Your right to be informed if your personal data is being used

<!doctype html>    <html lang="en">  <head prefix="og: http://ogp.me/ns#"><script type="text/javascript" src="/_static/js/bundle-playback.js?v=HxkREWBo" charset="utf-8"></script> <script type="text/javascript" src="/_static/js/wombat.js?v=txqj7nKC" charset="utf-8"></script> <script>window.RufflePlayer=window.RufflePlayer||{};window.RufflePlayer.config={"autoplay":"on","unmuteOverlay":"hidden"};</script> <script type="text/javascript" src="/_static/js/ruffle/ruffle.js"></script> <script type="text/javascript"> __wm.init("http://web.archive.org/web"); __wm.wombat("https://ico.org.uk/for-the-public/your-right-to-be-informed-if-your-personal-data-is-being-used/","20231127094328","http://web.archive.org/","web","/_static/", "1701078208"); </script> <link rel="stylesheet" type="text/css" href="/_static/css/banner-styles.css?v=S1zqJCYt" /> <link rel="stylesheet" type="text/css" href="/_static/css/iconochive.css?v=3PDvdIFv" />  <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="initial-scale=1.0, width=device-width"> <title>Your right to be informed if your personal data is being used | ICO</title>   <meta name="DC.Subject" content="Your right to be informed if your personal data is being used"/> <meta name="DC.Date" content="Friday, September 22, 2023"/> <meta name="DC.Creator" content=""/> <meta name="DC.Publisher" content="ICO"/> <meta name="DC.Title" content="Your right to be informed if your personal data is being used"/> <meta name="DC.PageID" content="33094"/>  <meta name="robots" content="index"/>   <meta property="og:title" content="Your right to be informed if your personal data is being used"/> <meta property="og:type" content="website"/> <meta property="og:url" content="http://web.archive.org/web/20231127094328/https://ico.org.uk/for-the-public/your-right-to-be-informed-if-your-personal-data-is-being-used/"/> <meta property="og:description" content="An organisation must inform you if it is using your personal data. The organisation should give you privacy information at the time it collects your data. This is called your ‘right to be informed’."/> <meta property="og:image" content="http://web.archive.org/web/20231127094328im_/https://ico.org.uk/media/2258972/ydm-informed-1000x671.gif"/> <meta name="twitter:title" content="Your right to be informed if your personal data is being used"/> <meta name="twitter:description" content="An organisation must inform you if it is using your personal data. The organisation should give you privacy information at the time it collects your data. This is called your ‘right to be informed’."/> <meta name="twitter:image" content="http://web.archive.org/web/20231127094328im_/https://ico.org.uk/media/2258972/ydm-informed-1000x671.gif"/> <meta name="twitter:card" content="summary_large_image"/>  <link rel="shortcut icon" type="image/x-icon" href="/web/20231127094328im_/https://ico.org.uk/favicon.ico"/> <link href="/web/20231127094328cs_/https://ico.org.uk/cassette.axd/stylesheet/bc01a592a86457b244b30567474429e96382a3ca/css" type="text/css" rel="stylesheet"/>  <script src="/web/20231127094328js_/https://ico.org.uk/cassette.axd/script/5ee23aacdf970dd872941ccf4f703a43bccb2949/scripts/responsive-nav.min.js" type="text/javascript"></script> <script src="/web/20231127094328js_/https://ico.org.uk/cassette.axd/script/e959342b74f6ed9b82c2aa42af0bcf7fd59f2d10/scripts/lib" type="text/javascript"></script>    </head> <body id="top" class=""> <a class="link-skiptocontent invisible" href="#startcontent">Skip to main content <span class="icon-arrow-down"></span></a> <header class="header-banner"> <div class="container-header"> <div class="container row"> <div class="column column-3 siteheader-logo"> <a href="/web/20231127094328/https://ico.org.uk/"><span class="invisible">ICO: Information Commissioner's Office</span></a> </div> <div class="column column-6 siteheader-strapline h4"> <div class="siteheader-strapline-inner"> <p>The ICO exists to empower you through information.