Skip to content

Privacy notice

Original document

LAST VERIFIED 2026-10-01

Attention points

13 TO CHECK

Pointers to disclosures this policy may not clearly make, checked against major privacy laws. This is a heuristic — not legal advice, and not a finding that anything is missing or unlawful.

GDPR / UK-GDPR

8/13 ADDRESSED
  • Your data-subject rights (access, erasure, portability, object, …)GDPR Arts. 13(2)(b), 15–21
  • The right to withdraw consent (where consent is the basis)GDPR Art. 13(2)(c)
  • Whether providing your data is required, and what happens if you don'tGDPR Art. 13(2)(e)
  • Automated decision-making or profilingGDPR Arts. 13(2)(f), 22
  • Where your data was obtained, if not collected from you (source)GDPR Art. 14(2)(f)

CCPA / CPRA

2/10 ADDRESSED
  • The categories of sources the data comes fromCCPA §1798.110(c)
  • The business or commercial purposes for collecting/selling/sharingCCPA §1798.110(c)
  • Categories of third parties data is shared/sold toCCPA §1798.115
  • A 'Do Not Sell or Share My Personal Information' option (if it sells/shares)CCPA §1798.135(a)
  • A 'Limit the Use of My Sensitive Personal Information' option (CPRA)CPRA §1798.135(a)
  • Your CCPA rights (know, delete, correct, opt-out, limit, non-discrimination)CCPA §§1798.100–125
  • A non-discrimination promise for exercising your rightsCCPA §1798.125
  • At least two ways to submit a request, plus a contactCCPA §1798.130

Current text

GOV.UK (or www.gov.uk) is provided by the Government Digital Service (GDS), part of the Department for Science, Innovation & Technology (DSIT). DSIT and other government departments, agencies and organisations are joint controllers for pages that start 'www.gov.uk'. If you have a GOV.UK One Login, read the full GOV.UK One Login privacy notice to find out how it stores, processes and shares your personal information. If you follow a link to a service provided by another…

Show full text