Guidance

Witnesses in respect of investigations into the conduct of official veterinarians, animal health paraprofessionals and food competent certification officers – privacy notice

Updated 30 September 2024

Applies to England, Scotland and Wales

This privacy notice is for the routine processing of personal data relating to witnesses in respect of investigations into the conduct of official veterinarians (OVs), animal health paraprofessionals (AHPs) and food competent certification officers (FCCOs).

You can also access the privacy notice for the processing of personal data relating to OVs, AHPs and FCCOs in respect of investigations into their conduct.

Your data is being collected by

The data controller is the Department for Environment, Food and Rural Affairs (Defra) for personal data that you give to the Animal and Plant Health Agency (APHA).

APHA is an Executive Agency of Defra.  You can contact APHA’s Data Protection Manager by email at: data.protection@defra.gov.uk.

Any questions about how Defra and APHA are using your personal data and your associated rights should be sent to the above contact.

The Data Protection Officer responsible for monitoring that Defra and APHA are meeting the requirements of the legislation can be contacted by email at: DefraGroupDataProtectionOfficer@defra.gov.uk.

If you have any queries in relation to OVs, AHPs and FCCOs or their role, contact csconehealthovteam@apha.gov.uk.

What personal data is collected

Personal data includes:

  • name
  • addresses
  • telephone numbers
  • email addresses
  • basic employment details such as work title and company
  • information in witness statements made by witnesses in respect of what the witnesses saw and/or heard

How your data has been obtained

APHA has access to personal data from sources not accessible by the public. Examples include our internal database, the Sam online work submission IT system.

APHA may also observe, monitor, record and retain internet data that is available to anyone. This is known as ‘open source material’ and includes:

  • news report internet sites
  • Companies House
  • Land Registry records
  • blogs and social networking sites where no privacy settings have been applied

Why APHA is using your data

Our purpose for processing your personal data is in relation to your being a witness of events in relation to APHA’s investigating the misconduct of an OV, AHP or FCCO and taking regulatory action in line with the relevant Policy of Authorisation:

The legal bases for processing your data are:

  • where a person is working in a role as a result of a contract, including a contract of employment and an agreement amounting to a contract (Article 6(1)(b), UK GDPR)
  • in relation to the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller (Article 6(1)(e), UK GDPR)

Who APHA shares your data with

APHA may share your data with:

  • the person being investigated
  • law enforcement or regulatory bodies – for OVs, this includes the Royal College of Veterinary Surgeons

How long APHA holds personal data for

Retention periods are set by considering statutory, regulatory, legal and security reasons, alongside historic value.

All information in APHA is held in accordance with our retention policy. If you would like more information, contact enquiries@apha.gov.uk.

Your rights

Find out about your rights under data protection law.

Complaints

You have the right to lodge a complaint about the use of your personal data at any time with the Information Commissioner’s Office (ICO – the data protection supervisory authority).

APHA’s personal information charter

APHA’s personal information charter broadly sets out details of APHA’s processing of personal data.