</p> </div> </div> <a href="" class="button-icon" id="toggle-siteheader-search"><span class="icon-search"></span><span class="invisible">Search</span><span class="icon-close"></span></a> <form action="http://web.archive.org/web/20231127094328/https://icosearch.ico.org.uk/s/search.html" method="GET" class="column column-3" id="siteheader-search"> <fieldset> <legend class="invisible">Search</legend> <div class="siteheader-search-form"> <label for="search" class="invisible">Search</label> <input type="search" id="search" name="query"> <input type="hidden" name="collection" value="ico-meta"/> <input type="hidden" name="profile" value="_default"/> <span class="button-icon icon-search"></span> <input type="submit" value="Search"> </div> </fieldset> </form> </div> </div> <div class="container-navigation"> <div class="container row"> <nav class="column column-12" aria-label="Main menu"> <ul> <li class="h3 theme-home"> <a href="/web/20231127094328/https://ico.org.uk/">Home<span class="icon-arrow-right"></span></a> </li> <li class="h3 theme-public"> <a href="/web/20231127094328/https://ico.org.uk/for-the-public/" class="current">For the public<span class="icon-arrow-right"></span></a> </li> <li class="h3 theme-organisations"> <a href="/web/20231127094328/https://ico.org.uk/for-organisations/">For organisations<span class="icon-arrow-right"></span></a> </li> <li class="h3 theme-report"> <a href="/web/20231127094328/https://ico.org.uk/make-a-complaint/">Make a complaint<span class="icon-arrow-right"></span></a> </li> <li class="h3 theme-action"> <a href="/web/20231127094328/https://ico.org.uk/action-weve-taken/">Action we've taken<span class="icon-arrow-right"></span></a> </li> <li class="h3 theme-about"> <a href="/web/20231127094328/https://ico.org.uk/about-the-ico/">About the ICO<span class="icon-arrow-right"></span></a> </li> </ul> </nav> </div> </div> </header> <main class="theme-public" id="startcontent"> <article class="container"> <header class="pageheader"> <div class="row"> <div class="column column-8"> <nav aria-label="breadcrumb" class="pageheader-breadcrumb text-small clearfix"> <ol> <li> <a href="/web/20231127094328/https://ico.org.uk/for-the-public/">For the public</a><span>/</span> </li> <li> <span class="current" aria-current="page" aria-label="Current page"> Your right to be informed if your personal data is being used </span> </li> </ol> </nav> <h1>Your right to be informed if your personal data is being used</h1> </div> <div class="pageheader-download column column-4 column-indent-1"> <a href="#" id="toggle-hiddenpanel-headershare"><span class="h4">Share<span class="invisible">(Opens Share panel)</span></span><span class="button-circle"><span class="icon-share"></span></span></a> </div> </div> <div class="hiddenpanel clearfix toggle-right" id="hiddenpanel-headershare" aria-label="panel share" style="display: none;"> <h2 class="h4">Share this page</h2> <ul class="clearfix"> <li> <a href="http://web.archive.org/web/20231127094328/http://www.reddit.com/submit?url=https:%2f%2fico.org.uk%2ffor-the-public%2fyour-right-to-be-informed-if-your-personal-data-is-being-used%2f" target="_blank" class="button-circle"> <span class="icon-reddit"></span> <span class="invisible">Share via Reddit</span> </a> </li> <li> <a href="http://web.archive.org/web/20231127094328/https://www.linkedin.com/shareArticle?mini=true&title=Your+right+to+be+informed+if+your+personal+data+is+being+used&url=https:%2f%2fico.org.uk%2ffor-the-public%2fyour-right-to-be-informed-if-your-personal-data-is-being-used%2f&source=Ico.org.uk" target="_blank" class="button-circle"> <span class="icon-linkedin"></span> <span class="invisible">Share via LinkedIn</span> </a> </li> <li> <a href="/web/20231127094328/https://ico.org.uk/cdn-cgi/l/email-protection#e9d68b868d90d4819d9d999ad3ccdb8fccdb8f808a86c7869b8ec79c82ccdb8f8f869bc49d818cc4999c8b85808accdb8f90869c9bc49b808e819dc49d86c48b8cc480878f869b848c8dc4808fc490869c9bc4998c9b9a86878885c48d889d88c4809ac48b8c80878ec49c9a8c8dccdb8f" target="_blank" class="button-circle"> <span class="icon-envelope"></span> <span class="invisible">Share via email</span> </a> </li> </ul> </div> </header> <div class="row"> <div class="maincolumn column column-8"> <div class="article-content"> <img src="/web/20231127094328im_/https://ico.org.uk/media/2259109/ydm-informed-white-1000x671.gif" alt="" class="article-image article-image-right"/> <h2>Your right to be informed if your personal data is being used</h2> <p>An organisation must inform you if it is using your personal data. It should provide detailed information on the following:</p> <ul> <li>Why it is using your data.