Guidance

DVSA accredited training schemes: privacy notice

Updated 6 February 2025

© Crown copyright 2025

This publication is licensed under the terms of the Open Government Licence v3.0 except where otherwise stated. To view this licence, visit nationalarchives.gov.uk/doc/open-government-licence/version/3 or write to the Information Policy Team, The National Archives, Kew, London TW9 4DU, or email: psi@nationalarchives.gov.uk.

Where we have identified any third party copyright information you will need to obtain permission from the copyright holders concerned.

This publication is available at https://www.gov.uk/government/publications/dvsa-privacy-notices/dvsa-accredited-training-schemes-privacy-notice

1. About this activity

The Driver and Vehicle Standards Agency (DVSA) is an executive agency of the Department for Transport (DfT). DVSA administers the following schemes:

  • dangerous goods safety advisors (DGSA)
  • dangerous goods (ADR) vehicle driver training
  • drink-drive rehabilitation (DDR)
  • Driver Certificate of Professional Competence (CPC)
  • getting a Driver CPC course approved for DVSA earned recognition TfL requirements
  • national vocational training (NVT)
  • taxi driver periodic training (TDPT) in Northern Ireland

To effectively administer the approvals, audits and examinations for these schemes DVSA provides associated guidance and support to the training providers who deliver these schemes and a ‘find your nearest’ service which lets the public access relevant training or rehabilitation courses on our Training Accreditation website at www.jaupt.org.uk and on GOV.UK.

The data controller for DVSA is DfT - a data controller determines the reasons and how personal data is processed. For more information, see the Information Commissioner’s Office (ICO) Data Protection Public Register. DfT’s registration number is Z7122992.

We operate the TDPT scheme on behalf of the Driver and Vehicle Agency (DVA) in Northern Ireland. For this scheme, DVA are the data controller and we are the data processor.

2. What data we need

2.1 Data we need for training providers

The personal data we collect from training providers will include:

  • name
  • address
  • email address
  • phone number

The personal data we collect from trainers will include:

  • name
  • a unique identifier such as driving licence number or date of birth
  • evidence of their training skills, subject knowledge and experience - for example qualifications or certificates to deliver training, rehabilitation or examinations

The personal data we collect about training will include:

  • dates and times of courses
  • trainer names
  • client names
  • location of courses

The lawful basis for processing data for training providers is public task under:

  • 2007 No. 605 Road Traffic - The Vehicle Drivers (Certificates of Professional Competence) Regulations 2007
  • The Rehabilitation Courses (relevant drink drive courses) Regulations 2012
  • The Taxi Drivers’ Licenses Regulations (Northern Ireland) 2014
  • The Carriage of Dangerous Goods and Use of Transportable Pressure Equipment Regulations 2009

2.2 Data we need for find your nearest services

DVSA operates ‘find your nearest’ services for:

If you choose to opt-in, the data that will be published for the find your nearest training course for dangerous goods (ADR) will include:

  • business name
  • telephone number
  • city
  • email address

If you choose to opt-in, the data that will be published for the find your nearest CPC, drink-drive rehabilitation or taxi driver course will include:

  • business name
  • contact name
  • telephone number
  • address
  • website address
  • email address
  • approved course details
  • date, times, sector and venue address including postcode

The lawful basis for processing data for the find your nearest services is consent.

Email DCPC_CC@dvsa.gov.uk if you want to withdraw your consent for the service to find your nearest:

  • Driver CPC course
  • drink-drive rehabilitation course
  • taxi driver periodic training

Email adr@dvsa.gov.uk to withdraw your consent for the find your nearest dangerous goods (ADR) driver training service.

Where you withdraw your consent, we aim to process your request within 5 working days.

2.3 Data we need for replacement dangerous goods driver training cards and dangerous goods safety adviser certificates

The personal details we collect from candidates to issue a replacement ADR card or a DGSA certificate will include:

  • candidate number (if known)
  • full name
  • date of birth
  • address including postcode
  • telephone number
  • email address
  • reason for replacement certificate

The lawful basis for processing data for ADR and DGSA is public task under:

  • 2007 No. 605 Road Traffic - The Vehicle Drivers (Certificates of Professional Competence) Regulations 2007
  • The Rehabilitation Courses (relevant drink drive courses) Regulations 2012
  • The Taxi Drivers’ Licenses Regulations (Northern Ireland) 2014
  • The Carriage of Dangerous Goods and Use of Transportable Pressure Equipment Regulations 2009

2.4 Data we need to process applications for national vocational training

The personal data we collect from applicants for the NVT scheme will include:

