Provide Driver CPC part 3a (off-road exercises) tests for HGV and bus drivers: privacy notice
Updated 28 October 2025
© Crown copyright 2025
This publication is licensed under the terms of the Open Government Licence v3.0 except where otherwise stated. To view this licence, visit nationalarchives.gov.uk/doc/open-government-licence/version/3 or write to the Information Policy Team, The National Archives, Kew, London TW9 4DU, or email: psi@nationalarchives.gov.uk.
Where we have identified any third party copyright information you will need to obtain permission from the copyright holders concerned.
This publication is available at https://www.gov.uk/government/publications/dvsa-privacy-notices/provide-driver-cpc-part-3a-off-road-exercises-tests-for-hgv-and-bus-drivers-privacy-notice
1. About this service or activity
The Driver and Vehicle Standards Agency (DVSA) regulates the CPC Module 3a off road manoeuvres test and CPC Module 4 practical demonstration test schemes. DVSA is an executive agency of the Department for Transport (DfT).
We carry out checks on prospective Module 3a and Module 4 assessors to ensure that they are “fit and proper” to conduct Module 3a and Module 4 practical tests. This service lets you provide the necessary data for us to carry out the checks and to assess whether you’re fit and proper and hold the correct entitlements to become an approved assessor.
Where you do not provide the necessary data and checks cannot be made, you’ll not be allowed to become an approved assessor.
The data controller for DVSA is DfT – a data controller determines the reasons and how personal data is processed. For more information, see the Information Commissioner’s Office (ICO) Data Protection Public Register. DfT’s registration number is Z7122992.
2. What data we need
The personal data we collect will include:
- full name
- address
- driving licence number
- email address
- telephone number
- website address
- convictions (motoring and non-motoring) – a copy of your DBS certificate or basic disclosure (Scotland) will be sent to DVSA
- photograph
- which organisation you work for
- evidence of training skills, subject knowledge and experience – for example qualifications or certificates to deliver training.
The lawful basis for processing is public task under:
- The Vehicle Drivers (Certificates of Professional Competence) Regulations 2007
- The Motor Vehicles (Driving Licences) Regulations 1999
3. Why we need it
We need the personal data we collect from you to:
- register your application when you begin the qualifying process
- check that you’re eligible to be an approved assessor
- process applications to become an approved assessor
- display your information in our service for learner drivers looking for a Module 3a provider if you’ve asked us to
- carry out quality assurance checks to make sure you continue to meet the relevant standards
- where necessary, to contact you to discuss your ongoing performance
- identify tests using your vehicle registration number
- carry out and verify checks of endorsements against the DVLA database
- investigate complaints we receive about you from learner drivers or members of the public
- produce anonymised statistics and reports
4. Data we need for the find your nearest service
DVSA operates “find your nearest” services for:
Find a Driver CPC part 3a (off-road exercises) test provider - GOV.UK
The lawful basis for processing data for the find your nearest services is consent.
If you choose to opt-in, the data that will be published for the service will include:
- business name
- telephone number
- address
- website address
- email address
- address including postcode
To withdraw your consent for the find your nearest service email module3a@dvsa.gov.uk
Where you withdraw your consent, we aim to process your request within 10 working days.
5. What we do with it
We collect, use and store the data you give us for the reasons set out in this policy.
We will not:
- sell or rent your data to third parties
- share your data with third parties for marketing purposes
We will share your data if required to do so by law – for example, by court order, or to prevent fraud or other crime.
6. How long we keep your data
We’ll only keep your personal data for as long as it is needed for the reasons set out in this policy or as long as is required by law.
We will hold your personal data for 10 years from the last activity when it is held on our system.
7. Where it might go
Our IT infrastructure and technology has been checked to make sure it’s safe and secure.
All your data is held on DVSA servers based in the UK or hosted within cloud servers
8. Protecting your data and your rights
The DVSA personal information charter sets out what steps are taken to protect your data, and the rights you have over your data.
9. Automated decision making and profiling
You can find further information about automated decision making and profiling, on the Information Commissioner’s website or by contact information.handling@dvsa.gov.uk.
Your data is not subject to automated decision making or profiling as defined in data protection legislation
10. Changes to this notice
We may change this privacy notice at our discretion at any time.
When we change this notice, the date on the page will be updated. Any changes to this privacy notice will be applied to you and your data as of the revision date.
We encourage you to periodically review this privacy notice to be informed about how your data is protected.
11. How to contact us
If you have any questions about anything in this document or if you consider that your personal data has been misused or mishandled you can contact the DVSA data protection manager
DVSA data protection manager
Data Protection Manager
DVSA
1 Unity Square
Nottingham
NG2 1AY
Contact DVSA customer services if you have a query that is not about how your personal data is used.
You may also make a complaint to the Information Commissioner, who is an independent regulator.