</li> <li>What type/types of data it is using.</li> <li>How long your data will be kept.</li> <li><span>I</span>f it is going to transfer your data to third parties, <span>the</span> names <span>or categories of recipients, </span>and the reasons for the transfer.</li> <li>Information if it is going to transfer the data overseas, including the country involved and what will be done with the data.</li> <li>Your information rights.</li> <li>Where the data is from.</li> <li>If it is using the data in profiling (a type of automated processing where your personal data is used to analyse or predict things such as your performance at work, economic situation, health, personal preferences and interests).</li> <li>How to contact the organisation.</li> <li>Your right to complain to the ICO.</li> </ul> <p>This is called ‘privacy information’.</p> <p>The organisation should give you privacy information at the time it collects your data. If it obtains your data from another source, it should provide privacy information within one month. It may do so in the form of a privacy notice.</p> <p>This is called your ‘right to be informed’.</p> <h2>When can an organisation not inform you of its activities?</h2> <p>Generally, organisations must give you privacy information, but in some circumstances they don’t have to. These include where:</p> <ul> <li>you already have the privacy information and nothing has changed</li> <li>giving you the privacy information is impossible or would require “disproportionate effort”, or</li> </ul> <ul> <li>giving you the privacy information would make it impossible to use your data or seriously damage the reasons for its use.</li> </ul> <h2>How should I raise my complaint about how an organisation has handled my information?</h2> <p>You can use the template letter below to help you raise your complaint.</p> <p> </p> <div class="example example-letter"> <p style="padding-left: 400px;"> [Your full address]<br> [Your phone number]<br> [The date]</p> <p>[Name and address of the organisation]<br>[Reference number (if provided within the initial response)]</p> <p>Dear [Sir or Madam / name of the person you have been in contact with]</p> <p><strong>Information rights complaint</strong></p> <p>[Your full name and address and any other details such as account number to help identify you]</p> <p>I am concerned that you have not handled my personal information properly.</p> <p>[Give details of your complaint, explaining clearly and simply what has happened and, where appropriate, the effect it has had on you.]</p> <p>I understand that before reporting my complaint to the Information Commissioner’s Office (ICO) I should give you the chance to deal with it.</p> <p>If, when I receive your response, I would still like to report my complaint to the ICO, I will give them a copy of it to consider.</p> <p>You can find guidance on your obligations under information rights legislation on the ICO’s website (www.ico.org.uk) as well as information on their regulatory powers and the action they can take.</p> <p>Please send a full response within one calendar month. If you cannot respond within that timescale, please tell me when you will be able to respond.</p> <p>If there is anything you would like to discuss, please contact me on the following number [telephone number].