Cabinet Office’s entry in the Data Protection Public Register for more information.

What data we collect from you

When you apply to or take part in an Talent development programme (including the Digital  Fast Stream, Digital Secondments Programme, Schools Outreach or associated programmes) we may collect:

• name
• home or work address
• date of birth
• qualifications
• assessment scores
• copies of photo ID
• National Insurance number
• telephone number
• email address
• staff number
• pay grade
• security clearance
• role
• department
• diversity data
• any accessibility requirements

We collect this information to be able to administer these programmes, undertake secondments and similar placements. We will need to share your information with other Departments for these secondments and placements.

During the programmes, we may collect personal data in the form of:

• performance data
• a video of associated events
• an audio recording of associated events
• photographs of associated events

We may use any of the above for promotional purposes in:

• social media posts, such as on Twitter, LinkedIn, Facebook or Instagram
• YouTube videos
• government blogs

After the programme is completed we may use survey applications or email to collect:

• your feedback and opinions
• information on your next role and career progression

If you volunteer to support an Emerging Talent programme we may collect your:

• name
• work location
• role
• department
• pay grade
• security clearance
• any accessibility requirements

Our legal basis for processing your data

The legal basis for processing your data for the Capability Development and Partnering team programmes is for our public task in the exercise of our functions as a government department.

The additional legal bases for processing diversity data are that it is:

• our legal obligation, and 
• part of our obligation in the field of employment law 

The legal basis for processing your data for video, audio recording, photographs or social media engagement is your consent.

The legal basis for processing your data for surveys around our service is your consent.

Why we need your data

We need your personal data to:

• provide you with the relevant information for your programme, including materials
• verify your identity and suitability to attend the relevant course
• contact you in the future about Emerging Talent alumni, courses and events

What we do with your data

We store your data on our internal IT systems.

We share your data with in-house and third-party learning providers to support course content.

We also may share your data with other government departments for analysis purposes.

Your names are shared with our security and estates team to allow you access to our places of work.

During and after your programme, we may contact you for your feedback, to evaluate the content of our programmes and how they can be improved.

The Emerging Talent team may like to track the progress of alumni and how their career progression is developing over time, so we may contact an individual while they remain working in a government department or organisation.

We will not:

• sell or rent your data to third parties
• share your data with third parties for marketing purposes

We will share your data if we’re required to do so by law - for example, by court order, or to prevent fraud or other crime.

How long we keep your data

We will only keep your personal data for as long as:

• the law requires us to
• we need for the purposes listed above

We keep:

• data collected for the Emerging Talent team for 3 years
• data collected with your consent for 3 years

We review the data we hold every year to ensure it is up to date and accurate, in line with our retention periods.

Social media and websites

We will keep any data published to CDDO social media accounts and government websites for the duration of those accounts and sites.

If you withdraw your consent, we will delete the data from our accounts and websites.

We cannot delete personal data that has been republished elsewhere. The Government Digital Service will not be able to ask other publishers to remove the information.

Where your data is processed and stored

We design, build and run our systems to make sure that your data is as safe as possible at any stage, both while it’s processed and when it’s stored.

As your personal data is stored on our IT infrastructure and processed by our third party suppliers, it may be transferred and stored securely outside the United Kingdom. Where that is the case it will be subject to the equivalent legal protection it receives in the United Kingdom. We do this through the use of appropriate safeguards such as  adequacy decisions and Standard Contract Clauses.

Who we share your data with

As part of your participation on an Emerging Talent team programme, we may share your personal data with data processors who provide us with services.

Third party processors include:

• event facilitators
• learning providers
• recruitment agencies
• Eventbrite
• Smartsurvey
• Google survey
• Mailchimp
• Doodle

How we protect your data and keep it secure

We are committed to doing all that we can to keep your data secure. We set up systems and processes to prevent unauthorised access to or disclosure of the data we collect about you – for example, we protect your data using varying levels of encryption. All third parties that process personal data for CDDO are required to keep that data secure.

Your rights

You have the right to object to your personal data being used in the Government Digital and Data talent scheme.

You also have the right to request:

• information about how your personal data is processed, and to request a copy of that personal data
• that any inaccuracies in your personal data is rectified without delay
• that any incomplete personal data is updated - you can include the missing information in your request
• that your personal data is erased if there is no longer a justification for it to be processed
• that the processing of your personal data is restricted in certain circumstances - for example, where accuracy is contested

If you gave your consent for us to collect and process your data, you have the right to:

• withdraw your consent - this can be done at any time
• request a copy of your personal data - this copy will be provided in a structured, commonly used and machine-readable format

Questions and complaints

Contact the CDDO Privacy Team if you:

• have any questions about anything in this document
• think that your personal data has been misused or mishandled
• want to make a subject access request (SARS)

Email: 

The data controller for your personal data is the Cabinet Office. The contact details for our Data Protection Officer are:

$A Data Protection Officer Cabinet Office 70 Whitehall London SW1A 2AS

Email DPO@cabinetoffice.gov.uk

The Data Protection Officer provides independent advice and monitoring of Cabinet Office’s use of personal information.

If you have a complaint, you can also contact the Information Commissioner, who is an independent regulator set up to uphold information rights.

Information Commissioner’s Office

Email icocasework@ico.org.uk

Contact form https://ico.org.uk/glo…

Telephone 0303 123 1113

Textphone 01625 545 860

Changes to this privacy notice

We may change this privacy notice. If these changes affect how your personal data is processed, we will take reasonable steps to let you know.