CICA Privacy Notice

Purpose

This privacy notice setstells outyou:

• what thewe standardswill thatdo with your personal information
• how you can expectget froma thecopy Criminalof Injuriesyour Compensationpersonal Authorityinformation
• what (CICA)you whencan wedo requestif oryou holdhave any concerns about our use of your personal datainformation

Who (‘personalwe information’)are aboutand you;what howwe youdo

CICA canis getan accessExecutive toAgency aof copythe Ministry of yourJustice. personalWe information;collect and whatprocess youpersonal candata dofor ifthe youpurposes thinkof administering the standardsCriminal areInjuries notCompensation beingSchemes, met.

Whothe weVictims are

CICA dealsis withthe data controller for the personal information we hold. Under the Criminal Injuries Compensation Schemes, we receive and determine compensation claims from people who have been physically or mentally injured in England, Wales,Wales andor Scotland asby a result of violent crime.

OurUnder rolethe isVictims toof administerOverseas theTerrorism CriminalCompensation InjuriesScheme, Compensationwe Schemereceive and providedetermine acompensation serviceclaims thatfrom ispeople sensitivewho inhave dealingbeen withphysically applicants,or fairmentally injured overseas in decidinga applicationsterrorist incident.

Under the Hardship Fund, we receive and efficientdetermine inclaims managingfrom alllow cases.

CICApaid isworkers thewho dataare controllertemporarily forunable theto personalwork informationdue weto hold.a Ourviolent Datacrime Protectionin OfficerEngland isor theWales, personand responsiblewhose forinjuries ensuringdo wenot complyfall withwithin ourthe dataCriminal protectionInjuries obligations.Compensation Scheme.

About personal information

‘PersonalRead information’more is information about youthe asCriminal anInjuries individual.Compensation ItSchemes, canVictims beof yourOverseas name,Terrorism addressCompensation orScheme telephoneand number.the ItHardship canFund.

About alsopersonal includeinformation

‘Personal information’ is information about youryou criminalas injuriesan compensationindividual. application. We know how important it is to protect customers’your privacy and to comply with data protection laws. We will safeguard your personal information and will only disclose it where it is lawful to do so, or with your consent.so.

Types of personal information we process

We only process personal information that is relevant to the servicesexercise weof areour providingfunctions. toThis you. Whencan weinclude:

• your receivename, aaddress newand claimcontact wedetails
• your makedate upof anbirth
• information electronicabout file.the Thisincident normallyin containswhich informationyou relatingwere toinjured
• information about your identity,injuries and their impact (health information)
• criminal offence data about any othercriminal individualsconvictions involvedyou inmay thehave
• financial applicationinformation about your earnings (if you are claiming loss of earnings) and theother detailsexpenses you have incurred due to your injuries
• photographs of theyour incidentinjuries providedand invideo therecordings application(for form.example, WeCCTV contactfootage of the policeincident)
• your toidentification documents
• payment details (including card or bank information)

We may obtain information aboutfrom theyou incident(or andyour criminalrepresentative convictionsif you have andone), healththe professionalspolice, for medical informationpractitioners relatingand other third parties in order to assess your claim.application.

Purpose of processing and the lawful basis for the process

WeUnder willdata useprotection thelaw, personalwe informationmust wehave collecta only‘lawful basis’ for thecollecting purposeand using your personal information. There is a list of processingpossible yourlawful application,bases toin checkthe UK General Data Protection Regulation. You can find out more about what is a lawful basis on the levelInformation ofCommissioner’s serviceOffice website.              

The lawful basis we providerely andon asmay requiredaffect byyour law.data Weprotection dorights compilewhich andare publishdescribed statisticsfurther showingbelow. generalYou information,can butfind notout inmore aabout formyour data protection rights and the exemptions which identifiesmay anyone.apply on the Information Commissioner’s Office website.

WhenOur anlawful applicationbasis for processing personal information is madethe weperformance willof requirea youpublic task, which is to confirmadminister the Compensation Schemes and the Hardship Fund. This means we have to collect and use your understandinginformation thatto carry out a task laid down in law, which the law intends to be performed by an organisation such as ours.