</p> <p> </p> <p><br>Yours faithfully<br>[Signature]</p> </div> </div> <aside class="aside-further" aria-label="Document menu"> <h2 class="offscreen">Further Reading</h2> <ul> <li> <a href="/web/20231127094328/https://ico.org.uk/media/your-data-matters/documents/1281/raising-a-concern.docx" target="_blank"> <h3 class="h4 link-external">Raising a concern<span class="invisible"></span></h3> <div class="text-small"> <p>External link</p> </div> <span class="icon-external-link"></span> </a> </li> </ul> </aside> </div> <div class="column column-3 column-indent-1"> </div> </div> </article> </main> <footer> <div class="footer-sociallinks container row"> <div class="footer-sociallinks-links footer-sociallinks-links--left column column-2"> <ul class=""> <li> <a href="#" class="button-circle" id="toggle-hiddenpanel-share"> <span class="icon-share"></span> <span class="invisible">Share this page</span> </a> </li> <li> <a href="javascript:window.print()" class="button-circle" data-item="Print"> <span class="icon-print"></span> <span class="invisible">Print this page</span> </a> </li> <li> <a href="/web/20231127094328/https://ico.org.uk/global/rss-feeds/" class="button-circle" data-item="RSS"> <span class="icon-feed"></span> <span class="invisible">RSS feeds</span> </a> </li> </ul> </div> <div class="footer-sociallinks-language column column-2 language-dropdown-container"> <div class="language-dropdown-tab-controls dropdown"> <a href="#" class="visible-xs mobile-tabcontrol" title="Language Selector" aria-haspopup="true" aria-expanded="false" data-target="[langSelector__nav]"> <ul class="globe-list"> <li class="button-circle globe" title="Language"> <span class="icon-globe"></span></li> </ul> <span class="dropdown-label">English</span> <span class="chevron down"></span> </a> <ul class="nav nav-tabs" data-name="langSelector__nav"> <li class="tab active"> <a rel="nofollow" href="http://web.archive.org/web/20231127094328/https://ico.org.uk/" name="English" class="content language-item">English</a> </li> <li class="tab"> <a rel="nofollow" href="http://web.archive.org/web/20231127094328/https://cy.ico.org.uk/" name="Welsh" class="content language-item">Cymraeg</a> </li> </ul> </div> </div> <div class="footer-sociallinks-links footer-sociallinks-links--right column column-4"> <ul class="clearfix"> <li> <a href="http://web.archive.org/web/20231127094328/https://twitter.com/iconews" target="_blank" class="button-circle" data-item="Follow us on Twitter"> <span class="icon-twitter"></span> <span class="invisible">Follow us on Twitter</span> </a> </li> <li> <a href="http://web.archive.org/web/20231127094328/http://facebook.com/ICOnews" target="_blank" class="button-circle" data-item="Like us on Facebook"> <span class="icon-facebook"></span> <span class="invisible">Like us on Facebook</span> </a> </li> <li> <a href="http://web.archive.org/web/20231127094328/http://linkedin.com/company/information-commissioner's-office" target="_blank" class="button-circle" data-item="Connect with us on Linkedin"> <span class="icon-linkedin"></span> <span class="invisible">Connect with us on Linkedin</span> </a> </li> <li> <a href="http://web.archive.org/web/20231127094328/http://www.youtube.com/user/icocomms" target="_blank" class="button-circle" data-item="Watch us on YouTube"> <span class="icon-youtube"></span> <span class="invisible">Watch us on YouTube</span> </a> </li> </ul> </div> <div class="hiddenpanel clearfix" id="hiddenpanel-share"> <h2 class="h4">Share this page</h2> <ul class="clearfix"> <li> <a href="http://web.archive.org/web/20231127094328/http://www.reddit.com/submit?url=https:%2f%2fico.org.uk%2ffor-organisations%2fdata-protection-fee%2fchange%2fupdate-your-registration-details%2f" target="_blank" class="button-circle"> <span class="icon-reddit"></span> <span class="invisible">Share via Reddit</span> </a> </li> <li> <a href="http://web.archive.org/web/20231127094328/https://www.linkedin.com/shareArticle?mini=true&title=Update+your+registration+details&url=https:%2f%2fico.org.uk%2ffor-organisations%2fdata-protection-fee%2fchange%2fupdate-your-registration-details%2f&source=Ico.org.uk" target="_blank" class="button-circle"> <span class="icon-linkedin"></span> <span class="invisible">Share via LinkedIn</span> </a> </li> <li> <a href="/web/20231127094328/https://ico.org.uk/cdn-cgi/l/email-protection#7d421f121904401509090d0e47584f1b584f1b141e1253120f1a530816584f1b1b120f50120f1a1c13140e1c091412130e584f1b191c091c500d0f1209181e09141213501b1818584f1b1e151c131a18584f1b080d191c0918500412080f500f181a140e090f1c09141213501918091c14110e584f1b" target="_blank" class="button-circle"> <span class="icon-envelope"></span> <span