  • name
  • address
  • email
  • mobile number
  • driving licence number
  • employer’s name and address
  • employer’s contact details
  • course enrolled on
  • evidence that you have passed your lorry or bus practical test, for example your pass certificate or a copy of your full driving licence

We verify with Driver and Vehicle Licensing Agency (DVLA) using their Driver Validation Service that you have the right licence entitlement to ensure that you are eligible to receive the relevant NVT concession documentation. The lawful basis for processing data for NVT is public task under:

  • 2007 No. 605 Road Traffic - The Vehicle Drivers (Certificates of Professional Competence) Regulations 2007
  • The Rehabilitation Courses (relevant drink drive courses) Regulations 2012
  • The Taxi Drivers’ Licenses Regulations (Northern Ireland) 2014
  • The Carriage of Dangerous Goods and Use of Transportable Pressure Equipment Regulations 2009

2.5 Data we need for dangerous goods safety advisers

DVSA publishes a list of dangerous goods safety advisers on GOV.UK.

The personal data we collect from dangerous goods safety advisers will include:

  • name
  • email address
  • postcode
  • telephone number
  • the details of your examination or qualification
  • dangerous Goods Safety Advisor candidate number

A full privacy notice which includes the find your nearest service can be found at Get added to the dangerous goods adviser list: privacy notice.

2.6 Data we need for getting a Driver CPC course approved for DVSA earned recognition TfL requirements

The personal data we will collect from training providers is the organisation name.

The lawful basis for processing data for getting a course approved for DVSA earned recognition TfL requirements is public task.

By indicating the content should be approved for DVSA earned recognition TfL requirements, on the CPC application form (2.6 - If this course is part of another programme, qualification or award you must provide details), the course summary and training provider details will be shared with the DVSA earned recognition team.

3. Why we need it

3.1 Why we need data for training providers

We need the personal data we collect from you to approve, audit and oversee your training provider and the courses you deliver.

We need your data to add you to the relevant find your nearest service and remove you from this service (should you request removal from it).

3.2 Why we need data to process applications for national vocational training

We need details of applicants for the NVT scheme to consider if they are eligible to receive an NVT card.

3.3 Why we need data for replacement dangerous goods driver training cards and dangerous goods safety adviser certificates

We need details of candidates of ADR and DGSA to consider if they are eligible to receive a replacement ADR card or DGSA certificate.

We need your data to add you to the relevant find your nearest service and remove you from this service (should you request removal from it).

4. What we do with it

We collect, use and store the data you give us for the reasons set out in this policy. We will not:

  • sell or rent your data to third parties
  • share your data with third parties for marketing purposes

We will share your data if required to do so by law – for example, by court order, or to prevent fraud or other crime.

We operate the TDPT scheme on behalf of the Driver and Vehicle Agency (DVA) in Northern Ireland. This includes receiving and reviewing course applications for TDPT and making recommendations to DVA for approval and refusal. Additionally, DVSA audit these courses on behalf of DVA. If you’re a taxi driver periodic training provider, your data will be accessible to DVA.

5. How long we keep your data

We’ll only keep your personal data for as long as it is needed for the reasons set out in this policy or as long as is required by law. We will hold your personal data for:

  • 4 years after your centre approval expired
  • 4 years after your NVT card has expired
  • 12 months after your request for a replacement ADR card or DGSA certificate
  • up to 2 years after you get added to the list of dangerous goods safety advisers, unless your qualification lasts longer than that

Where you have provided evidence of your entitlement to drive, we shall delete it once we’ve verified it.

Any personal data is removed immediately by DVSA on the training provider’s behalf if thattraining provider is no longer able to operate or to provide courses.

6. Where it might go

Our IT infrastructure and technology has been checked to make sure it’s safe and secure.

All your data is held on DVSA servers based in the UK.

ADR and DGSA data is also held by the Scottish Qualification Authority (SQA) as the data processor of DVSA.

7. Protecting your data and your rights

The DVSA personal information charter sets out what steps are taken to protect your data, and the rights you have over your data.

8. Automated decision making and profiling

Your data is not subject to automated decision making or profiling as defined in data protection legislation.

9. Changes to this notice

We may change this privacy notice at our discretion at any time.

When we change this notice, the date on the page will be updated.

Any changes to this privacy notice will be applied to you and your data as of the revision date.

We encourage you to periodically review this privacy notice to be informed about how your data is protected

10. How to contact us

If you have any questions about anything in this document or if you consider that your personal data has been misused or mishandled, you can contact the DVSA data protection manager.

DVSA data protection manager
Data Protection Manager
DVSA
1 Unity Square
Nottingham
NG2 1AY

Contact DVSA customer services if you have a query that is not about how your personal data is used.

You may also make a complaint to the Information Commissioner, who is an independent regulator.

Back to top