Guidance

MOT history API: privacy notice

Updated 2 December 2024

© Crown copyright 2024

This publication is licensed under the terms of the Open Government Licence v3.0 except where otherwise stated. To view this licence, visit nationalarchives.gov.uk/doc/open-government-licence/version/3 or write to the Information Policy Team, The National Archives, Kew, London TW9 4DU, or email: psi@nationalarchives.gov.uk.

Where we have identified any third party copyright information you will need to obtain permission from the copyright holders concerned.

This publication is available at https://www.gov.uk/government/publications/dvsa-privacy-notices/mot-history-api-privacy-notice

1. About this service 

The Driver and Vehicle Standards Agency’s (DVSA) MOT history application programming interface (API) provides access to Great British and Northern Irish vehicle data, vehicle test data and vehicle safety recall data.  

The data is intended to be used for services, applications and research that will contribute to improved road safety. 

DVSA is an executive agency of the Department for Transport (DfT). 

The data controller for DVSA is DfT – a data controller determines the reasons and how personal data is processed.  For more information, see the Information Commissioner’s Office (ICO) Data Protection Public Register.  DfT’s registration number is Z7122992. 

2. What data we collect from you 

The personal data we collect from you includes: 

  • name 
  • address 
  • email address 
  • organisation name (if applicable) 
  • organisation address (if applicable) 
  • role within the organisation (if applicable) 
  • type of organisation (if applicable) 
  • use of the data 
  • country located 

The data we collect which will not be identifiable to you includes: 

  • analysis of API key usage to maintain service stability 
  • analysis of API key usage to improve the service 

The lawful basis for processing this data is public task.  

MOT history API service is part of MOT history service. MOT history service allows interested parties and the wider public to view the MOT status and history of vehicles to establish their background. 

We have no statutory obligation to provide MOT history APIs. They do, however contribute to improved road safety by providing interested parties with vehicle and vehicle test data allowing for further 3rd party services to provide information to the motoring public and for analysis and research of the data.  

All personal data entered for MOT history API is given by the user on the application to gain access and, if no application is made, will not receive the service. 

3. Why we need it 

We need the personal data we collect from you to: 

  • approve or reject applications to access the API 
  • provide the required API key and credentials needed to access the API 
  • manage the expiry and re issue of API key and credentials 
  • contact API users to provide information on service updates and improvements 
  • contact API users to assist with service improvements 

4. What we do with it 

We collect, use and store the data you give us for the reasons set out in this policy. 

We will not: 

  • sell or rent your data to third parties 
  • share your data with third parties for marketing purposes 

We may share some data which does not include your personally identifiable information for the purpose of improving road safety and the MOT history API. 

We will share your data if required to do so by law – for example, by court order, or to prevent fraud or other crime. 

5. How long we keep your data 

We’ll only keep your personal data for as long as it is needed for the reasons set out in this policy or as long as is required by law. 

We will hold your personal data for: 

  • as long as you have an active API key and valid credentials  
  • for 6 years after you apply, irrespective of approval being given or not  
  • for 6 years after a previously active API key becomes inactive 

6. Where it might go 

Our IT infrastructure and technology has been checked to make sure it’s safe and secure. 

All your data is held on DVSA servers based in the UK or hosted within cloud servers (Amazon Web Services) in Ireland. 

We use GOV.UK Forms as part of the application process. You can read their privacy notice. 

7. Protecting your data and your rights 

The DVSA personal information charter sets out what steps are taken to protect your data, and the rights you have over your data. 

8. Automated decision making and profiling 

Your data is not subject to automated decision making or profiling as defined in data protection legislation. 

9. Changes to this notice 

We may change this privacy notice at our discretion at any time. 

When we change this notice, the date on the page will be updated.  Any changes to this privacy notice will be applied to you and your data as of the revision date. 

We encourage you to periodically review this privacy notice to be informed about how your data is protected. 

10. How to contact us 

If you have any questions about anything in this document or if you consider that your personal data has been misused or mishandled you can contact the DVSA data protection manager.

DVSA data protection manager

Data Protection Manager
DVSA
1 Unity Square
Nottingham
NG2 1AY

Contact DVSA customer services if you have a query that is not about how your personal data is used.

You may also make a complaint to the Information Commissioner if you’re not happy with the way we responded to your complaint about how we handled your data. They provide independent advice about data protection, privacy and data sharing issues.

Back to top