class="invisible">Share via email</span> </a> </li> </ul> </div> <a href="/web/20231127094328/https://ico.org.uk/about-the-ico/media-centre/e-newsletter/" class="footer-sociallinks-newsletter"> <span class="h4">Subscribe to our e-newsletter</span> <span class="button-circle"> <span class="icon-envelope"></span> </span> </a> <div class="footer-sociallinks-language--mobile language-dropdown-container"> <div class="language-dropdown-tab-controls dropdown"> <a href="#" class="visible-xs mobile-tabcontrol" title="Language Selector" aria-haspopup="true" aria-expanded="false" data-target="[langSelector__nav--mobile]"> <ul class="globe-list"> <li class="button-circle globe" title="Language"><span class="icon-globe"></span></li> </ul> <span class="dropdown-label">English</span> <span class="chevron down"></span> </a> <ul class="nav nav-tabs" data-name="langSelector__nav--mobile"> <li class="tab active"> <a rel="nofollow" href="http://web.archive.org/web/20231127094328/https://ico.org.uk/" name="English" class="content language-item">English</a> </li> <li class="tab"> <a rel="nofollow" href="http://web.archive.org/web/20231127094328/https://cy.ico.org.uk/" name="Welsh" class="content language-item">Cymraeg</a> </li> </ul> </div> </div> </div> <div class="container-sitemap"> <div class="container row"> <div class="column column-2"> <a href="/web/20231127094328/https://ico.org.uk/" class="footer-sitemap-logo"><span class="invisible">ICO: Information Commissioner's Office</span></a> </div> <div class="column column-2"> <h2 class="h4"><a href="/web/20231127094328/https://ico.org.uk/for-the-public/">Your data matters</a></h2> <ul class="text-small"> <li><a href="/web/20231127094328/https://ico.org.uk/for-the-public/official-information/">Official information</a></li> <li><a href="/web/20231127094328/https://ico.org.uk/for-the-public/nuisance-calls/">Nuisance calls</a></li> </ul> </div> <div class="column column-2"> <h2 class="h4"><a href="/web/20231127094328/https://ico.org.uk/for-organisations/">For organisations</a></h2> <ul class="text-small"> <li><a href="/web/20231127094328/https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/">UK GDPR guidance and resources</a></li> <li><a href="/web/20231127094328/https://ico.org.uk/for-organisations/foi-eir-and-access-to-information/">FOI, EIR and access to information</a></li> <li><a href="/web/20231127094328/https://ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/">Direct marketing</a></li> <li><a href="/web/20231127094328/https://ico.org.uk/for-organisations/advice-and-services/">Advice and services</a></li> </ul> </div> <div class="column column-2"> <h2 class="h4"><a href="/web/20231127094328/https://ico.org.uk/action-weve-taken/">Action we've taken</a></h2> <ul class="text-small"> <li><a href="/web/20231127094328/https://ico.org.uk/action-weve-taken/enforcement/">Enforcement action</a></li> <li><a href="http://web.archive.org/web/20231127094328/https://icosearch.ico.org.uk/s/search.html?collection=ico-meta&profile=decisions&query">Decision notices</a></li> <li><a href="/web/20231127094328/https://ico.org.uk/action-weve-taken/audits-and-overview-reports/">Audits</a></li> </ul> </div> <div class="column column-2"> <h2 class="h4"><a href="/web/20231127094328/https://ico.org.uk/about-the-ico/">About the ICO</a></h2> <ul class="text-small"> <li><a href="/web/20231127094328/https://ico.org.uk/about-the-ico/who-we-are/">Who we are</a></li> <li><a href="/web/20231127094328/https://ico.org.uk/about-the-ico/what-we-do/">What we do</a></li> <li><a href="/web/20231127094328/https://ico.org.uk/about-the-ico/media-centre/">Media centre</a></li> <li><a href="/web/20231127094328/https://ico.org.uk/about-the-ico/jobs/">Careers</a></li> <li><a href="/web/20231127094328/https://ico.org.uk/about-the-ico/modern-slavery-statement/">Modern Slavery Statement</a></li> </ul> </div> </div> </div> <div class="container-strapline"> <div class="container row"> <div class="column column-12 h4"> <p>The ICO exists to empower you through information.