The Food Standards Agency will be what is known as the ‘Controller’ of the personal data provided to us.
Purpose and lawful basis for processing
We need to collect this information for delivering our duty of care to protect our employees and contractors from risks to their health, safety and welfare/wellbeing.
We do this to comply with our legal obligation under health and safety legislation. We will not collect any personal data from you which we do not need.
Providing us with this information is a statutory requirement and failure to provide the information could result in the Agency failing to deliver its non-delegable duty as an employer under Health and Safety Legislation.
How and where we store your data and who we may share it with
We retain personal information only for as long as necessary to carry out these statutory functions and in line with our retention policy. This means that this information will be retained from receipt for 40 years with regards to health surveillance results data and 3 years from receipt with regards to data associated with health and safety incidents (near misses, accidents with injury, occupational disease and bullying/harassment).
For more information on How and where we store your data and who we may share it with see our Personal Information Charter.
For more information on international transfers, please see the International transfers section in our Personal Information Charter.
For more information on EU Citizens Privacy Notice, please see the EU citizens section in our Personal Information Charter.
For more information on your rights, please see the Your rights section in our Personal Information Charter.
If you have any queries concerning this Privacy Notice, your personal information or any questions on our use of the information, please email our Data Protection Officer in the FSA, who is the