Guidance

Privacy Notice for Commons Business Managers

Published 20 September 2019

In order to be General Data Protection Regulation (GDPR) compliant, we want to explain how we will treat your data. We collect the following data from Members of Parliament:

  • Your full name
  • Phone number(s)
  • Parliamentary and personal email addresses
  • London home address
  • Country home address
  • Personal voting records
  • Diary entries, including reasons for absence, which can be of a sensitive nature

We will use your personal data for the purposes of party political management and the functioning of Parliament. We will also use it for the purpose of recording MP attendance, pairing and slipping, divisions and division analysis, and for planning committee membership and attendance.

Our legal basis for using your personal data is that we are carrying out a task in the public interest, which in this case is the functioning of either House of Parliament. Our legal basis for processing any sensitive personal data is that it is necessary for reasons of substantial public interest for the exercise of a function of either House of Parliament.

We will periodically update or delete your contact information as necessary (i.e. when we no longer have need to contact you). You should also be aware that any personal data submitted for the purposes of pairing and slipping will be archived after the Parliamentary session and then deleted after a period of ten years. Voting records will remain in the public domain indefinitely. Personal information received for the All Party Notice will be retained for the length of the Parliamentary session and will be subsequently disposed of.

We will share your information with government ministers and whips, shadow ministers and whips and special advisers where necessary. Because this data will be stored on Cabinet Office IT (on which we operate) and on the Parliamentary IT system, it will also be shared with our data processors who provide email, and document management and storage services. Because those IT systems store data overseas, your data may be stored securely outside the European Union. Where that is the case it will be given equivalent legal protection through the use of model contract clauses approved by the European Commission. We may also share your personal data if your vital interests require us to do so (i.e. in an emergency).

You have the right to object to the processing of your personal data. You also have the right to ask for us to rectify, supplement, or erase your data, or ask for a copy of your data. To exercise any of these rights, please contact us.

The data controller for your personal data is the Cabinet Office. The contact details for the data controller are:

Cabinet Office
70 Whitehall
London
SW1A 2AS

Public Enquiries: Online Contact Form

The Data Protection Officer provides independent advice and monitoring of Cabinet Office’s use of personal information.

The contact details for the data controller’s Data Protection Officer are: dpo@cabinetoffice.gov.uk

You also have the right to complain to the supervisory body if you are unhappy with the way we are using your personal data: The Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, or casework@ico.org.uk.