The Food Standards Agency (FSA) , is the ‘Data Controller’ of the personal information we collect from you or which is provided to us.
Please refer to our Personal Information Charter to understand further about how and why the FSA collects and processes information, what types of information that we collect, how and where we store your data and what your rights are.
We respect and value the privacy of everyone and only collect and use information in ways that are consistent with your rights and our obligations under the law, including the General Data Protection Regulation (GDPR).
Why we need your personal information
We process your personal data in a number of ways to deliver our Public Services which are set out in law. Unless we tell you otherwise our legal basis for collecting this information under GDPR is our Public Task which includes but is not limited to collecting information:
- to regulate the operation of food businesses to the highest standards
- to inform policy and regulation
- to assess and mitigate risks to food safety
- to investigate and prevent food crime
- to promote awareness and encourage best practice around food standards and safety
When we collect information from you, we:
- make sure you know why we need it and why we are allowed to hold it where we are required to do so by law
- only ask for what we need, and not to collect too much or irrelevant information
- protect it and make sure nobody has access to it who is not permitted to have access under the law
- make sure we don’t keep it longer than necessary
What information do we collect through our website?
When you register for a training account with us, we will collect personal data from you such as name, email address, job role, employers name and password.
We collect this information for the purpose of educating a range of stakeholders. We will only use this information to enable you to access our training and certificates and to administer your account. When you registered for an account, we may have made you aware one of our specific Privacy Notices relating to the training that you requested which will be accessible through a link at the end of this Policy.
In the Contact Us section of the website, we provide channels that you can use to raise a query, report a problem or receive assistance. When we collect information from you whether you are a Business or a Consumer, we will generally require your name and contact information and details of your query, request or any issue that you may be reporting. We need this information to understand why you are contacting us and respond accordingly in accordance with our Public Task.
For consumers – Report a food problem
If you are reporting a food problem, for example, if you suspect food poisoning, have issues with a food product or wish to report poor food safety and hygiene practices, we may ask you in the webform, or when you contact us, where you encountered the problem so we can direct your report to the Local Authority that is best placed to investigate it. The information reported on the webform will be transferred to and dealt with directly by the Local Authority and the FSA will not hold a record of your contact details. Alternatively, we may just signpost you to other organisations who are better placed to address your query. For example, if you identify a problem with food labelling, we would advise that you contact Trading Standards.
For businesses – Report a food concern
This section of the website is only intended for use by operators of businesses related to the food sector or local authorities and other agencies that we work with so that they can meet their legal obligations. Consumers should not contact us using webforms or other contact details in this area of the Website.
Where you 'Report a Food Safety Incident' on behalf of your organisation – we will collect your name, role, email address and the address of the organisation that you work for as well as details of the Incident. This will be referred directly to our Incidents Team who will follow up the report with your business. We use Notify.gov.uk to confirm that we have received your report and provide you with a reference.
For businesses – Find business services
For businesses and consumers – Report a food crime
If you 'Report a food crime' then the information that you provide will be transferred to and dealt with directly by the National Food Crime Unit (NFCU), which is a dedicated law enforcement function of the FSA. Information about NFCU can be found on our website. NFCU will process your information safely and confidentially in accordance with GDPR and the Law Enforcement Directive as appropriate. You can access our Privacy notice - National Food Crime Unit and Privacy notice - Criminal Investigation and Prosecution Team through links at the end of this Policy.
For business and consumers – Give us feedback
Subscribe to News, Alerts and Consultations
You have a choice about being contacted for food alerts, allergy alerts, our news and consultations. We will collect certain information from you, for example, email and password, to create an account for you, and so that you are able to consent to what you would like to receive from us and how it is delivered.
These may include updates on:
- information relating to topic/s selected in user subscription preferences
- general website / service updates
- our user surveys
Where we are processing your information on the basis that we have your consent, you can withdraw your consent at any time by updating your subscription preferences in your account or by unsubscribing to the service.
