United Kingdom Security Vetting (UKSV) and Cabinet Office take our obligations under UK GDPR and the Data Protection Act 2018 (DPA 2018) very seriously.

Personal data held by UKSV

UKSV act as service providers for National Security Vetting (NSV) across government. You can read the privacy notice for the NSV process.

Data held by UKSV will relate to applicants for positions or contracts where a requirement for vetting was or has been identified by the sponsor and the process commenced. UKSV can only action requests that relate to information obtained as part of the National Security Vetting Process.

How to make a Subject Access Request (SAR)

To make a Subject Access Request to UKSV, we will need the following information from you in order to locate and verify any recorded information.

Please do not include copies of any identification, documents, or any other information about you or your request with your initial email to UKSV.

Once we receive this, you will receive an email from UKSV that provides a secure link to a file-sharing service called Egress. This is used to ensure that any information shared either by you or with you is done so in a secure and safe manner. Instructions on how to upload and download information to and from Egress will be provided along with the link.

• Full Name (including any previous or known names held)
• Data of Birth
• Address
• Details of your request

We will also require a verifiable form of ID, such as a copy of your current passport or driving licence to accompany your request. Without a valid form of ID, we cannot process your request.

UKSV will initiate searches of any information held and in accordance with DPA18, a response will be issued within 30 calendar days from receipt of your request (unless advised within that calendar month that we will require longer to comply with your request).

All requests and enquiries should be submitted to the UKSV Data Protection Team using the following methods:

• Email: uksv-data.protection@cabinetoffice.gov.uk
• In writing:

Handling of personal information requests and enquiries

When your request is received into UKSV, it will be directed to the UKSV Data Protection Team, who will;

• Acknowledge your request,
• Provide you with further information about how your request will be handled
• Seek any relevant additional detail we may need in order to proceed.

Each request will be reviewed and assessed in accordance with the Data Protection Act 2018 and the NSV Privacy Notice.

UKSV will administer and process your request, as vetting authority. It may be that as we administer your request, it becomes clear that information is not held by UKSV directly but by the decision-making authority as joint data controller. Where this is the case, UKSV will liaise with the decision-making authority and keep you updated. This is to ensure that your request can be accurately considered, in full. UKSV will advise you if your request cannot be actioned by UKSV and advise you on how to proceed.

How to contact UKSV about your individual data rights

More information about your rights can be found at Freedom of Information request and Subject Access request privacy notice

You can contact UKSV via uksv-data.protection@cabinetoffice.gov.uk if you have a query about your data rights within the vetting process and for further information. This will be sent to UKSV Data Protection Team for acknowledgement and response.

You may ask for your rights under DPA18 to be considered verbally or in writing. UKSV will continue to accept MOD1694 forms.

Complaints about the handling of your Subject Access Request or individual data rights

If you are not satisfied with any aspect of how your request is handled, you should raise this with the UKSV Data Protection Team uksv-data.protection@cabinetoffice.gov.uk in the first instance. Your complaint will be handled by an independent staff member within UKSV. You will receive an acknowledgement within 2 working days and a response will be issued within 20 working days (unless advised otherwise within that timescale).

If you have any concerns regarding how your personal data has been handled you should contact us in the first instance. You may also raise any concerns or complaints about how your personal data has been handled with the department’s Data Protection Officer (DPO), who provides independent oversight. oversight. The DPOcomplaints process can be contactedfound at dpo@cabinetoffice.gov.ukhere. or:

Youour mayresponse, alsoyou can raise a complaint withto the Information Commissioner’sCommissioner Office (ICO), under Section 165 (Complaints by Data Subjects) of the Data Protection Act 2018. TheFurther details of the role and powers of the Information Commissioner can be contactedfound at:

Tel:Please 0303find 123further 1113 Email:contact casework@ico.org.ukdetails for the Information Commissioner here.

Any complaint to the Information Commissioner is without prejudice to your right to seek redressfurther through the courts.redress.