Closed call for evidence

Privacy notice for the call for views on cyber security and economic growth

Published 23 February 2024

This was published under the 2022 to 2024 Sunak Conservative government

© Crown copyright 2024

This publication is licensed under the terms of the Open Government Licence v3.0 except where otherwise stated. To view this licence, visit nationalarchives.gov.uk/doc/open-government-licence/version/3 or write to the Information Policy Team, The National Archives, Kew, London TW9 4DU, or email: psi@nationalarchives.gov.uk.

Where we have identified any third party copyright information you will need to obtain permission from the copyright holders concerned.

This publication is available at https://www.gov.uk/government/calls-for-evidence/cyber-security-and-economic-growth-call-for-views/privacy-notice-for-the-call-for-views-on-cyber-security-and-economic-growth

1. Who is collecting my data?  

The Department for Science, Innovation and Technology (DSIT) drives innovation that will deliver improved public services, create new better-paid jobs and grow the economy.   

DSIT brings together the relevant parts of the former Department for Business, Energy and Industrial Strategy, the Cabinet Office and the former Department for Digital, Culture, Media and Sport.  

2. Purpose of this privacy notice  

This notice is provided within the context of the notice provided to meet the obligations as set out in Articles 13 and 14 of UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA). This notice sets out how we will use your personal data.  

DSIT’s Personal Information Charter provides additional information on how we handle your personal information. It also explains how you can ask to view, change or remove your information from our records.  

2.1 Data controller  

DSIT is responsible for conducting this Call for Views as part of the McPartland review of cyber security and economic growth. DSIT is the Data Controller for this Call for Views.  

This notice only refers to your personal data (e.g. your name, email address, and anything that could be used to identify you personally).  

2.2 Personal data we collect  

Whilst much of this data is business in nature, some of this data may be personal information.   

The personal data relates to the following categories which will be collected from you directly. This includes:  

  • Your IP address
  • Your name
  • Your job title
  • Your contact details, such as your email address, telephone number and postal address.

Given there are open-text boxes within the Call for Views, it is also possible that more personal data could be collected if respondents include it in these. The same is applied to cases where respondents submit evidence via email to cyber.review@dsit.gov.uk.

2.3 The collection of cookies  

As part of this survey Qualtrics, the survey platform, will collect essential cookies such as your IP address and your browser to stop multiple responses and to make sure that the survey displays correctly. You can read the full cookies policy from Qualtrics here. 

2.4 How we use your personal data  

The purpose for which we are processing your personal data is to enable us to carry out our functions as a government department. This includes:    

  • analysis of responses to the Call for Views  

Anonymised reporting of trends/answers submitted to the Call for Views may be created and shared. Unless you have provided your consent to allow us to attribute your response by explicitly stating so to us, either via your response to the online survey or to the review’s email address cyber.review@dsit.gov.uk, your submission will not link back to you or any answers you submit.   

The legal basis for processing your personal data under Article 6 of the UK GDPR is:   

Article 6 (1) (e) Public task: Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.   

This processing is necessary for the exercise of the functions of a government department (DPA Schedule 9, paragraph 5(d). This Call for Views is part of the McPartland review of cyber security and economic growth. 

3. Who your personal data will be shared with   

As your personal data will be stored on our IT infrastructure it will be shared with our data processors Microsoft and Amazon Web Services. 

3.1 How long your personal data will be kept for  

We will only retain your personal data for two years, in line with DSIT retention policy.    

3.2 International transfers   

Your personal data will be processed in the UK. 

3.3 Will my data be used for automated decision making or profiling?  

We will not use your data for any automated decision making. 

4. Your rights  

You have the right to request information about how your personal data are processed, and to request a copy of that personal data.  

You have the right to request that any inaccuracies in your personal data are rectified without delay.  

You have the right to request that any incomplete personal data are completed, including by means of a supplementary statement.  

You have the right to request that your personal data are erased if there is no longer a justification for them to be processed.  

You have the right in certain circumstances (for example, where accuracy is contested) to request that the processing of your personal data is restricted.  

You have the right to object to the processing of your personal data where it is processed for direct marketing purposes. 

You have the right to object to the processing of your personal data. 

4.1 Contact details  

The data controller for your personal data is the Department for Science, Technology and Innovation. The contact details for the data controller’s Data Protection Officer (DPO) are:  

DSIT Data Protection Officer 
Department for Science, Innovation and Technology 
22-26 Whitehall 
London 
SW1A 2EG 

Email: dataprotection@dsit.gov.uk 

If you are unhappy with the way we have handled your personal data and want to make a complaint, please write to the department’s Data Protection Officer at the relevant agency. You can contact the department’s Data Protection Officer using the details above. 

4.2 Complaints  

If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an UK independent regulator.  The Information Commissioner can be contacted at:   

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF  

Telephone: 0303 123 1113  

www.ico.org.uk/make-a-complaint/   

Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts. 

4.3 Updates to this notice  

If this privacy notice changes in any way, we will place an updated version on this page. Regularly reviewing this page ensures you are always aware of what information we collect, how we use it, and under what circumstances we will share it with other parties. The ‘last updated’ date at the bottom of this page will also change.  

If these changes affect how your personal data is processed, we will take reasonable steps to let you know.

Last updated: 23/02/2024

Back to top