Guidance

Defra privacy notice: regulation of precision bred organisms

Published 10 November 2025

Applies to England

© Crown copyright 2025

This publication is licensed under the terms of the Open Government Licence v3.0 except where otherwise stated. To view this licence, visit nationalarchives.gov.uk/doc/open-government-licence/version/3 or write to the Information Policy Team, The National Archives, Kew, London TW9 4DU, or email: psi@nationalarchives.gov.uk.

Where we have identified any third party copyright information you will need to obtain permission from the copyright holders concerned.

This publication is available at https://www.gov.uk/government/publications/defra-privacy-notice-regulation-of-precision-bred-organisms/defra-privacy-notice-regulation-of-precision-bred-organisms

Who collects your personal data 

The Department for Environment, Food and Rural Affairs (Defra) is the controller for the personal data we collect. 

If you need further information about how Defra uses your personal data and your associated rights, you can contact the Defra data protection manager at data.protection@defra.gov.uk. 

The data protection officer for Defra is responsible for checking that Defra complies with legislation. You can contact them at defragroupdataprotectionofficer@defra.gov.uk. 

What personal data we collect and how it is used 

We collect your: 

  • name 
  • contact details  

Data is collected to process precision breeding release and marketing notices received and fulfil a statutory requirement for Defra to establish and maintain a precision breeding register containing prescribed information about:  

  • release notices 
  • marketing notices 
  • confirmations of precision bred status, including any revocations of those confirmations 
  • notices given by the Secretary of State in relation to the legislation 
  • enforcement notices in relation to the legislation 
  • such other matters relating to the legislation 

Lawful basis for processing your personal data  

The lawful basis for processing your personal data is to comply with a legal obligation on Defra in meeting the legal requirements established in both The Genetic Technology (Precision Breeding) Act 2023 and the Genetic Technology (Precision Breeding) Regulations 2025. 

The processing of your personal data is not based on consent. You cannot withdraw it. 

Who we share your personal data with 

Defra is obliged to publish information relating to precision breeding release or marketing notices and precision bred confirmations on a precision breeding public register. Personal data will not be put on the register. 

Defra will share with the Food Standards Agency (FSA) details of any revocations of precision bred confirmations so that any associated precision bred food and feed authorisations may also be revoked and the FSA’s precision bred food and feed authorisation register is consequently updated with notice of the revocation.  

We respect your personal privacy when responding to access to information requests. We only share information when necessary to meet the statutory requirements of the Environmental Information Regulations 2004 and the Freedom of Information Act 2000. 

How long we hold personal data 

Any personal data that you provide will be kept for 7 years. Some non-personal data will be kept for the length of time that a precision breeding release or marketing notice remains in place. 

What happens if you do not provide the personal data 

If you do not provide the personal data where required, we will not be able to process release or marketing notices submitted for precision bred plants and consequently you will not be able to release or market precision bred plants in England. 

Use of automated decision-making or profiling 

The personal data you provide is not used for: 

  • automated decision making (making a decision by automated means without any human involvement) 
  • profiling (automated processing of personal data to evaluate certain things about an individual) 

Transfer of your personal data outside of the UK 

We will only transfer your personal data to another country that is deemed adequate for data protection purposes. 

Your rights 

Based on the lawful processing above, your individual rights are: 

More information about your individual rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018).  

Complaints 

You have the right to make a complaint to the Information Commissioner’s Office at any time. 

Personal information charter 

Our personal information charter explains more about your rights over your personal data.

Back to top