© Crown copyright 2018
This publication is licensed under the terms of the Open Government Licence v3.0 except where otherwise stated. To view this licence, visit nationalarchives.gov.uk/doc/open-government-licence/version/3 or write to the Information Policy Team, The National Archives, Kew, London TW9 4DU, or email: firstname.lastname@example.org.
Where we have identified any third party copyright information you will need to obtain permission from the copyright holders concerned.
This publication is available at https://www.gov.uk/government/publications/register-to-vote-privacy-notice/register-to-vote-privacy-notice
This notice sets out how the Cabinet Office will use your personal data, and your rights. It is made under Articles 13 and or 14 of the General Data Protection Regulation (GDPR).
We will collect the following personal data: your name, date of birth, address, nationality and National Insurance number.
The purpose for which we are processing your personal data is to process your application to register to vote.
Legal basis of processing
The legal basis for processing your personal data is because processing is necessary for the exercise of a function of a government department. That function is to facilitate online applications to register to vote in order to improve democratic engagement.
We may share your name, date of birth and National Insurance number with the Department for Work and Pensions (DWP) so they can check your details against their records and make sure you are who you say you are.
We will also share your data with your local Electoral Registration Office.
Your personal data will also be processed by our IT infrastructure, and thus will be shared with our suppliers who are our data processors. This includes if you contact the Register to Vote service with a query or send feedback about the service.
We run the service in line with data protection legislation. This means, for example, that your information won’t be shared with anyone else - unless sharing is allowed or required by law, such as for crime prevention purposes.
Your data is deleted by this registration service once your application to register to vote is processed by your respective Electoral Registration Officer. We will delete your data 7 days after the ERO processes your application.
The electoral register
Everyone’s name and address goes on the full version of the electoral register once their application to register is successful. Your name and address will be publicly available if you register to vote.
The full version of the register is usually used for:
- preventing and detecting crime
- checking applications for loans or credit
But your name and address will be available to anyone who wishes to look at the register.
You may, when you register to vote, decide to be on the ‘open register’ (also known as the edited register). The ‘open register’ means that your information is publicly available for anyone seeking to verify your identify, or use the data for other purposes, such as direct marketing. Anyone choosing to use the public data will be legally responsible for ensuring that they comply with the law, including informing you of what they intend to do with it. Find out more about the difference between the ‘open register’ and the electoral register.
Origin of data
Your personal data were provided by you, or provided by your local Electoral Registration Officer on your behalf.
While you are using the Register to Vote digital service, we store a small encrypted file on your computer called a cookie, which stores the personal information you enter while you complete the application. No other person, organisation or website is able to read the contents of this cookie.
We delete the cookie containing your encrypted personal information after 20 minutes, when you close your browser or when you finish your application.
You have the right to request:
- information about how your personal data are processed, and to request a copy of that personal data
- any inaccuracies in your personal data are rectified without delay
- that any incomplete personal data are completed, including by means of a supplementary statement
- your personal data are erased if there is no longer a justification for them to be processed
- in certain circumstances (for example, where accuracy is contested) to request that the processing of your personal data is restricted
You also have the right to object to the processing of:
- your personal data
- your personal data where it is processed for direct marketing purposes
As your personal data is stored on our IT infrastructure, and shared with our data processors, it may be transferred and stored securely outside the European Union. Where that is the case it will be subject to equivalent legal protection through the use of Model Contract Clauses.
If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator. The Information Commissioner can be contacted at:
Information Commissioner's Office
Telephone: 0303 123 1113
Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.
The data controller for your personal data is the Cabinet Office. The contact details for the data controller are:
Telephone: 0207 276 1234
The contact details for the data controller’s Data Protection Officer (DPO) are: