Obtaining personal information held by UKSV
Data held by UKSV will relate to applicants for positions or contracts where a requirement for vetting was or has been identified by the sponsor and the process commenced.
United Kingdom Security Vetting (UKSV) and Cabinet Office take our obligations under UK GDPR and the Data Protection Act 2018 (DPA 2018) very seriously.
Personal data held by UKSV
UKSV act as service providers for National Security Vetting (NSV) across government. You can read the privacy notice for the NSV process.
Data held by UKSV will relate to applicants for positions or contracts where a requirement for vetting was or has been identified by the sponsor and the process commenced. UKSV can only action requests that relate to information obtained as part of the National Security Vetting Process.
How to make a Subject Access Request (SAR)
To make a Subject Access Request to UKSV, we will need the following information from you in order to locate and verify any recorded information.
- Full Name (including any previous or known names held)
- Data of Birth
- Address
- Details of your request
We will also require a verifiable form of ID, such as a copy of your current passport or driving licence to accompany your request. Without a valid form of ID, we cannot process your request.
UKSV will initiate searches of any information held and in accordance with DPA18, a response will be issued within 30 calendar days from receipt of your request (unless advised within that calendar month that we will require longer to comply with your request).
All requests and enquiries should be submitted to the UKSV Data Protection Team using the following methods:
- Email: [email protected]
- In writing:
UKSV Data Protection Team
United Kingdom Security Vetting
Building 107, Imphal Barracks
Fulford Road
York
YO10 4AS
Handling of personal information requests and enquiries
When your request is received into UKSV, it will be directed to the UKSV Data Protection Team, who will;
- Acknowledge your request,
- Provide you with further information about how your request will be handled
- Seek any relevant additional detail we may need in order to proceed.
Each request will be reviewed and assessed in accordance with the Data Protection Act 2018 and the NSV Privacy Notice.
UKSV will administer and process your request, as vetting authority. It may be that as we administer your request, it becomes clear that information is not held by UKSV directly but by the decision-making authority as joint data controller. Where this is the case, UKSV will liaise with the decision-making authority and keep you updated. This is to ensure that your request can be accurately considered, in full. UKSV will advise you if your request cannot be actioned by UKSV and advise you on how to proceed.
How to contact UKSV about your individual data rights
More information about your rights can be found at Freedom of Information request and Subject Access request privacy notice
You can contact UKSV via [email protected] if you have a query about your data rights within the vetting process and for further information. This will be sent to UKSV Data Protection Team for acknowledgement and response.
You may ask for your rights under DPA18 to be considered verbally or in writing. UKSV will continue to accept MOD1694 forms.
Complaints about the handling of your Subject Access Request or individual data rights
If you are not satisfied with any aspect of how your request is handled, you should raise this with the UKSV Data Protection Team [email protected] in the first instance. Your complaint will be handled by an independent staff member within UKSV. You will receive an acknowledgement within 2 working days and a response will be issued within 20 working days (unless advised otherwise within that timescale).
You may also raise any concerns about how your personal data has been handled with the department’s Data Protection Officer (DPO), who provides independent oversight. The DPO can be contacted at [email protected] or:
Data Protection Officer
Cabinet Office
70 Whitehall
London
SW1A 2AS
You may also raise a complaint with the Information Commissioner’s Office (ICO), under Section 165 of the Data Protection Act 2018. The Information Commissioner can be contacted at:
Information Commissioner
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Tel: 0303 123 1113 Email: [email protected]
Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.
Updates to this page
Published 6 April 2020Last updated 23 March 2022 + show all updates
-
Contact details amended to UKSV Data Protection Team
-
Contact details for Subject Access Requests updated. Out of date Covid-19 guidance removed.
-
The contact details for the Cabinet Office freedom of information team have been removed under 'Complaints about the handling of your Subject Access Request or individual data rights' to reflect a change to the internal review process.
-
First published.