Guidance

Privacy Notice - Social and Digital Media Analysis (UK Domestic)

Published 11 December 2019

The Government Communication Service monitors and analyses public social media and search data using third-party tools. This notice sets out how we will use your personal data, and your rights. It is made under Articles 13 and/or 14 of the General Data Protection Regulation (GDPR).

1. Your data

We monitor public social media and digital data. At no point is private information accessed or privacy breached. At all times data is handled with the utmost confidentiality upholding the Civil Service Code at all times.

1.1 Purpose

The aim of the GCS is to deliver world-class communications that support Ministers’ priorities, improve people’s lives and enable the effective operation of our public service. Social media and search monitoring is carried out to find, assess, and address potentially harmful dis- and mis-information. Social media and search monitoring is also used to measure the effectiveness of government communications.

1.2 Legal basis of processing

The processing of personal data is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller. In this case that is social media and search monitoring, carried out to find, assess, and address potentially harmful dis- and mis-information. Social media and search monitoring is also used to measure the effectiveness of government communications, and to identify topics being engaged with online where government - as an official source - should be providing more information. These are essential functions of an efficient digital team in the government communications profession, as they uphold public safety and ensure effective value for money in our communications.

While we do not actively collect special categories of personal data , or data about criminal convictions, data may be included in social media posts that we analyse. In such cases the legal bases for processing special categories of personal data are: (1) the processing relates to personal data which are manifestly made public by you, (2) the processing is necessary for reasons of substantial public interest for the exercise of a function of the Crown, a Minister of the Crown, or a government department, and (3) the processing is necessary for the exercise of a protective function (as defined by paragraph 11(2) of Part 2 of Schedule 1 to the Data Protection Act 2018). We have an Appropriate Policy Document in place, as required by Part 4 of Schedule 1.

1.3 Recipients

We may share social media and other online posts that are receiving high levels of engagement, and/or are from accounts with a substantial level of influence online, with other government departments.

Such data will be stored on our IT infrastructure and will also be shared with our data processors who provide email, and document management and storage services.

1.4 Retention

Information retained by the Cabinet Office will be reviewed on an annual basis and deleted if it is no longer serving the original purpose of collection.

Information forms part of a database to allow for longitudinal analysis. In the majority of cases this information is aggregated trends rather than personally identifiable information.

1.5 Where you did not provide your personal data

It was provided by software providers, or obtained from public sources.

1.6 Automated decision-making

Data may have been subject to automated decision-making to identify it as falling within a particular search description.

2. Your rights

• you have the right to object to the processing of your personal data
• you have the right to request information about how your personal data are processed, and to request a copy of that personal data
• you have the right to request that any inaccuracies in your personal data are rectified without delay
• you have the right to request that any incomplete personal data are completed, including by means of a supplementary statement
• you have the right to request that your personal data are erased if there is no longer a justification for them to be processed
• you have the right in certain circumstances (for example, where accuracy is contested) to request that the processing of your personal data is restricted

3. International transfers

As data is stored on our IT infrastructure, and shared with our data processors, it may be transferred and stored securely outside the European Union. Where that is the case it will be subject to equivalent legal protection through the use of Model Contract Clauses.

4. Contact details

The data controller is the Cabinet Office. The contact details for the data controller are:

Cabinet Office
70 Whitehall
London SW1A 2AS
0207 276 1234
publiccorrespondence@cabinetoffice.gov.uk.

The contact details for the data controller’s Data Protection Officer are:

Stephen Jones
Data Protection Officer
Cabinet Office
70 Whitehall
London SW1A 2AS
dpo@cabinetoffice.gov.uk.

The Data Protection Officer provides independent advice and monitoring of Cabinet Office’s use of personal information.

5. Complaints

If you consider that data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator.

The Information Commissioner can be contacted at:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
0303 123 1113
casework@ico.org.uk

Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.