Official veterinarians, animal health paraprofessionals and food competent certification officers under investigation – privacy notice
Updated 30 September 2024
Applies to England, Scotland and Wales
This privacy notice is for official veterinarians (OVs), animal health paraprofessionals (AHPs) and food competent certification officers (FCCOs) whose conduct is under investigation by APHA.
Your data is being collected by
The data controller is the Department for Environment, Food and Rural Affairs (Defra) for personal data that you give to the Animal and Plant Health Agency (APHA).
APHA is an Executive Agency of Defra. You can contact APHA’s Data Protection Manager by email at: data.protection@defra.gov.uk.
Any questions about how Defra and APHA are using your personal data and your associated rights should be sent to the above contact.
The Data Protection Officer responsible for monitoring that Defra and APHA are meeting the requirements of the legislation can be contacted by email at: DefraGroupDataProtectionOfficer@defra.gov.uk.
If you have any queries in relation to OVs, AHPs and FCCOs or their role, contact csconehealthovteam@apha.gov.uk.
What personal data is collected
We may collect the following personal data relating to you when required for an investigation:
- personal contact details, such as name, title, addresses, telephone numbers and personal email addresses
- details of your work that you have carried out on behalf of APHA
- details of alleged or actual misconduct and offences
We will also retain statements made in relation to investigations. This could include transcripts and video recordings.
How your data has been obtained
APHA may obtain your personal data from:
- sources not available to the public – for example, APHA’s internal database, Sam online work submission IT system and the official veterinarian and animal health paraprofessional Improve International databases
- internet websites open to anyone – this is known as ‘open-source material’ and includes, but is not limited to, news report internet sites, Companies House, Land Registry records, and blogs and social networking sites where no privacy settings have been applied
- APHA employees and any other persons who may be able to provide APHA with information relating to the work that you have carried out on behalf of APHA or any other information relevant to an investigation
Why APHA is using your data
Our purpose for processing your personal data is to investigate and take regulatory action in line with the relevant Policy of Authorisation as follows:
- for OVs – Policy for Authorisation of Official Veterinarians in Great Britain (OV13)
- for ATTs – Policy for APHA Authorisation of Approved Tuberculin Testers in England and Wales (TR541)
- for certification support officers (CSOs) – Policy for APHA Authorisation of Export Certification Support Officers in Great Britain (ET175)
- for FCCOs – Policy for Authorisation of Food Competent Certification Officers by the Animal and Plant Health Agency in Great Britain (ET209)
The legal bases for processing your data
The legal bases for processing your data are:
- where a person is working in a role as a result of a contract, including a contract of employment and an agreement amounting to a contract (Article 6(1)(b), UK GDPR)
- in relation to the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller (Article 6(1)(e), UK GDPR)
Who APHA shares your data with
APHA may share your data with law enforcement or regulatory bodies. For OVs, this includes the Royal College of Veterinary Surgeons.
How long APHA holds personal data for
The retention period for all data relating to the investigation is 10 years from when the investigation case formally ends – either the date that the Review Panel Decision letter (OV50) is sent or if an appeal is submitted, the outcome of the date that appeal is notified to you.
Your rights
Find out about your rights under data protection law.
Complaints
You have the right to lodge a complaint about the use of your personal data at any time with the Information Commissioner’s Office (ICO – the data protection supervisory authority).
APHA’s personal information charter
APHA’s personal information charter broadly sets out details of APHA’s processing of personal data.