Guidance

Foreign & Commonwealth Office and Home Office privacy notice: Forced Marriage Unit (FMU)

Published 5 May 2020

This guidance was withdrawn on 11 September 2020

This page is no longer current. Instead, see the FCDO and Home Office FMU privacy notice.

Date last modified: May 2020

1. Who we are

Foreign and Commonwealth Office (FCO)
King Charles Street
London
SW1A 2AH

Email: Data.Protection@fco.gov.uk

Home Office (HO)
2 Marsham Street
London
SW1P 4DF

Email: dpo@homeoffice.gov.uk

2. What is the Forced Marriage Unit (FMU)

The FMU was set up in 2005 as a joint Home Office and FCO unit in recognition of the fact that forced marriage is an abuse that cuts across jurisdictions, and acts as the hub for advice, outreach and policy relating to forced marriage.

3. What data we process and why

The FMU provides information and support to:

• victims and potential victims of forced marriage in the UK

• British nationals overseas

• professionals (most commonly police officers and social workers, education professionals and sometimes NGOs) working to safeguard them

It does this through the provision of:

• a telephone helpline
• an e-mail inbox

Through the helpline and e-mail inbox FMU collects data relating to victims and potential victims of forced marriage. This includes in particular a person’s:

• name
• address
• contact details including mobile numbers, email addresses, and social media profiles
• date and place of birth
• passport number
• gender
• the country where the forced marriage is due to happen

In the course of providing assistance to a victim or potential victim of forced marriage, the FMU may also collect relevant data about other family members, including siblings, parents, and extended family, their prospective spouse, and, where concerns are reported by a third-party, details of the individual reporting a concern.

4. Legal basis for the processing

The lawful basis for processing personal data by the FCO and HO is that it is necessary to do so in order to perform their official functions as the FMU such that Article 6(1)(e) of the GDPR applies.

5. Special category and criminal data

Special category data may also be processed including, if proactively disclosed:

• sexual orientation
• nationality
• disability

Due to the nature of their work the Forced Marriage Unit may also occasionally process criminal data including information concerning alleged criminality.

6. Additional condition for the processing of special category data

The processing of special category data requires an additional legitimising processing condition under Article 9 of the GDPR to be met to ensure lawful processing.

In this regard where special category data is processed this is done on the basis that it is necessary for reasons of substantial public interest under Article 9 (2) (g) in connection with the exercise of the official functions of the FCO and Home Office (paragraph 6 of Part 2 of Schedule 1 of the DPA 2018) or for preventing or detecting unlawful acts (paragraph 10, Part 2 of Schedule 1 of the DPA 2018) or safeguarding of children and individuals at risk (paragraph 18, Part 2 of Schedule 1 of the DPA 2018)

In a relatively small number of cases the special category data will be processed on the basis that it is necessary to protect the vital interests of the data subject (Article 9(2)(c) GDPR).

7. Additional condition for the processing of criminal data

Where criminal data is processed this is done on the basis that it is necessary in connection with the exercise of the official functions of the FCO and HO and is in the substantial public interest (paragraph 6of Part 2 of Schedule 1 of the DPA 2018), on the basis that it is necessary for preventing or detecting unlawful acts (paragraph 10 of Part 2 of Schedule 1 of the DPA 2018) or because it is necessary for safeguarding children and individuals at risk (paragraph 18 of Part 2 of Schedule 1 of the DPA 2018).

In a relatively small number of cases it may be done on the basis that it is necessary in order to protect the vital interests of an individual and the data subject is physically or legally incapable of giving consent (paragraph 30, Part 3 of Schedule 1 of the DPA 2018).

8. Security of your data

We take data security very seriously and we take every step to ensure that your data remains private and secure. We use SSL in order to encrypt all data transferred to and received from our server.

9. Data sharing between the Foreign & Commonwealth Office and Home Office

Personal data is shared between the Foreign & Commonwealth Office and Home Office as part of running the Forced Marriage Unit.

There is a need to share this data because FMU is a joint unit. This joint access to data helps to ensure effective decision-making and safeguarding of individuals. The overall benefit of such sharing is to provide a better service to the victims and potential victims of forced marriage and professionals, and to improve the safeguarding response.

All such data is shared securely.

10. Data sharing with third parties

FMU may share data on a case by case basis with the following organisations:

1. police and social services in the case of minors at risk of forced marriage and in relation to adults when required, either with consent or if there is an imminent risk of harm to their life or when one of the other lawful bases set out above applies

2. United Kingdom Visas and Immigration (UKVI). FMU shares data when there are concerns that an individual who is the victim of forced marriage may be unwillingly sponsoring a visa application. UKVI may send data to FMU when it has such concerns about a sponsor, and FMU may share data with UKVI to either confirm or refute UKVI’s suspicions

3. relevant NGOs or funded partners to allow them to offer specialist services

4. when a victim of forced marriage is overseas and consents to a referral to an NGO or other local organisation / provider who can offer safe accommodation or other services in country. Sharing information allows the provider to contact the victim to offer assistance and organise logistics

Where such sharing takes place it is pursuant to one of the lawful bases set out above.

11. Published statistics

FMU also publishes annual anonymised statistics on the cases which it has dealt with and sometimes provides high-level anonymised data to the police and others on the nature of the cases which it has dealt with.

12. How long data are retained

We will retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal or reporting requirements. Details of retention periods for different aspects of your personal information are available in our retention policy which is available from: FCO data retention schedule.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

In some circumstances we will anonymise your personal information so that it can no longer be associated with you, in which case we will use such information without further notice to you.

13. Your rights

You have the right to:

• where we process your data on the basis that it necessary for the exercise of our official functions you are entitled to object to that processing – i.e. to request that your data is not processed for certain purposes
• erasure – in certain circumstances you are entitled to request that your personal data is erased where one of the statutory grounds applies
• data portability – the right to obtain and reuse your personal data for your own purposes across different services in certain circumstances
• restrict processing - request that the processing of your personal data is restricted in certain circumstances – for example, where accuracy is contested
• rectification - request that any inaccuracies in your personal data are rectified without delay. Request that any incomplete personal data is completed, including by means of a supplementary statement
• access - request information about how your personal data is processed and to request a copy of that personal data

14. How to contact us

If you have any questions about anything in this notice, or if you consider that your personal data has been misused or mishandled, or if you would like to exercise any of your rights, you can contact the Data Protection Officer at the Foreign and Commonwealth Office:

Data Protection Officer
Knowledge Management Department
Knowledge and Technology Directorate
Room WHG.127
Foreign and Commonwealth Office
King Charles Street
London
SW1A 2AH

Email: Data.Protection@fco.gov.uk

Telephone: 020 7008 1500

Or you can contact the Data Protection Officer at the Home Office:

Office of the DPO
Home Office
Peel Building
2 Marsham Street
London
SW1P 4DF

Email: dpo@homeoffice.gov.uk

15. Complaints

You may also make a complaint to the Information Commissioner, who is an independent regulator. The Information Commissioner can be contacted at:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

Email: casework@ico.org.uk

Telephone: 0303 123 1113

16. Changes to this notice

We may modify or amend this privacy notice at our discretion at any time. When we make changes to this notice, we will amend the last modified data at the top of this page. Any modification or amendment to this privacy notice will be applied to you and your data as of that revision date.