IEGS Privacy Notice
The Interim Environmental Governance Secretariat (IEGS) is a non-statutory body that has come into being to prepare the way for the Office of Environmental Protection under the terms of the Environmental Bill. IEGS has a duty to protect the public funds it administers, and to this end may use the information provided by its customers and suppliers for the prevention and detection of fraud. It may also share this information with other bodies responsible for auditing or administering public funds for these purposes.
One of the functions of the IEGS is to replace the former role of European Commission in receiving complaints of where public authorities have not complied with environmental law. We process personal information in relation to this task which is in the public interest. Where this is the case, we do not need your consent.
To help us investigate these complaints, you may need to give us further information about how this has affected you. This may include health information. We ask that you do not provide this type of information if it is not necessary for your complaint to be investigated. Health information is defined by GDPR as “special category personal data” which means personal data relating to, for example, a living person’s racial or ethnic origin, genetic data, biometric data or data concerning health. Special categories of particularly sensitive personal information need more careful handling. We need to have further justification for collecting, storing and using this type of personal information.
The legal basis for processing your sensitive personal data is that it is necessary for reasons of substantial public interest for the exercise of a function of the Crown, a Minister of the Crown, or a government department; the exercise of a function conferred on a person by an enactment; the exercise of a function of either House of Parliament; or the administration of justice; and an appropriate policy document is in place. IEGS considers complaints where damage to the natural environment or to human health may have been caused.
We try to ensure that we only collect the minimum personal data necessary for us to offer the service to you.
The legal basis for collecting IP addresses, and hostnames of website users or any non-essential cookies is your consent.
Purpose of this Privacy Notice
If you have a complaint about a matter in England, or a reserved UK-wide issue, IEGS will be handling your information in line with this Privacy Notice.
This notice is provided within the context of the changes required by the Articles 13 and 14 of EU General Data Protection Regulation (GDPR) 2016 and the Data Protection Act 2018 (DPA). This notice sets out how we will use your personal data as part of our legal obligations with regards to Data Protection.
DEFRA’s personal information charter explains how we deal with your information. It also explains how you can ask to view, change or remove your information from our databases.
If you have a complaint about a matter in Northern Ireland, the IEGS will also be handling your information. Therefore, we may need to share your personal data with the Department of Agriculture, Environment and Rural Affairs (DAERA).
DAERA takes data protection, freedom of information and environmental information issues seriously. It takes care to ensure that any personal information received from you is dealt with in a way which complies with the requirements of the General Data Protection Regulation. This means that any personal information you supply will be processed principally for the purpose for which it has been provided. However, the Department is under a duty to protect the public funds it administers, and to this end may use the information you have provided for this purpose.
A full copy of the DAERA Privacy Statement can be found here.
Who is collecting your data?
The IEGS is collecting your data. The IEGS is a team within DEFRA. It has been set up to receive complaints about environmental law against public authorities during the period between the end of the transition period and when the Office for Environmental Protection (OEP) becomes operational.
This is a specific privacy notice on the processing of your personal data as part of your complaint. It is being processed as necessary for the performance of a task in the public interest. The data will be collected and processed towards the administration of a complaint against a public authority which the complainant believes to be in breach of environmental law. This is being done to ensure appropriate monitoring and collection of data about potential environmental law breaches.
In order to provide these services, we may need to process some personal data, including:
- your name, postal address(es), email address(es) and telephone number(s)
- the nature of your complaint
- details of the public authority you are complaining about
- general correspondence, questions, queries or feedback
- telephone messages
- your Internet Protocol (IP) address, and details of which version of web browser you use
- information on how you use the site, using cookies and analytics
We are allowed to process your data because we have official authority as part of the UK government department responsible for safeguarding our natural environment. The legal basis for processing the data is to perform a task in the public interest that is being set out in law.
If you do not give us the data, we may not be able to provide a service to you or be able to respond to any complaints or enquiries you may have.
What personal data we collect and how long do we keep it (data retention policy)
What we collect
- Personal information you supply when submitting a complaint about a potential breach of environmental law by a public authority
- Any details you supply when you contact us by e-mail, post, telephone or the 'contact us' form on our website
- IP addresses and hostnames of website users
- Sensitive personal information including information about your health (special category data)
Why we collect it
- So we can contact you to find out more information, and so we can update you about your complaint
- So we can respond to your enquiry
- So that we can maintain statistics on use of our website
- We may collect this to help understand the potential health impacts linked to your complaint
- It is necessary for us to process your personal data to perform a task in the public interest
- To perform a task in the public interest
- The legal basis for processing IP addresses and hostnames of website users or any non-essential cookies is your consent
- The legal basis for collecting and using the data are Articles 9 (2)(g) of the General Data Protection Regulation (2016) and Schedule 1, Part 2 (6) of the Data Protection Act (2018).