The extent to which we need to share and obtain your personal information will be shareddetermined on a case-by-case basis according to enablewhat usis reasonably necessary to determine your claim. As consent is not the lawful basis on which we process your claimpersonal andinformation, complyyou withcannot ourwithdraw legalyour obligations.consent Weto havethe aprocessing legalof obligationpersonal information if you wish to dealcontinue with claimsyour claim. However, you can withdraw your claim at any time before payment is made and, in accordancethose withcircumstances, ruleswe ofwill only retain the Criminalsmall Injuriesamount Compensationof Scheme.personal Thisinformation requiresdescribed usin tothe sharesection below titled ‘Storing your information’. 

We will use the personal information withwe somecollect otheronly peoplefor andthe organisationspurpose soof thatprocessing applicationsyour canapplication, beto properlycheck investigatedon the level of service we provide and assessed.as otherwise required by law. We compile and publish statistics showing general information but not in a form which identifies anyone.

Who the information may be shared with

We need to share the personal information we process with you and with other organisations. Where this is necessary we will comply with all aspects of the data protection laws.law. As well as members of our own staff, we have to disclose your identity and details of your application to the police and/or(and, in some cases, prosecuting authoritiesauthorities) to obtain information we need to assess the application. This will include obtaininggetting details of any criminal convictions held by you.

We will usually also have to disclose your identity and some application details to your doctor or other health professionals and obtain from them sufficient evidence of your injuries to allow us to assess what level of compensation should be awarded.

In someThis circumstancescan weinclude maymedical needrecords tofrom shareyour detailsGP and/or other treating practitioners and the commission of yourexpert applicationmedical withor otherpsychological thirdreports. parties,In suchmost ascases youryou employer,will DWP,be HMRC,expected orto otherprovide relevantthis governmentevidence orbut localin authoritysome agency.circumstances Ifwe youmay contactobtain usit ason ayour resultbehalf.

We ofmay beingalso aneed victimto share details of violentyour crimeapplication occurringwith inother anthird EUparties, country,such onas request,your weemployer, mayDepartment passfor yourWork detailsand onPensions, toHM theRevenue equivalent& EUCustoms, compensationor authority.another relevant government department, local authority, or agency. We may also use Fraudfraud Preventionprevention Agenciesagencies for the purposes of verifying your identity and preventing crime, fraud and money laundering. Such disclosures will be made in accordance with current data protection laws.law.

Storing your information

We will keep personal information contained in our case files in line with our retention policy. This means that information relating to an application will be retained for a designated number of years from the date of closure. The precise length of time depends on the nature of the application. Routine case files will normally be held for 3 years from the date the application is finalised or, if the application relates to a child, until the child turns 21.

Our Caseslegal involvingfunctions arequire seriousus injuryto willretain normallysome bepersonal heldinformation foron 7each yearsapplication frombeyond the datedestruction thedate. applicationThis is finalised.necessary Weso needthat towe docan thisidentify duplicate applications, prevent fraud, and assess any request that is made to complyre-open withan ourapplication statutoryon obligationsmedical evengrounds ifor youwhere dothe notapplicant givehas yoursubsequently consent. Ourdied businessof requirestheir usinjuries. toThe data we retain aincludes smallyour amountname, address, date of personalbirth, informationincident ondate, eachcase applicationreference beyondand thecase destructionoutcome. date.As Thisour lawful basis is forthe fraudperformance preventionof a public task, the right to erasure does not apply and inwe caseare aunable requestto isdestroy madethis information.

Our telephone service

We offer a telephone service to re-openthose anwho applicationwant onto medicalapply grounds.over Wethe willphone retainor personaltell informationus inabout a securedevelopment environmentin their claim. Telephone calls to our Customer Support Team are recorded and accesskept for 120 days. Call recordings may be used for monitoring and staff training purposes during that period.

If you have an existing claim, we will add a written summary of the telephone call to your case file where it will be madestored onlyin whereline requiredwith forour retention policy described above.

We may also seek user feedback to help us develop our statutorytelephone purposes.service.

How our digital service uses cookies

Cookies are files saved on your phone, tablet or computer when you visit a website. When you use the service, we’ll set a cookie to remember your progress through this site. This cookie does not store your personal data.