The FSA provides a range of dashboards which we compile from information that we hold to inform stakeholders about various aspects of Food and Feed Regulation and Safety. We will collect information from you when you register to access those service including name, email address, job role, employers name and password and provide you with Terms and Conditions and a Privacy Notice at the Point of Service. You can access it on the The Privacy Notice for Users Registering for Access to FSA Dashboards page.
The information we present in a dashboard, and who we share that information with, is dependent on the purpose of the dashboard. We may combine and analyse information obtained in the course of our regulatory functions, for example about sole traders and businesses, together with information we have obtained from public and private sources. We may gather information from publicly available sources such as websites and make use of web scraping software to carry out our legal powers including for the purpose of helping us evaluate risk.
We do this in line with the exercise of official authority vested in us under the Food Standards Act and the performance of a task carried out in the public interest.
Other services accessed through websites that we operate
From time to time we may provide access to other services through our websites or request feedback in survey linked to through our website. Where these involve the collection of personal information, we will provide you with a specific Privacy Notice at the point of service or we may update this Policy.
How and where do we store your data and who may we share it with?
The FSA treats the security of your information very seriously. The majority of the personal data we process is held on our systems in the UK or EEA in accordance with our Information Security Standards and Policies and all our staff get regular training about how to keep information safe.
For financial, organisational or technical reasons, we may, on occasion, decide to engage third parties to process data on our behalf. We will not transfer your personal information to any such third party unless we are satisfied that they are able to provide an adequate level of protection in respect of your personal information. We take steps to ensure that these organisations have in place suitable technical and organisational safeguards either through the agreements we hold with them or by confirming they operate in accordance with the EU-U.S. Privacy Shield Framework.
The FSA works closely with Local Authorities and Other Competent Authorities, Government Agencies and Industry Bodies both within and outside the UK and has broad powers to share information with those organisations where it is proportionate and necessary to meeting its objectives. We will only share information where we have a legal basis to do so.
You have a legal right to see a copy of the personal data that we keep about you and to require us to correct any inaccuracies, subject to certain exemptions. In some circumstances you may also have the right to:
- request that we erase any personal data held about you
- restrict our processing of your personal data (for example to ask to suspend the processing of personal information to establish its accuracy or the reasons for processing it)
- data portability (i.e. to request the transfer of personal data to a third party)
- object to our processing of your personal data
If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law, you can complain to the Information Commissioner’s Office (ICO).
We provide privacy notices for the following services:
- Advisory Committee on Novel Foods and Processes
- Advisory Committee for Social Science
- Animal Feed, TSES and animal by-products legislation and policy
- Animal Feed Third Country Representation List
- Annual surveillance to monitor levels of acrylamide and furans
- Approved meat establishments and applications for approval
- Better Training for Safer Food courses
- Board Members
- Campylobacter retail survey
- Committee on Toxicity (COT)
- Correspondence regarding policies on food and feed hygiene, safety and standards
- COVID-19 Incidents
- Criminal Investigation and Prosecution Team
- Exception reports for Approved Assurance Schemes
- External complaints against the FSA
- Evidence Package Tracker
- Evidence Portfolio including Strategic Evidence Fund
- Feed Registrations and Approvals Lists
- Food and feed importers
- Food and You Survey
- Food chain information
- Food contact materials
- Food Hygiene Rating Scheme
- Food incidents
- Freedom of Information and Environmental Information requests
- Guest User Access
- Policy development records for meat hygiene
- Private Office correspondence
- Procurement contracts
- Procurement tenders
- Records from GM research programmes
- Register a food business
- Register a food business support service for Local Authorities
- Registering as a milk production holding
- Register of Specialists
- Regulating Our Future Newsletter
- Reporting a food problem
- Research participants
- Science Council
- Shellfish sanitary survey data
- Stakeholder contact information
- Stakeholder contact information in Northern Ireland
- Temporary Certificate of Competence and Certificate of Competence
- UK Food Surveillance System
- UK Wine Producers
- Users Registering for Access to FSA Dashboards
- Welsh Food Advisory Committee
- Welsh language services