Guidance

FCO as a data controller: privacy notice

Published 26 June 2018

This guidance was withdrawn on

This page is no longer current. Instead, see the FCDO as a data controller privacy notice.

Date last modified: 15 October 2019

1. Who we are

Foreign and Commonwealth Office
King Charles Street
London
SW1A 2AH

email: data.protection@fco.gov.uk

2. What data we process and why

The Foreign & Commonwealth Office (FCO) works in the UK and overseas to safeguard Britain’s national security, build Britain’s prosperity and support British citizens overseas. In doing so we process personal data for the purposes of performing our duties as a ministerial department.

We will ensure that we will treat all personal information in accordance with data protection legislation, including the General Data Protection Regulation (2016) and Data Protection Act 2018.

We process this data because it is necessary to do so in order for the FCO to perform its official functions as a ministerial department. We may also process your data under the following legal bases:

  • (a) Consent: you have given us clear consent to process your personal data for a specific purpose
  • (b) Contract: the processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract with you
  • (c) Legal obligation: the processing is necessary for us to comply with the law (not including contractual obligations)
  • (d) Vital interests: the processing is necessary to protect someone’s life
  • (e) Legitimate interests: the processing is necessary for our legitimate interests or the legitimate interests of a third party unless your rights as the data subject override those legitimate interests

4. What we do with it

In addition to processing this data because it is necessary to do so for the FCO to perform its official functions as a ministerial department, there may be other circumstances in which we may lawfully share your data with third parties where, for example, we are required to do so by law, by court order, or to prevent fraud or other crimes. Where we share data, however, we shall do so in accordance with applicable data protection laws.

5. How long we keep your data

We will retain your personal data for only as long as it is necessary or for as long as we are legally required to do so and in line with our Retention Schedule.

Your rights

In certain circumstances you have the right to:

  • object – request that your data is not processed for certain purposes
  • erasure - request that your personal data is erased where one of the statutory grounds applies
  • data portability – the right to obtain and reuse your personal data for your own purposes across different services in certain circumstances
  • restrict processing - request that the processing of your personal data is restricted in certain circumstances – for example, where accuracy is contested
  • rectification - request that any inaccuracies in your personal data are rectified without delay. Request that any incomplete personal data is completed, including by means of a supplementary statement
  • access - request information about how your personal data is processed and to request a copy of that personal data

If your personal data is processed on the basis of consent, you have the right to:

  • withdraw consent to the processing of your personal data at any time

6. How to contact us

If you have any questions about anything in this notice, or if you consider that your personal data has been misused or mishandled contact us at data.protection@fco.gov.uk. If you would like to exercise any of your rights, contact FOI-DPA.PMCS@fco.gov.uk

You can also contact the Data Protection Officer at the Foreign and Commonwealth Office:

Data Protection Officer
Knowledge Management Department
Knowledge and Technology Directorate
Room K4.02
Foreign and Commonwealth Office
King Charles Street
London
SW1A 2AH

Email: Data.Protection@fco.gov.uk

Tel: 020 7008 1500

6.1 Complaints

You may also make a complaint to the Information Commissioner, who is an independent regulator. The Information Commissioner can be contacted at:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

Email: casework@ico.org.uk

Tel: 0303 123 1113

7. Changes to this notice

We may modify or amend this privacy notice at our discretion at any time. When we make changes to this notice, we will amend the last modified date at the top of this page. Any modification or amendment to this privacy notice will be applied to you and your data as of that revision date. We will publish changes to our privacy notice on our gov.uk website.