Privacy notice for cyber security support sessions

Cyber Security Technical Support with Councils

We wish to assure you of the privacy and confidentiality of what you share with us regarding Information and Cyber Security. Your organisation and you will remain anonymous in all communications.


The following is to explain your rights and give you the information you are entitled to under the General Data Protection Regulation 2016 and Data Protection Act 2018.

Cyber and Tech Team, Local Digital Collaboration Unit

The Ministry of Housing, Communities and Local Government (MHCLG) and our Data Protection Officer MHCLG is the data controller. The Data Protection Officer can be contacted at [email protected].

1. Why we are collecting the data

Your personal data is being collected to manage research interviews for cyber security provisions needs and MHCLG understanding how we are best able to help.

We will use your details to make contact and work collaboratively through cyber security issues.We may also use your email address to contact you with any follow up questions or seeking greater clarity regarding cyber security questions.

2. Legal basis for processing the data

The data protection legislation sets out when we are lawfully allowed to process your data. The lawful basis that applies to this processing is Legitimate interests that are necessary for the performance of a task carried out in the public interest.

Article 6(1)(e) of Data Protection Act 2018, processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

MHCLG is processing this personal data as part of the routine course of business of a government department.

3. With whom we will be sharing the data

Cyber Security Team MHCLG limited to 4 or 5 team members along with a 3rd party (Layer 7 Limited) acting upon MHCLG instructions, under contract as a data processor.

4. For how long we will keep the personal data, or criteria used to determine the retention period

Your personal data will be deleted at the completion of the Tech Support Project, anticipated to be at the end of March 2021.

5. Your rights, e.g. access, rectification, erasure

The data we are collecting is your personal data, and you have rights that affect what happens to it. You have the right to:

a. know that we are using your personal data
b. see what data we have about you
c. ask to have your data corrected, and to ask how we check the information we hold is accurate
d. complain to the ICO (see below)

6. Sending data overseas

Your personal data will not be sent overseas and held on MHCLG secure space.

7. Automated decision making

We will not use your data for any automated decision making.

8. Storage, security and data management

Your personal data will be stored in a secure government IT system, controlled by MHCLG. The data processor will not transfer or store any data outside of MHCLG secure storage.

Complaints and more information

When we ask you for information, we will keep to the law, including the Data Protection Act 2018 and General Data Protection Regulation.

f you are unhappy with the way the department has acted, you can make a complaint.

If you are not happy with how we are using your personal data, you should first contact [email protected].

If you are still not happy, or for independent advice about data protection, privacy and data sharing, you can contact:

The Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow, Cheshire,
SK9 5AF

Telephone: 0303 123 1113 or 01625 545 745
Website: https://ico.org.uk/