How long do we keep the data
- Potentially for up to 5 years. Also refer to notes below*
- Contact details will be retained until individuals unsubscribe or object to receiving communications, or until the service is terminated, whichever is sooner
- 5 years after case closure
Sharing your information/Who can see your data
Receiving complaints concerning environmental law is in the public interest, and the IEGS is an official authority.
Your information will be shared with the public authority you are complaining about (where it is necessary to determine that your complaint has first been processed through their internal procedure) and may be shared with other public authorities suspected of committing breaches of environmental law linked to the breach you have complained about. Your information may also be shared with our external service providers (where we have outsourced the service). We will also share your information with the OEP or any other successor body to IEGS. We may share your complaint with Government Ministers and Secretaries of State and their officials for the purpose of identifying systemic issues or to ensure protection of people and the environment in urgent cases.
In addition, when cases are closed and it is appropriate to do so, information may be sent to The National Archives for storage.
We may have to release information (including personal data and commercial information) where required by law, including under the following legislation:
- General Data Protection Regulation (GDPR)
- UK Data Protection Act 2018
- Freedom of Information Act 2000
- Environmental Information Regulations 2004
We will not allow any unwarranted breach of confidentiality and we will not act in contravention of our obligations under UK data protection legislation.
How long do we keep your information?
All information within the IEGS is held in accordance with DEFRA’s retention policy. When you submit a complaint about a public authority failing to comply with environmental law, the information you supply to the IEGS will be retained for the duration of processing the complaint and any subsequent proceedings arising. This could be for up to approximately *5 years, based on the timings of the prior process administrated by the EU.
Once your complaint and any related complaints are resolved, your personal data will be deleted after the relevant timescales outlined above. Information relating to the complaint will be retained for statistical purposes.
In specific circumstances information may be held for longer periods. Examples include:
- to allow auditing of complaint activity
- for legal processes e.g. enforcement, a pending court case
- if it sets a precedent
- for scientific or historical research purposes
- to enable identification of connected, widespread or systemic breaches of environmental law
- to allow the OEP to meet its legal obligations under the Environment Bill (once enacted)
- to meet obligations under the Public Records Act 1958
Where are your data processed and stored?
We transfer your data through our secure severs. The data will not be transferred outside the United Kingdom or European Union.
Why you need to create a set of sign-in details
We ask you to create a single set of sign-in details to save you time and to support the administration of the system. You will be able to use them to register with and access IEGS's online complaints handling system. We will store basic information about you so that you do not have to re-enter the information each time you want our services.
Your information will be shared with all the administrators associated with your account in order for them to manage access.
You have the right to request:
- information about the processing of your personal data
- a copy of your personal data
- that any inaccuracies in your personal data be rectified without delay
- the completion of any incomplete personal data, including by means of a supplementary statement
- that your personal data be erased if there is no longer a justification for processing the data
- in certain circumstances (for example, where accuracy is contested) that the processing of your personal data be restricted.
Where the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller (such as the exercise of a function of the Crown, a Minister of the Crown, or a government department, the exercise of a function conferred on a person by an enactment, the exercise of a function of either House of Parliament or the administration of justice) you have the right to object to the processing of your personal data.
Your right of access
You have the right to ask us for a copy of the personal information we hold about you. This is known as a subject access request. To make a request please contact our Data Protection Officer, whose details can be found below.
Your right to rectification
You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to be forgotten
You have the right to ask us to erase your personal information in certain circumstances. This could prevent us from administering your complaint.
Your right to object to processing
You have the right to object to us processing (using) your information at any time.
Your right to data portability
You have the right to ask that we transfer the information you gave us from one organisation to another or give it to you. The right only applies if we are processing information based on your consent.
You are not required to pay any charge for exercising your rights. We have one month to respond to you.
Where you have consented to us contacting you, you always have the right to withdraw your consent. The easiest way is to click on the unsubscribe link that is included in all communications, but you can also contact us at any time to ask us not to send you communications.
Contact details for Defra
The contact details for the data controller's Data Protection Officer (DPO) are:Department for the Environment, Food and Rural Affairs
2 Marsham Street
Contact details for DAERA
The contact details for the data controller's Data Protection Officer (DPO) are:Ballykelly House,
111 Ballykelly Road,
If you are not satisfied by the result of this process, any individual can complain to the Information Commissioner if they believe the IEGS has failed to properly protect their personal information, or to comply with these rights. The Information Commissioner can be contacted as follows:
If you have a complaint about the way we operate or the services we provide, or generally are unhappy about any of our processes, we would like to hear from you. In the first instance please contact the IEGS team.
If you wish to make a formal, written complaint you should send it in writing to the Defra Service Standards Adjudicator by post or email using the contact details below:Department of Agriculture, Environment and Rural Affairs
17 Smith Square
You can get further information on Defra’s complaints procedure at: https://www.gov.uk/government/organisations/department-for-environment-food-rural-affairs/about/complaints-procedure