Privacy notice for the asbestos management assurance process

Who we are

This data collection is run by the capital strategy and intelligence division, which is a part of the Department for Education (DfE). For the purpose of data protection legislation, the DfE is the data controller for the personal data processed.

How we use your information

We receive your personal data from the online form you complete. We collect your data so that we can: The aim for this service is to understand how many schools have asbestos and to provide the required information about asbestos management to the appropriate schools.

The nature of your personal data we will be using

The categories of your personal data that we will be using for this service are:

Why our use of your personal data is lawful

In order for our use of your personal data to be lawful, we need to meet one (or more) conditions in the data protection legislation. For the purpose of this project, the relevant condition is article 6(1)(c) GDPR, to fulfil our legal obligation as part of our function as a department.

Who we will make your personal data available to

We do not share your personal data with any other organisations. Our reports on asbestos findings provide summary information about schools and we do not include your personal data in the reports.

Where we need to share data with others, we ensure that this data sharing complies with data protection legislation.

How long we keep your personal data

The DfE will keep your personal data while your organisation is active. We will delete your personal data after 24 months following closure of your organisation. This is in line with the department's retention policy for business operational data. We only keep the latest information on school and responsible body contacts and do not retain a history of contact changes.

Your data protection rights

More information about how the DfE handles personal information is published here:

Under the Data Protection Act 2018, you are entitled to ask if we hold information relating to you and ask for a copy, by making a 'subject access request'.

For further information and how to request your data, please use the 'contact form' in the Personal Information Charter at under the 'How to find out what personal information we hold about you' section.

If you need to contact us regarding any of the above, please do so via the DfE site at

Further information about your data protection rights appears on the Information Commissioner's website at

Contact Info

If you have any questions about how your personal information will be used, please contact us at and enter 'Asbestos Management Assurance Process' as a reference. For the Data Protection Officer (DPO) please contact us via and mark it for the attention of the 'DPO'.

Last updated

We may need to update this privacy notice periodically, so we recommend that you revisit this information from time to time. This version was last updated in February 2021.