The cookie is deleted when you:

• Submitsubmit your application
• Dodo not interact with the service for 30 minutes
• Closeclose your browser window

We also use cookies to:

• Helpstore your PC or digital device connect with us quicker
• Store information, if you create a user account
• Measuremeasure how you use our service,service so we can update and improve it
• Makemake sure we do not keep showing you the same notifications
• Protectprotect your security,security by stopping sites that pretend to be GOV.UK services from gathering your information

You can read more about about how cookies are used You and can read about how to manage cookies.

Access

Your todata personalprotection information

YouUnder candata findprotection outlaw, ifyou wehave holdrights anyincluding:

• Your personalright informationof aboutaccess you– byYou makinghave athe ‘subjectright accessto request’.ask Youus canfor findcopies outof moreyour aboutpersonal thisinformation.

• Your onright ourto guidancerectification page,– RequestYou yourhave personalthe dataright fromto CICA.

  When we ask youus forto rectify personal information

  We promiseyou think is inaccurate. You also have the right to informask us to complete information you whythink weis needincomplete.

• Your yourright personalto informationrestriction andof askprocessing only– forYou have the personalright informationto weask needus andto notrestrict collectthe informationprocessing thatof isyour irrelevantpersonal orinformation excessive.in Youcertain can:circumstances.

  • Make

    Your aright requestto object to seeprocessing all– theYou personalhave informationthe weright holdto onobject youto atthe anyprocessing time

  • Protectof your personal information andin makecertain surecircumstances.

  The noright unauthorisedto personerasure hasdoes accessnot toapply it

• Makebecause sureour welawful onlybasis sharefor processing your personal information withis otherthe organisationsperformance forof legitimatea purposes where appropriatepublic andtask. necessary
• AskWe uswill toconsider transferrequests yourfor dataerasure toon anothera organisationcase-by-case ofbasis yourbut choosing
• Adhereit towill ournot retentiongenerally policybe possible to makeerase sureall we don’t keep your personal information longerfor thanthe isreasons necessary
• Makedescribed surein thatthe wesection doabove nottitled make‘Storing your personalinformation’.

  You informationare availablenot forgenerally commercialrequired useto withoutpay a charge for exercising your consent

• Makerights. aIn requestrare tocases, correct,we stopmay processingcharge ora erasereasonable yourfee personalfor information
• Lodgeadministration costs if a complaintrequest withis themanifestly supervisoryunfounded authorityor ifexcessive. If you considermake youra personalrequest, informationwe hashave beenone handledmonth incorrectly.

YouRequest canyour getpersonal moredata detailsfrom on:CICA.

• Agreements

  When we haveask withyou other organisations for sharingpersonal information

• Circumstances

  We wherepromise weto cantell passyou onwhy we need your personal information withoutand tellingask you,only for example,the topersonal helpinformation withwe theneed preventionand ornot detectioncollect ofinformation crimethat oris toirrelevant produceor anonymisedexcessive. statistics

• OurWe instructionswill tonot staffshare onyour howpersonal toinformation collect,for commercial use or deleteany yourpurpose personalother information
• Howthan wethe checkadministration thatof the informationCompensation weSchemes, holdHardship isFund accurate and up-to-date

How to contact us to ask a question

If you have any queriesquestions about the above issues or how your personal information is handledhandled, you can contact us at:

Email: SAR@cica.gov.ukEmail: governance@cica.gov.uk

Telephone: 0300 003 3601

Outside the UK: +44 (0) 203 684 2517

Relay UK (if (if you cannot hear or speak on the phone): 18001 0300 003 3 601

Find out about call charges

Complaints

When we ask you for information, we will keep to the law. If you consider that your personal information has been handled incorrectly, please get in touch with us so we can seek to resolve your concerns. This does not affect your right to make a complaint to us.us.  

You can also contact the Information CommissionerCommissioner’s Office for independent advice about data protection.protection or to make a complaint if you are unhappy about how we have handled your personal information. You can contact the Information CommissionerCommissioner’s Office at:

Tel:Telephone: 0303 123 1113

www.ico.org.uk