Routine processing of personal data in respect of official veterinarians, animal health paraprofessionals and food competent certification officers – privacy notice
Updated 30 September 2024
Applies to England, Scotland and Wales
This privacy notice is for the routine processing of personal data in respect of your role as an official veterinarian (OV), animal health paraprofessional (AHP) or food competent certification officer (FCCO).
Your data is being collected by
The data controller is the Department for Environment, Food and Rural Affairs (Defra) for personal data that you give to the Animal and Plant Health Agency (APHA).
APHA is an Executive Agency of Defra. You can contact APHA’s Data Protection Manager by email at: data.protection@defra.gov.uk.
APHA also works with the Scottish Government and Welsh Government, who are joint controllers with APHA for any relevant personal data.
Any questions about how Defra and APHA are using your personal data and your associated rights should be sent to the above contact.
The Data Protection Officer responsible for monitoring that Defra and APHA are meeting the requirements of the legislation can be contacted by email at: DefraGroupDataProtectionOfficer@defra.gov.uk.
If you have any queries in relation to OVs, AHPs and FCCOs or their role, contact csconehealthovteam@apha.gov.uk.
What personal data is collected
We collect the following items of personal data:
- your name, postal address and contact details
- your nationality
- your employer details
- your professional veterinary qualifications and OV, AHP, FCCO training undertaken – this also includes Royal College of Veterinary Surgeons (RCVS) membership details
- any details relating to investigations and disciplinary matters concerning work carried out for Defra
How your data has been obtained
APHA may obtain your personal data from:
- sources not available to the public – for example, APHA’s internal IT database (Sam) and the official veterinarian and animal health paraprofessional Improve International databases
- internet websites open to anyone – this is known as ‘open-source material’ and includes, but is not limited to, news report internet sites, Companies House, Land Registry records, and blogs and social networking sites where no privacy settings have been applied
- APHA employees and any other persons who may be able to provide APHA with information relating to the work that you have carried out on behalf of APHA
Why APHA is using your data
Our purpose for collecting and processing your personal data is to authorise you to carry out work on behalf of APHA and Defra. We may also need to take regulatory action in line with the relevant Policy of Authorisation as follows:
- for OVs – Policy for Authorisation of Official Veterinarians in Great Britain (OV13)
- for ATTs – Policy for APHA Authorisation of Approved Tuberculin Testers in England and Wales (TR541)
- for certification support officers (CSOs) – Policy for APHA Authorisation of Export Certification Support Officers in Great Britain (ET175)
- for FCCOs – Policy for Authorisation of Food Competent Certification Officers by the Animal and Plant Health Agency in Great Britain (ET209)
The legal bases for processing your data
The legal bases for processing your data are:
- where a person is working in a role as a result of a contract, including a contract of employment and an agreement amounting to a contract (Article 6(1)(b), UK GDPR)
- in relation to the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller (Article 6(1)(e), UK GDPR)
How long APHA holds personal data for
Retention periods are set by considering statutory, regulatory, legal and security reasons, alongside historic value.
All information in APHA is held in accordance with our retention policy. If you would like more information, contact enquiries@apha.gov.uk.
Your rights
Find out about your rights under data protection law.
Complaints
You have the right to lodge a complaint about the use of your personal data at any time with the Information Commissioner’s Office (ICO – the data protection supervisory authority).
APHA’s personal information charter
APHA’s personal information charter broadly sets out details of APHA’s processing of personal data.