Registering your interest: privacy statement
Contents
- About this policy
- Your rights and how we protect them
- Responsibility for your personal information
- What personal information do we hold relating to your registration and what do we do with the information when you have registered your interest in the National Identity Service?
- De-registering your interest
- Subject Access Rights
- Contact Details
1. About this policy
This policy explains your rights as an individual when registering your interest in the National Identity Service. These rights are set out in the Data Protection Act 1998 (the Act). The policy explains why we require personal information - called data in the Act - for the purposes of registering your interest. It covers what we do with your information. It also explains how to obtain a copy of any personal information we may hold about you as an organisation as a whole.
The policy does not replace the Data Protection Act. It shows how the Identity and Passport Service will comply with the Act when processing your personal information for the purposes of registering your interest in the National Identity Service.
2. Your rights and how we protect them
The Identity and Passport Service is committed to compliance with the Act. We have a legal duty to do so. We will take every precaution to protect your information. The following principles will apply when we process your personal information:
- Your personal information is only processed with your knowledge;
- Only personal information that we actually need is collected and processed;
- Your personal information is only seen by those who need it to do their jobs;
- The personal information you supply is recorded accurately and only for the purposes we have informed you about;
- Your personal information is retained only for as long as it is required;
- Decisions affecting you are made on the basis of reliable and up to date personal information;
- Your personal information is protected from unauthorised or accidental disclosure;
- You will be provided with a copy of personal information we hold on you on request;
- There are procedures in place for dealing promptly with any disputes.
All of these principles will apply whether we hold your personal information on paper or in electronic form.
3. Responsibility for your personal information
The Identity and Passport Service is the "Data Controller" of your personal information. This means that we hold full responsibility for the safety of your personal information.
Any organisation that works on behalf of the Identity and Passport Service is referred to as the "Data Processor". Our "Data Processors" comply with the Act. This is to the same high standard as the Identity and Passport Service.
We have a contract with our Data Processors to ensure that they only act on our instructions and keep your information secure. We make sure that they comply with their obligations.
4. What personal information do we hold relating to your registration and what do we do with the information when you have registered your interest in the National Identity Service?
When registering your interest in the National Identity Service, you will be asked to provide your name, date of birth, e-mail address and postcode and you will be asked your nationality and whether you hold a UK passport.
When you submit your details, we will send you an e-mail to the e-mail address provided to allow you to confirm your information. Once this confirmation is received by the Identity and Passport Service, we will begin to send you updates on how the National Identity Service is progressing and general information about identity and identity fraud and protection.
Your personal information will only be seen by those whose jobs require them to do so.
This information will also be passed to the following "Data Processors" who work with the Identity and Passport Service:
- Thales - our partner involved in operating the website allowing individuals to register their interest in the National Identity Service;
- Rufus Leonard - our partner in delivering content via e-mail that informs those who have registered about the progress of the National Identity Service and other identity issues;
- Teleperformance - our partner who provide the call centre staff who will register your interest over the phone if you wish to do that by telephone instead of on this website yourself.
The personal information provided will be used for three purposes:
- To send information to you about the progress of the rollout of the National Identity Service and general information about identity and identity fraud and protection. This can be provided to everyone who is registered or certain information of particular interest to a particular group of people may be sent to them alone (e.g. information relating to a particular area).
- To limit applications from those who would be not be eligible for an ID card from the Identity and Passport Service to avoid unnecessary processing of information (e.g. those under 16 or those from outside the EEA).
-
To assist the Identity and Passport Service to understand what kind of people in which areas are interested in the Service (e.g. by age group, by postcode area, passport holder vs. non-passport holder). This will also inform decisions around how eligibility to enroll in the Service can be best expanded in the coming years. When this work is conducted, we remove a registrant's name from the data before it can be analysed.
Those who register their interest in the National Identity Service up until the 30th of June 2010 may, as a result of their registration, also be eligible to apply for an identity card if they choose to do so. This applies if :
- you are aged 16 or over,
- are resident in the UK
- hold a passport which was valid on or after the 1st of January 2009
- have a valid registration on this website at the point when you submit your application for an identity card
However, personal information recorded for the purposes of registering your interest is not used to automatically register details about you on the National Identity Register or for the issue of an identity card. If you choose to apply for an identity card after registering your interest on this website, you will need to complete a separate application process. In that event, data recorded for registering your interest in the National Identity Service would only be used to verify that you are eligible to apply for a card in the first place and not as part of the examination of your application.
Your data will not be shared with any other parties.
We take the security of your personal data very seriously. The system has passed a security accreditation check before it was launched and we will perform regular audits on the security of its operation. Your personal information is held in secure computer files which have restricted access. We have measures in place to stop unlawful access and disclosure.
5. Deregistering your interest
It is possible to de-register your interest at any time. Details are contained in your confirmation e-mail sent after you subscribed and in e-mail updates. As such, we recommend that you retain this e-mail in case you wish to de-register your interest in the future. Once we confirm a person's deregistration, the Identity & Passport Service will no longer be processing the data provided in connection with this service. If you wish to de-register your interest but you cannot find your confirmation e-mail, there will also be an "unsubscribe" link at the end of the last e-mail you have received.
When you de-register we delete all your information from this system.
If you de-register, you will no longer be eligible to apply for an identity card as a result of your initial registration on this website.
6. Subject Access Rights
Further information about your subject access rights (i.e. to know what information we hold about you) with regard to your personal information held by the Identity and Passport Service, both in relation to the registration of your interest in the National Identity Service and more generally, can be found in the general privacy policy statement on this website.
7. Contact Details
Contact details for submitting a subject access request or finding out more information about data protection can be found here can be found in the general privacy policy statement on this website.
8. Notification of changes
If we decide to change our privacy policy, we will post those changes on our website.
