GDPR Compliance Statement

1. Introduction

This privacy notice describes how we collect, use, and protect personal data when collecting information on UK roads. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA 2018), and other applicable data protection laws.

2. Data Controller

The data controller for road data collection is:

The Department for Transport (DfT) is also a data controller for certain road safety data.

3. Legal Basis for Processing

We process personal data under the following legal bases:

• Article 6(1)(e) UK GDPR: Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
• Article 9(2)(j) UK GDPR: Processing is necessary for archiving purposes in the public interest, or for scientific and historical research purposes or statistical purposes.
• Data Protection Act 2018: Compliance with legal obligations and public interest tasks.

4. Data We Collect

When collecting data on UK roads, we may collect the following types of information:

4.1 Location Data

• Accident location coordinates (eastings and northings)
• Postcode information
• Geo-location data

4.2 Demographic Data

• Age
• Gender

4.3 Vehicle Information

• Vehicle type and make
• Vehicle Registration Marks (VRM)
• Vehicle condition and damage

4.4 Injury Information

• Severity of injury (fatal, severe, slight)
• Type of injury
• Medical treatment required

4.5 Contributory Factors

• Speeding
• Alcohol or drug use
• Distracted driving
• Weather conditions
• Road conditions

5. Purpose of Data Collection

The data collected is used for the following purposes:

• Reporting road accident statistics
• Monitoring road safety trends
• Conducting research to improve road safety
• Supporting road improvement schemes and infrastructure planning
• Informing policy decisions to reduce road accidents
• Assisting police forces in tactical deployment
• Compliance with legal and regulatory obligations

6. Data Sharing

We may share personal data with:

• Police forces for accident investigation and enforcement
• Department for Transport (DfT) for statistical analysis
• Local authorities for road safety initiatives
• Research institutions for academic studies
• Other government agencies as required by law

All data sharing is conducted in compliance with UK GDPR and with appropriate security measures in place.

7. Data Retention

We retain personal data for as long as necessary to fulfill the purposes for which it was collected, including for compliance with legal and regulatory obligations. Data retention periods vary depending on the type of data and the purpose of processing.

Typical retention periods:

• Accident data: 10 years
• Statistical data: Indefinite (anonymised)
• Research data: 5-7 years

8. Your Rights

Under the UK GDPR, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data in certain circumstances
• Right to Restriction: Request restriction of processing
• Right to Data Portability: Request transfer of your data to another controller
• Right to Object: Object to processing in certain circumstances
• Right to Withdraw Consent: Withdraw consent where processing is based on consent

To exercise any of these rights, please contact our Data Protection Officer using the contact details below.

9. Data Security

We implement appropriate technical and organisational measures to protect personal data from:

• Unauthorised access or processing
• Loss, destruction, or damage
• Accidental disclosure or dissemination
• Other forms of misuse

Our security measures include:

• Encryption of data at rest and in transit
• Access controls and authentication
• Regular security assessments
• Staff training on data protection
• Incident response procedures

10. Data Protection Officer

Our Data Protection Officer can be contacted at:

11. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

12. Changes to This Notice

We may update this privacy notice from time to time. Any changes will be published on this page with an updated revision date. We recommend that you review this notice periodically for any updates.

13. Contact Us

For any questions about this privacy notice or our data processing activities, please contact us: