Transparency data

Your information rights under UK GDPR

Published 18 March 2025

Applies to England

UK General Data Protection Regulation (UK GDPR)聽gives you certain rights about how your information is collected and used.

皇冠体育app Department for Education (DfE) must have a valid reason to collect your personal data. 皇冠体育appse reasons are called the lawful basis in UK GDPR.

You have different rights depending on our reason to collect your personal data. In our privacy notices, we tell you which lawful basis we use to process your data. Find out more in the section on 鈥榟ow we use your information鈥� in the Personal information charter.

This information gives details on your rights under each lawful basis.

Public task

When we process your data under public task, you have the right to:

  • be informed about the collection and use of your personal data 鈥� this is called the 鈥榬ight to be informed鈥�
  • ask us for copies of the personal information we have about you 鈥� this is called the 鈥榬ight of access鈥�, also known as a subject access request (SAR), data subject access request (DSAR) or right of access request (RAR)
  • ask us to change any information you think is not accurate or complete 鈥� this is called the 鈥榬ight to rectification鈥�
  • ask us to stop using your information 鈥� this is called the 鈥榬ight to restriction of processing鈥�
  • object to us processing your information, in certain circumstances
  • complain to the Information Commissioner鈥檚 Officer (ICO)聽if you feel we have not used your information in the right way

When we process your data under consent you have the right to:

  • be informed about the collection and use of your personal data 鈥� this is called the 鈥榬ight to be informed鈥�
  • ask us for copies of the personal information we have about you 鈥� this is called the 鈥榬ight of access鈥�, also known as a subject access request (SAR), data subject access request (DSAR) or right of access request (RAR)
  • ask us to change any information you think is not accurate or complete 鈥� this is called the 鈥榬ight to rectification鈥�
  • ask us to delete your personal information 鈥� this is called the 鈥榬ight to erasure鈥�
  • ask us to stop using your information 鈥� this is called the 鈥榬ight to restriction of processing鈥�
  • object to us processing your information, in certain circumstances
  • be informed about automated decision-making and profiling using your personal information
  • withdraw your consent at any time, where relevant
  • complain to the ICO聽if you feel we have not used your information in the right way

As we鈥檙e processing your personal data with your consent, you have the right to:

  • withdraw consent to the processing of your personal data at any time by using our聽
  • 补蝉办听DfE聽to cease publication of your image, words or voice on its social media channels
  • withdraw your consent for us to use your data for a webinar up until the webinar recording is published 鈥� if you change your mind or are unhappy with our use of your personal data,聽let us know, stating the name of the event or webinar

If you ask us to stop publishing your image, words or voice on our social media channels, we鈥檒l do this, but we cannot remove or delete existing posts. 皇冠体育app聽DfE聽social media channels are captured by the聽聽as a permanent record of聽DfE鈥檚 social media communication.

You can聽unsubscribe from our emails聽at any time. You can also use the 鈥榰nsubscribe鈥� or 鈥榗hange your email preferences鈥� links in the emails you get from GOV.UK.

Further information on your rights and the ways in which your data may be used are contained in the filming, photography and audio recordings consent form, if you鈥檝e completed one.

Legitimate interest

When we process your data under legitimate interest, you have the right to:

  • be informed about the collection and use of your personal data 鈥� this is called the 鈥榬ight to be informed鈥�
  • ask us for copies of the personal information we have about you 鈥� this is called the 鈥榬ight of access鈥�, also known as a subject access request (SAR), data subject access request (DSAR) or right of access request (RAR)
  • ask us to change any information you think is not accurate or complete 鈥� this is called the 鈥榬ight to rectification鈥�
  • ask us to delete your personal information 鈥� this is called the 鈥榬ight to erasure鈥�
  • ask us to stop using your information 鈥� this is called the 鈥榬ight to restriction of processing鈥�
  • object to us processing your information, in certain circumstances
  • be informed about automated decision-making and profiling using your personal information
  • complain to the ICO聽if you feel we have not used your information in the right way

Contract

When we process your data under contract, you have the right to:

  • be informed about the collection and use of your personal data 鈥� this is called 鈥榬ight to be informed鈥�
  • ask us for copies of the personal information we have about you 鈥� this is called 鈥榬ight of access鈥�, also known as a subject access request (SAR), data subject access request (DSAR) or right of access request (RAR)
  • ask us to change any information you think is not accurate or complete 鈥� this is called 鈥榬ight to rectification鈥�
  • ask us to delete your personal information 鈥� this is called 鈥榬ight to erasure鈥�
  • ask us to stop using your information 鈥� this is called 鈥榬ight to restriction of processing鈥�
  • object to us processing your information, in certain circumstances
  • be informed about automated decision-making and profiling using your personal information
  • withdraw your consent at any time, where relevant
  • complain to the ICO聽if you feel we have not used your information in the right way

When we process your data under legal obligation, you have the right to:

  • be informed about the collection and use of your personal data 鈥� this is called 鈥榬ight to be informed鈥�
  • ask us for copies of the personal information we have about you 鈥� this is called 鈥榬ight of access鈥�, also known as a subject access request (SAR), data subject access request (DSAR) or right of access request (RAR)
  • ask us to change any information you think is not accurate or complete 鈥� this is called 鈥榬ight to rectification鈥�
  • ask us to stop using your information 鈥� this is called 鈥榬ight to restriction of processing鈥�
  • object to us processing your information, in certain circumstances
  • complain to the ICO聽if you feel we have not used your information in the right way

Vital interests

We鈥檒l only process your personal data under vital interests if we need to do this to protect someone鈥檚 life. 皇冠体育app 鈥榠mmediate protection鈥� section of the Working together to safeguard children 2023: statutory guidance has information on the actions DfE and stakeholders will take if there is a threat to life.

When we process your data under vital interests, you have the right to:

  • be informed about the collection and use of your personal data 鈥� this is called the 鈥榬ight to be informed鈥�
  • ask us for copies of your聽personal information we have about you 鈥� this is called 鈥檙ight of access鈥�, also known as a subject access request (SAR), data subject access request (DSAR) or right of access request (RAR)
  • ask us to change any information you think is not accurate or complete 鈥� this is called 鈥榬ight to rectification鈥�
  • ask us to delete your personal information 鈥� this is called 鈥榬ight to erasure鈥�
  • ask us to stop using your information 鈥� this is called 鈥榬ight to restriction of processing鈥�
  • be informed about automated decision-making and profiling using your personal information
  • complain to the ICO聽if you feel we have not used your information in the right way

Requesting your personal information

Requesting your personal information from DfE聽has details about:

  • what you鈥檙e entitled to ask us or any of our executive agencies
  • your rights about how your information is collected and used

皇冠体育appre are legitimate reasons why we may refuse your information rights request, which depend on why we are processing it.

Find out more from ICO鈥檚 guide to: