DSIT Cyber Security Longitudinal Survey (Wave 5) Privacy NoticeÌý
Updated 20 May 2025
This notice sets out how we will process your personal data, and your rights. It is made under Articles 13 and/or 14 of the UK General Data Protection Regulation (UK GDPR).ÌýÌý
The Department for Science, Innovation and Technology (DSIT) helps to drive innovation that will deliver improved public services, create new better-paid jobs and grow the economy.Ìý
This Privacy Notice concerns the Cyber Security Longitudinal Survey Wave Four. The Cyber Security Longitudinal Survey surveys businesses and charities about their cyber security.ÌýÌý
The Cyber Security Longitudinal Survey is commissioned by the DSIT (“weâ€� and “usâ€�, “DSITâ€�). DSIT is the Controller for the personal information processed as part of this survey.ÌýÌý
Ipsos Ltd works on behalf of DSIT for the Cyber Security Longitudinal Survey as a data processor (to collect and process personal information). DSIT will not have access to any personal data. Ipsos’s Privacy Notices provide more information on how your personal data will be processed.Ìý
1. Your DataÌý
DSIT will not process any personal data. Information on personal data is provided by Ipsos, our data processor, in their Privacy Notices.
2. ±Ê³Ü°ù±è´Ç²õ±ðÌý
The purpose(s) for which Ipsos is processing your personal data is to conduct Wave 5 of the Cyber Security Longitudinal Survey (including an online/telephone survey and follow-up interviews). This research informs government policy on cyber security.Ìý
3. Legal basis of processingÌýÌý
The legal basis for processing your personal data under Article 6 of the UK GDPR is:ÌýÌý
1(a)Consent: You consent to the processing of your personal data for one or more specific purposes. Should you change your mind, you can withdraw consent at any time by seeing Ipsos’s Privacy Notices.ÌýÌý
4. ¸é±ð³Ù±ð²Ô³Ù¾±´Ç²ÔÌýÌý
DSIT will not receive or store any personal data. Our data processor, Ipsos, has provided information on retention of personal data in their Privacy Notices.Ìý
5. Your RightsÌý
You have the right to request information about how your personal data are processed, and to request a copy of that personal data.ÌýÌý
You have the right to request that any inaccuracies in your personal data are rectified without delay.ÌýÌý
You have the right to request that any incomplete personal data are completed, including by means of a supplementary statement.ÌýÌý
You have the right to request that your personal data are erased if there is no longer a justification for them to be processed.ÌýÌý
You have the right in certain circumstances (for example, where accuracy is contested) to request that the processing of your personal data is restricted.ÌýÌý
You have the right to object to the processing of your personal data where it is processed for direct marketing purposes.ÌýÌý
You have the right to withdraw consent to the processing of your personal data at any time.ÌýÌýÌýÌý
To exercise your rights please contact the Data Protection Officer using the contact details below.Ìý
6. Contact DetailsÌý
The data controller for your personal data is the Department for Science. Innovation and Technology (DSIT). You can contact the DSIT Data Protection Officer at:ÌýÌý
DSIT Data Protection Officer ÌýDepartment for Science, Innovation &Technology Ìý22-26 Whitehall ÌýLondon ÌýSW1A 2EGÌý
Email: [email protected]Ìý
If you are unhappy with the way we have handled your personal data, please write to the department’s Data Protection Officer in the first instance using the contact details above.ÌýÌý
7. ComplaintsÌý
If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an UK independent regulator.Ìý The Information Commissioner can be contacted at:ÌýÌý
Information Commissioner’s OfficeÌýWycliffe HouseÌýWater LaneÌýWilmslowÌýCheshireÌýSK9 5AFÌý
Telephone: 0303 123 1113Ìý
https://ico.org.uk/make-a-complaint/Ìý
Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.ÌýÌý
8. Updates to this noticeÌý
If this privacy notice changes in any way, we will place an updated version on this page. Regularly reviewing this page ensures you are always aware of what information we collect, how we use it, and under what circumstances we will share it with other parties. The ‘last updatedâ€� date at the bottom of this page will also change.Ìý
If these changes affect how your personal data is processed, we will take reasonable steps to let you know.Ìý
Last updated: 07/06/25.