Guidance

FCDO privacy notice: Academic Technology Approval Scheme (ATAS)

Updated 10 March 2026

1. What a Privacy Notice is

The General Data Protection Regulation requires that data controllers provide information to people whose personal information they process. Processing information means how we use it, store it, and share it, how long we keep it and how we destroy it.

This Privacy Notice includes:

• who we are
• what information we collect about you and how
• how we use your information
• why we collect personal information about you
• who we share your information with and why
• our lawful basis for processing
• how long we keep your personal information for
• your rights
• how to contact us
• how to make a complaint

2. Who we are

The Foreign, Commonwealth and Development Office (FCDO) pursues our national interests and projects the UK as a force for good in the world. We promote the interests of British citizens, safeguard the UK’s security, defend our values, reduce poverty and tackle global challenges with our international partners. To do this effectively we must collect, store, share and use personal information.

3. What information we collect about you and how 

3.1 Personal identification information

• Full name: your full legal name as it appears on your passport or other official documents.
• Date of birth and gender: used to verify your identity and age
• Nationality: your nationality or citizenship, which helps determine whether you are subject to ATAS and which checks might apply
• Passport information: passport number, date of issue and expiry date (if applicable), used to verify your identity

3.2 Contact information

• Email address: Used to send you updates, decisions and confirmation about your ATAS application.
• Address: your current residential address, which may be required for security and identification purposes

3.3 Details about your course or research

• Institution name: the name of the UK institution where you intend to study or work.
• Course title or research project: The course, programme or research project you are applying for
• Study or research field: information about the area of study or research
• Educational background: information about your previous qualifications and where they were obtained, which may be relevant for certain courses or research topics
• Previous or expected qualifications: details of previous academic qualifications, such as undergraduate or postgraduate degrees, that are relevant to your application

4. How we use your information 

The ATAS Unit processes personal data for the purposes of considering applications for an ATAS certificate for study in the UK for counter proliferation purposes. We use your contact details to keep you updated on the status of your application.

5. Why we collect personal information about you 

The Immigration Rules Part 15 require all international students applying to study for a postgraduate qualification in certain sensitive subjects to apply for an ATAS certificate before they can study in the UK. The sensitive subjects are those where knowledge could be used in programmes to develop Advanced Conventional Military Technology (ACMT), weapons of mass destruction (WMDs) or their means of delivery. These students must apply for an ATAS certificate before they can study in the UK. UK immigration law does not allow universities to register international students for ATAS applicable courses until they have received all the relevant ATAS certificate details. Entry Clearance Officers will ask to see an ATAS certificate as part of the visa application process.

6. Who we share your information with and why 

We will share the personal data that you supply to us with other Government Departments, agencies, foreign governments and other bodies, as well as the Higher Education Institution (HEI) to which you have applied for study, so that we can consider and process your ATAS application.

There may be other circumstances in which we may lawfully share your data with third parties. For example, we may be required to do so by law, by court order, or to prevent fraud or other crimes. Where we share data, however, we shall do so in accordance with applicable data protection laws.   

7. Our lawful basis for processing 

Processing is carried out under the lawful basis of Public Task. 

We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated or new purpose, we will notify you and we will explain the legal basis which allows us to do so. 

8. How long we keep your personal information for 

In order to safeguard Britain’s national security and for counter proliferation purposes, we will retain personal data provided for the purposes of considering applications for an ATAS certificate for study in the UK for 20 years. The personal data will be processed for considering any future applications for an ATAS certificate.

9. Your rights 

There are 8 rights that you have when the FCDO is using your personal information. If you have any questions about these rights, you can contact the Data Protection Officer for more information. 

• right to be informed – you have the right to be informed about what we do with your personal data, which is the purpose of this Privacy Notice

• right of access – you have the right to request a copy of any personal information we hold about you and what we do with it. This is known as a Subject Access Request. You can make a request by emailing information.rights@fcdo.gov.uk

• right to rectification – you have the right to request that any inaccurate personal data we hold is corrected or have incomplete personal information completed

• right to erasure – you have the right to request that your personal data is erased. This only applies in certain circumstances

• right to restrict processing – you have the right to request that we limit the use of your personal data. This only applies in certain circumstances

• right to data portability – you have the right to move, copy or transfer personal information from one IT system to another in a safe and secure way This right only applies to certain information in certain circumstances

• right to object – you have the right to object to the use of your information, which means that we would have to stop using your personal information. This right only applies to certain information in certain circumstances

• rights related to automated decision making including profiling – if a decision is being made without human involvement in the decision making, you have the right to challenge and request a review of any decisions made

See the ICO’s guide to individual rights for more detail. 

When making a request to exercise any of these rights, please include your full name, up-to-date contact details and the date of your request. If you are making a Subject Access Request, please include a comprehensive list of what personal data you want to access, including any relevant dates or search criteria to help us identify what you want. 

10. How to contact us 

If you have any questions about this notice, consider that your personal data has been misused or mishandled, or would like to exercise any of your rights, you can contact the Data Protection Officer at the Foreign, Commonwealth and Development Office: 

Data Protection Officer 
Foreign, Commonwealth and Development Office 
King Charles Street 
London 
SW1A 2AH

Email: Data.Protection@fcdo.gov.uk 

11. How to make a complaint 

You may also make a complaint to the Information Commissioner, who is an independent regulator. The Information Commissioner can be contacted at:  

Information Commissioner’s Office 
Wycliffe House 
Water Lane 
Wilmslow 
Cheshire SK9 5AF 

To make a complaint, please visit the ICO website, select “Make a complaint” from the menu options on the home screen banner, and follow the complaints process.

12. Changes to this notice 

We encourage you to reread this Privacy Notice occasionally as we aim to update it regularly, to keep you fully informed about how we use your personal information. 

This Privacy Notice was last updated on 31 December 2025.