Menu
UK Parliament

House of Commons Privacy Notice for the Public

The House of Commons respects your rights to privacy. In line with our responsibilities under the United Kingdom General Data Protection Regulation (UK GDPR) and Data Protection Act 2018, this Privacy Notice explains the personal data that we collect from you and how we use the information.

In this Privacy Notice, references to ‘us’, ‘our’ or ‘we’ are to the House of Commons Administration. Everything that we do with your data – for example storing it, working with it or deleting it – is referred to as “processing”.

Members of Parliament (MPs) are separate controllers for the purposes of data protection legislation.  This notice only applies to personal data which is processed by the House of Commons, including Select Committees and House of Commons staff.  For personal data processed by MPs, please contact the Member direct.

The House of Lords is also a separate controller, please see their privacy notice for the public.

  1. About the House of Commons

The Corporate Officer (Clerk of the House) is the Controller for any personal data processed as described in this Privacy Notice. The Data Protection Officer is the Head of Information Compliance. Contact details can be found at the end of this notice.

 

  1. The personal data we collect

When you contact us, visit us, access or use our services either online, by post, in person or by other means, we may collect, store and use your personal data. This includes:

  • Name, address, phone number, email address, other personal contact details
  • Bank account/credit card details
  • Photographs and images, including CCTV footage; proof of identity
  • Preferences, dietary or access requirements
  • Personal data that you share when you contact us by letter, email, phone or other means
  • Personal data required for security purposes and access to the estate

 

  1. How we collect your information

Most of the personal data we process is provided to us directly by you for one of the following reasons:

  • You have corresponded with the House or taken part in its work e.g. submitting evidence to a Committee or making an enquiry
  • You have visited the House of Commons – this might include the Archives, Library, retail outlets, restaurants or bars, education centre, tours or as a guest on the estate
  • You have requested a publication from us
  • You have purchased items from us e.g. in our shop
  • You have booked a dining experience or event with us
  • You have provided feedback or completed a survey

 

  1. Use of your personal data and lawful bases

We process your personal data so we can:

  • Make sure that the House of Commons functions properly
  • Explain and promote the work of the House of Commons
  • Provide you with goods, facilities or services 
  • Ensure the security of the estate (CCTV and security checks)

There are certain circumstances where we rely on your personal data to facilitate services to you.  Whilst there is no obligation to provide this, it may affect the range of services you can access.

The reason we collect your personal data, also known as the lawful basis, defines the purpose for processing the personal information. These bases include:

  • Where we have your consent to do so
  • Where we need the personal data for the performance of a contract
  • Where necessary to fulfil a legal obligation
  • Where it is necessary for the performance of our public task or is in the public interest
  • Where the processing is necessary for our legitimate interests whilst taking into account your interests and rights to privacy.

 

  1. Special Categories of Personal Data

A further condition is required when processing special categories of personal data as these require greater protection. Special categories include: racial or ethnic origin; religious or philosophical beliefs; trade union membership; genetic and biometric data; health data; sex life or sexual orientation.  The condition will differ dependent on the circumstances but might include processing where we have your explicit consent to use the personal data or where it is necessary for substantial public interest

We may also use your personal data and special category data to protect your vital interests or the vital interests of others you are associated with, if it were to become necessary, for example, whilst visiting the Parliamentary Estate.

 

  1. Who we share your personal data with

Where necessary or with your consent, we may share personal data with: 

  • Other organisations, such as the House of Lords Administration
  • Providers of goods and services who have contracts with us
  • Organisations holding events at the House of Commons which you are attending

We may also share your data when there is a legal requirement to do so, for example with the Police or similar organisations for investigation or security purposes.

 

  1. Storage and security

We take the security of your personal data seriously. All personal data you provide to us will be stored securely, both physically and electronically, in accordance with our policies. We have an information security process in place to oversee the effective and secure processing of your personal data.

Some personal data controlled by us are held outside the UK. These data are predominantly held in data centres within the European Economic Area (EEA), for the purpose of hosting and maintenance.  Regulations under section 17A of the DPA 2018 specify that all countries within the EEA are regarded as providing an adequate level of data protection.  If personal data are transferred to a country outside the UK or EEA, the adequacy of that country and the organisations and systems processing the data is assessed to ensure that appropriate safeguards are in place. 

The House of Commons will retain your personal data for as long as is necessary for the purpose it was collected.  Retention periods can be found in the Houses of Parliament Authorised Retention and Disposal Policy (ARDP). 

 

  1. Your rights

You have certain rights over the personal data you provide to us, we will ensure you can exercise these. The following scenarios explain these rights in more detail:

  • Where we are relying on your consent to use your personal data, you can withdraw that consent by unsubscribing from our services or writing to the Data Protection Officer.
  • You can request access to the personal data we hold about you or ask for certain data in a machine-readable format by contacting the Data Protection Officer.
  • You can ask us to update your personal data if it changes. In certain circumstances, you can request we erase the personal data we hold, or ask us to stop or restrict processing if you have an objection.
  • If you have any concerns relating to the use of your personal data, you may complain to the Data Protection Officer.

 

Full details on your rights are available from the regulator, the Information Commissioners office.

 

  1. Right to complain

If you are unhappy with the processing of your personal data by the House of Commons, you should contact the Data Protection Officer.

Email: hcinformationcompliance@parliament.uk

Telephone: 0207 219 4296  

Post: Information Compliance, House of Commons, SW1A 0AA

You also have the right to complain to the supervisory authority, the Information Commissioners office (ICO).

Post: ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

 

Last updated: December 2020