</p> </div> </div> </div> <div class="container-footerlinks"> <div class="container row"> <div class="column column-12"> <nav aria-label="footer" class="clearfix"> <a href="/web/20231127094328/https://ico.org.uk/global/contact-us/">Contact us</a> <a href="/web/20231127094328/https://ico.org.uk/global/privacy-notice/">Privacy notice</a> <a href="/web/20231127094328/https://ico.org.uk/global/cookies/">Cookies</a> <a href="/web/20231127094328/https://ico.org.uk/global/accessibility/">Accessibility</a> <a href="http://web.archive.org/web/20231127094328/https://ico.org.uk/about-the-ico/who-we-are/wales-office">Cymraeg</a> <a href="/web/20231127094328/https://ico.org.uk/global/request-publications/">Publications</a> <a href="/web/20231127094328/https://ico.org.uk/global/disclaimer/">Disclaimer</a> <a href="/web/20231127094328/https://ico.org.uk/global/copyright-and-re-use-of-materials/">© Copyright</a> </nav> <div class="footerlinks-phone h2"><span class="icon-phone"></span><span class="invisible">Phone:</span> 0303 123 1113</div> <div class="footer-ogl"><span class="invisible">Open Government Licence</span></div> <div class="text-small footer-ogl-info"> All text content is available under the <a href="http://web.archive.org/web/20231127094328/http://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/">Open Government Licence v3.0</a>, except where otherwise stated. </div> </div> </div> </div> </footer> <script data-cfasync="false" src="/web/20231127094328js_/https://ico.org.uk/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js"></script><script type="text/html" id="CookieControlConfig"> {"apiKey":"dbf86e044f3ab8c4df852af5c7c6ceb2dd7678dd","product":"PRO","theme":"dark","position":"left","rejectButton":true,"closeStyle":"button","consentCookieExpiry":90,"initialState":"open","statement":{"description":"For more detailed information about the cookies we use, see our","name":"Cookies page.","url":"/global/cookies/","updated":"17/05/2023"},"text":{"notifyTitle":"Our use of cookies","notifyDescription":"We use necessary cookies to make our site work. We'd also like to set analytics cookies that help us make improvements by measuring how you use the site. These will only be set if you press accept","accept":"Accept all cookies","reject":"Reject all cookies","settings":"Settings","necessaryTitle":"Necessary cookies","necessaryDescription":"Necessary cookies enable core functionality such as security, network management, and accessibility. You may disable these by changing your browser settings, but this may affect how the website functions.","title":"Our use of cookies","intro":"We use necessary cookies to make our site work. We'd also like to set analytics cookies that help us make improvements by measuring how you use the site. These will be set only if you accept.","acceptRecommended":"Accept all cookies","rejectSettings":"Reject all cookies","closeLabel":"Save and close"},"branding":{"fontFamily":"Verdana, Helvetica, Arial, sans-serif","fontColor":"#FFF","fontSizeTitle":"25px","fontSizeIntro":"15px","fontSizeHeaders":"21px","fontSize":"15px","acceptBackground":"#FFF","backgroundColor":"#0276A5","toggleText":"#FFF","toggleColor":"#0276A5","toggleBackground":"#2F2F5F","removeAbout":true},"necessaryCookies":["rwe*","language","UMB_*","UMB-*","XSRF-*","__RequestVerificationToken"],"optionalCookies":[{"name":"analytics","label":"Analytics cookies","description":"We'd like to collect website analytics information using Silktide to help us improve the website. We collect this data by running Silktide analytics JavaScript on your device, which collects data about how you have interacted with our site. The data is collected in a way that does not directly identify anyone. For more information please see our Cookies page.","cookies":[],"lawfulBasis":"Consent","recommendedState":true,"onAccept":"try {\n ICO.Silktide.enable(\"12d0c703744ea255b679f823daf1645f\");\n} catch (err) {}","onRevoke":"try {\n ICO.Silktide.disable();\n} catch (err) {}"}]} </script> <script src="/web/20231127094328js_/https://ico.org.uk/cassette.axd/script/1f29167faa088c5124984009ad963e616a7ff571/scripts" type="text/javascript"></script>  </body> </html>

CINXE.COM

Your right to be informed if your personal data is being used | ICO