The Cabinet Office will use your data in line with our
privacy policy. The Cabinet Office have asked UKGI to manage this campaign on their behalf. Candidates are asked to note the UKGI Data Privacy Notice:
This notice sets out how UKGI (the shareholder representative) will use your personal data for the purpose of this recruitment campaign and explains your rights under the General Data Protection Regulation. UKGI is committed to being transparent about how it collects and uses personal data and to meeting its data protection obligations. Odgers Berndtson’s privacy policy is outlined at https://www.odgersberndtson.com/en-gb/privacy-policy - UKGI and OB are
independent Data Controllers on this exercise.
Data Subject categories
As part of any recruitment process conducted on behalf of any Government Department or any Arm’s Length Body (ALB) of any Government Department, UK Government Investments Ltd (UKGI) collects and processes personal data relating to
individuals who apply for public appointments.
What categories of information does UKGI collect?
- UKGI collects a range of information about you. This may include:
- your name, address and contact details, including email address and telephone number
- date of birth
- references
- details of your qualifications, skills, experience and employment history
- information about your current level of remuneration, including benefit entitlements
- whether or not you have a disability for which UKGI needs to make reasonable adjustments during the recruitment process (where applicable)
- information about your entitlement to work in the UK (where necessary); and
- equal opportunities monitoring information, including information about your ethnic origin, sexual orientation, health and religion or belief and socio-economic data; and
- results from due diligence searches (including checks on social media and personal websites, potential conflicts of interests, media statements, political activities as well as checks to see if the individual appears on the disqualified director, bankruptcy and insolvency, removed trustees or financial services register)
This list of data categories is not exhaustive and may vary depending on the appointment you are applying for. UKGI collects this information in a variety of ways. For example, data might be contained in application forms and letters,
CVs or resumes, obtained from your passport or other identity documents or those that give proof of address, or collected through interviews or other forms of assessment which may include online tests. Data will be stored in a range of different places, including on your application record, in HR management systems and onother IT systems (including email).
Why does UKGI process personal data and what is the legal basis for doing so?
UKGI may work with suitably selected partners to carry out certain activities for this application process. Where it is necessary to use third parties to do this, these third parties should contact you separately with regard to the way in which
they will process your personal data for the purpose of the recruitment process. These activities include, but are not limited to:
- processing your application
- advising candidates of the outcome of their application
- arranging interviews for successful candidates; and
- equality and diversity monitoring
If your application is unsuccessful, UKGI will keep your personal data on file for 24 months to allow it to provide feedback on request and to defend itself against any legal challenge, as well as to allow it to evidence its fulfilment of its obligations
to the relevant instructing Minister/Department. UKGI may also keep your personal data on file in case there are future roles for which you may be suited. UKGI will ask for
your consent before it keeps your data for this purpose, and you are free to withdraw your consent at any time.
Recipients of Personal Data
Personal data of applicants will only be made available to those in the appointments process and to the organisations listed below. The organisations with whom this information will be shared will vary depending on the position being applied for. They include, but are not limited to, the following:
- The Office of the Commissioner for Public Appointments
- Cabinet Office as Sponsor Department
- Relevant appointing Arm’s Length Body
- HM Treasury
- Office of the Prime Minister
The legal bases for the sharing of this personal data with these relevant organisations are the same as those set out in
section (3) above.
Protection of Personal Data
UKGI takes the security of your data seriously. It has internal policies and controls in place to ensure that your data is not lost, accidentally destroyed, misused or disclosed, and that it is not accessed except by our employees in the proper
performance of their duties.
Retention of Personal Data
If your application is unsuccessful, UKGI will keep your personal data on file for 24 months to allow it to provide feedback on request and to defend itself against any legal challenge, as well as to allow it to evidence its fulfilment of its obligations
to the relevant instructing Minister/Department. At the end of that period, your data will be deleted or destroyed. A small amount of basic information on the recruitment (candidate name, position applied for, year of application, outcome) will be retained for such time as is required to allow UKGI to properly provide full and comprehensive information to Ministers in respect of ministerial appointments or for 9
years, whichever is shorter.
If your application is successful, personal data gathered during the recruitment process will be shared with the relevant ALB which will retain this information during your appointment. The periods for which your data will be held will be
notified to you by the ALB in a new privacy notice. UKGI will also retain this information for the period of your appointment.
Your data protection rights
You have the right to request:
- information about how your personal data is processed and to request a copy of that personal data;
- that any inaccuracies in your personal data are rectified without delay; and
- that your personal data is erased if there is no longer a justification for it to be processed.
You also have the right:
- in certain circumstances (for example, where accuracy is contested) to request that the processing of your personal data is restricted; and
- to object to the processing of your personal data where it is processed for directing marketing purposes.
To submit a Data Subject Access Request
To request access to personal data that UKGI holds about you, contact the UKGI Data Protection Officer:
Email: privacy@ukgi.org.uk
Complaints
If you are dissatisfied with the handling of your personal data, you have the right to ask for an internal review. Internal review requests should be submitted to the UKGI Data Protection Officer:
Email: privacy@ukgi.org.uk
If you still consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator. The Information Commissioner can be contacted at:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
0303 123 1113
Any complaint to the Information Commissioner is without prejudice to your rights to seek redress in the courts.