Personal information charter
This information charter sets out the standards you can expect from HM Treasury (HMT) when we collect, hold, or use your personal information.
Introduction
We (HMT)Ìýwill treat all personal informationÌýin accordance withÌýdata protection legislation, including the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018 (DPA).Ìý
WhenÌýweÌýcollect, hold, use, or otherwise process your personal data you are entitled – unless an exemption applies - to be told:Ìý
-
the purpose(s) for which the data is being used and our lawful basis for processing itÌý
-
how long we will keep your data and who we will share it withÌý
-
whether it will be transferred to, or accessed from, outside the UK and what legal safeguards are in place to protect itÌý
-
about any rights you may have, including the right to access your information, or to object to our use of your dataÌý
-
about the identity of our Data Protection Officer (an independent adviser on data protection matters)Ìýand their contact detailsÌý
-
about your right to complain to the Information Commissioner if you feel that your personal information has been mishandled.Ìý
WeÌýhave legal obligations tied to your personal information including:Ìý
-
to keep it protected and secureÌý
-
to take reasonable steps to check the accuracy of your personal data and keep itÌýup-to-dateÌý
-
not to use your personal information for any purpose thatÌýconflictsÌýwith the original reason for which your information was collectedÌý
-
to keep your personal information only for as long as it is needed for the purpose(s) for which it was collected (unless it must be kept as part of the historic record).Ìý
OurÌýPrivacy NoticesÌýgive moreÌýinformation on how HMT processes personal data.
Your data protection / information rights
WhenÌýwe useÌýyour personal data,Ìýyou have some rights under data protection legislation. We have provided some general information on data protection rights below. Please be aware that the rights available to you can vary based on our lawful basis for using your personal data. For information on which rights apply to a givenÌýactivity you should refer to the related Privacy Notice.
Right of access
You have the right to ask us for copies of personal informationÌýwe process about you. This right always appliesÌýbut thereÌýare some exemptionsÌýthatÌýmean youÌýmightÌýnot always receive all the information we process.
Your right to rectification
You have the right to ask us to rectifyÌýpersonal information we hold about you thatÌýyou think is inaccurateÌýorÌýincomplete. This right always applies.
Your right to erasure
You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing
You have the right to ask us to restrict the processing of your information in certain circumstancesÌýfor example where accuracy is contested.
Your right to object to processing
You have the right to object to processing if weÌýare able toÌýprocess your information because the process forms part of our publicÌýtasks orÌýis in our legitimate interests.
How to exercise yourÌýinformation rights (including access)
YouÌýcanÌýexercise yourÌýinformation rightsÌý-Ìýincluding requesting a copy of personal data that HMTÌýholds about youÌý- by contactingÌýDSAR@HMTreasury.gov.ukÌýor the postal address below.ÌýYou will not be charged to exercise your information rights.Ìý
You can help us to process your requestÌýmore effectively byÌýexplaining what information youÌýthink HMT holds about you.ÌýWe will usually need to verify your identity before we can provide you with personal data, as such, you canÌýassistÌýusÌýin actioning your request quicklyÌýby providing:Ìý
-
proof of identification (such as a copy of a passport or picture driving license) andÌýÌý
-
proof of address (such as copy of a bank statement or utility bill).Ìý
PleaseÌýdo notÌýsendÌýoriginal documentsÌýto us, copies or digitalÌýversionsÌýare sufficient.
Postal addressÌýfor Information Rights
Data Protection TeamÌý
Treasury Business SolutionsÌý
1 Horse Guards RoadÌý
°Â±ð²õ³Ù³¾¾±²Ô²õ³Ù±ð°ùÌý
³¢´Ç²Ô»å´Ç²ÔÌý
SW1A 2HQ
Data Protection Officer/ÌýComplaints
The Data ProtectionÌýOfficerÌý(DPO)Ìýprovides independent advice and monitoring of HMT’s compliance with data protection legislation. If you have anyÌýquestions orÌýconcernsÌýabout how the department is handling your personal data, you can contact the department’sÌýDPO at the following email or postal address:Ìý
Privacy@HMTreasury.gov.uk Ìý
HMT Data Protection Officer (DPO)ÌýÌý
Treasury Business SolutionsÌý
1 Horse Guards RoadÌý
°Â±ð²õ³Ù³¾¾±²Ô²õ³Ù±ð°ùÌý
³¢´Ç²Ô»å´Ç²ÔÌý
SW1A 2HQÌý
We will acknowledgeÌýreceipt of a complaintÌýabout your own personal dataÌýwithin 30 days, and takeÌýappropriate stepsÌýto respond,Ìýand provide an outcome,Ìýwithout undue delay.ÌýÌý
If we are unable to address your concerns to your satisfaction, youÌýhave the right toÌýmake aÌýcomplaintÌýto the
Artificial Intelligence
We use Artificial Intelligence (AI) tools to support our work and improve efficiencies in departmental functions. These toolsÌýassistÌýstaff with tasks such as summarising documents, drafting content, searching records, and analysing data. In some cases, this will involve processing personal data.ÌýÌý
The AI tools are securelyÌýhostedÌýand we takeÌýappropriate stepsÌýto assure our use of AI meets relevant data protection requirements and ethical professional standards. Our use of AI does not replace human judgement and is not used to make automated decisions.ÌýÌý
Where a personal data processing activity involves the routine use of AI, we will provide further transparency within the activity-specific Privacy Notice.
Privacy Notices
The privacy notices listed below explain in more detail how we will handle your data in specific circumstances. HMT’s privacy notices also set out how the department will protect any special category and criminal convictions personal data that is processed as part of the activity:
Corporate:
-
CorrespondenceÌýÌý
-
Freedom of Information (FOI) and Environmental Information Regulations (EIR) requests
Ministerial and Communications
Public Services
National Infrastructure and Services Transformation Authority
-
IPA cross-government transformation community privacy noticeÌý
-
Privacy notice for Government Major Projects Portfolio (GMPP)Ìý
-
Project Delivery Profession and Standards Team privacy noticeÌý