The Clerk of the Parliaments is the controller for the House of Lords Administration.
For information about Members of the House of Lords' responsibilities under data protection legislation see here.
Right to be informed
You have the right to be informed about the collection and use of your personal data. Information about how we process your personal data can be found in the following privacy notices.
Right of access to your personal data
You have the right to obtain:
- confirmation that your personal data are being processed by us;
- access to your personal data; and
- other supplementary information including:
- the purposes of the processing,
- categories of data,
- categories of any recipients to whom your personal data have been or will be disclosed,
- the time period for which your data will be retained,
- details of other rights set out below.
Right to rectification
You are entitled to have your personal data held by us rectified if it is inaccurate or incomplete.
Right to erasure
You can request the deletion or removal of your personal data where there is no compelling reason for its continued processing.
This right is not absolute and only applies in certain circumstances. For example, the right of erasure does not apply where the processing is necessary for:
- the performance of a task carried out in the public interest
- compliance with a legal obligation
- archiving purposes
- the establishment, exercise or defence of legal claims
Right to restrict processing
You have a right to request the restriction or suppression of the processing of your personal data (in other words, that we should process the data only for certain purposes or that we stop processing it altogether).
This is not an absolute right and only applies in certain circumstances:
- You are contesting the accuracy of your personal data and we are verifying the accuracy of the data at the time of your request for restriction of processing;
- You believe that your data has been unlawfully processed (i.e. in breach of the lawfulness requirement of the first principle of the GDPR) and you do not wish us to erase your data instead;
- We no longer need your personal data but you need us to keep it in order to establish, exercise or defend a legal claim; or
- You have objected to us processing your data under your right to object and we are considering whether our legitimate grounds override yours.
Right to data portability
You have the right to receive your personal data in a structured, commonly used and machine-readable format and to have the right to transmit that data to another controller.
You have a right to data portability of your personal data if all of the following circumstances apply:
- You have provided your personal data to us;
- We are processing your personal data on the basis of your consent or for the performance of a contract; and
Right to object
Individuals have the right to object on the grounds of their particular situation to:
- processing based on legitimate interests or the performance of a task in the public interest;
- direct marketing (including profiling where undertaken by an organisation); and processing for purposes of scientific/historical research and statistics.
Individuals have the right not to be subject to a decision based solely on automated processing, including processing. The House of Lords Administration does not make decisions affecting individuals based solely on automated processing.
Exercising your rights
If you would like to exercise one or more of the rights referred to above, you may send a request in writing to:
The Data Protection Officer,
Clerk of the Parliaments’ Office,
House of Lords,
London SW1A 0PW Or by email to Holinfocompliance@parliament.uk
Alternatively, you may make a request verbally by telephoning the Information Compliance Team on 020 7219 0100/8481.
What happens next?
If we need to confirm the identity of the individual making the request we will ask for more information. We will do this as soon as possible after receiving the request. We will only ask for additional information that is necessary to confirm your identity. The period for responding to a request begins once we have received the additional information.
We may also need to ask for more information to clarify a request. We will do this as soon as possible after receiving the request.
Once we have received your request and have, if necessary, confirmed your identity, we will respond within one month. This period may be extended by two further months where necessary, taking into account the complexity and number of requests. We will inform you of any such extension within one month of receipt and explain why the extension is necessary.
Where your request is manifestly unfounded or excessive, we may either charge a reasonable fee taking into account the administrative costs of providing the information or refuse to respond at all. If the request is for access to your personal data, we may also make a reasonable charge for providing more than one copy of the data.
The rights listed above are subject to certain exceptions. Note in particular that we may refuse a request on the ground that complying with it would infringe Parliamentary privilege. This could apply, for example, where you asked to erase a record of something said about you during a Parliamentary debate.
Where we decline your request, we will explain our reasons and inform you of your right to complain to the Information Commissioner’s Office and your right to apply to a court for an order requiring us to comply with the data rights set out above.