From 5e983c900c55c59cddfc5220d8b9e8087986b9e1 Mon Sep 17 00:00:00 2001 From: Thomas Leese Date: Fri, 23 Aug 2024 08:03:24 +0100 Subject: [PATCH 1/2] Update links to privacy policy We'll be switching to a DfE-wide privacy policy that covers our service so we don't need to have one specific to the service anymore. --- app/lib/consent_letter.rb | 3 +- app/views/shared/_footer.html.erb | 2 +- app/views/static/privacy.md | 198 ------------------ .../application_forms/edit.html.erb | 2 +- .../reference_requests/edit.html.erb | 2 +- config/routes.rb | 1 - config/sitemap.rb | 1 - public/sitemap.xml | 2 +- 8 files changed, 6 insertions(+), 205 deletions(-) delete mode 100644 app/views/static/privacy.md diff --git a/app/lib/consent_letter.rb b/app/lib/consent_letter.rb index 5d12a9142f..0b60b9ab62 100644 --- a/app/lib/consent_letter.rb +++ b/app/lib/consent_letter.rb @@ -20,7 +20,8 @@ def render_pdf LINE_PAD = 12 SECTION_PAD = 48 - PRIVACY_URL = "https://apply-for-qts-in-england.education.gov.uk/privacy" + PRIVACY_URL = + "https://www.gov.uk/government/organisations/department-for-education/about/personal-information-charter" def document @document ||= diff --git a/app/views/shared/_footer.html.erb b/app/views/shared/_footer.html.erb index fe7c2fa161..6d0e02ea65 100644 --- a/app/views/shared/_footer.html.erb +++ b/app/views/shared/_footer.html.erb @@ -3,7 +3,7 @@ meta_items: { "Accessibility" => main_app.accessibility_path, "Cookies" => main_app.cookies_path, - "Privacy" => main_app.privacy_path + "Privacy" => "https://www.gov.uk/government/organisations/department-for-education/about/personal-information-charter" }) do |footer| %> <% if current_teacher %> <% footer.with_navigation do %> diff --git a/app/views/static/privacy.md b/app/views/static/privacy.md deleted file mode 100644 index 2ee7437f27..0000000000 --- a/app/views/static/privacy.md +++ /dev/null @@ -1,198 +0,0 @@ -<% content_for :page_title, 'Privacy notice' %> - -# Service privacy notice - -## Who we are - -The <%= t(current_namespace, scope: %i[service name]) %> service is run by the [Teaching Regulation Agency -(TRA)](https://www.gov.uk/government/organisations/teaching-regulation-agency/about), -an executive agency of the Department for Education (DfE). - -Our service allows anyone to check whether they might be eligible to receive qualified teacher status (QTS) in England. - -If you’re eligible, you can then use the service to make an application to receive qualified teacher status (QTS) in England. - -For the purpose of data protection legislation, DfE is the data controller for -the data we hold and process. - -## Why our use of your personal data is lawful - -For our use of your personal data to be lawful, we need to meet one (or more) conditions in the data protection legislation. - -For Apply for QTS in England we rely on: - -- article 6(1)(e) UK General Data Protection Regulation (UK GDPR), to perform a public task carried out in the public interest as part of our function as a department -- article 9(2)(g) UK GDPR reasons of substantial public interest (with a basis in law) -- schedule 1(18) Data Protection Act 2018 (DPA 2018) - -## The personal data we collect and how we collect it - -### The data we collect when we check if you’re eligible to apply - -We do not collect any personal data about you when you check if you’re eligible to apply. - -### The data we collect when you make an application for QTS in England - -We collect a range of data to assess whether you can be awarded QTS in England: - -- first name -- last name -- any previous names (if required) -- date of birth -- copies of documents that confirm your identity such as your passport, driving licence and national identity documents -- documents that confirm that your name has changed (where appropriate) -- email address -- details of your qualifications and copies of documents that confirm these -- proof of your professional standing as a teacher in the country where you’re recognised -- your work history as a teacher - -## The data we collect when you confirm the work history of an applicant - -If a candidate says that you can confirm their work history, they’ll tell us: - -- your name -- your email address -- your place of work - -## How we use your data - -### Processing applications - -Processing applications includes: - -- reviewing your personal data to make a decision about your application for QTS -- reviewing any further information that is requested from you -- getting in touch with school leaders you’ve named, to confirm your work history -- getting in touch if there’s a security issue concerning your data -- getting in touch with you to ask if you'd like to participate in user research -- analysing application and service usage data - -### Safeguarding and fraud - -To safeguard children and detect fraudulent activity on our services, it may be necessary to share information about you with relevant organisations. - -For example, we may need to share information about you with government departments, local authorities, law enforcement agencies, or competent authorities. - -This list is not exhaustive, as it depends on the type of information we receive about you. - -### Processing references - -Processing references includes: - -- getting in touch if there’s a security issue concerning your data -- getting in touch with you to ask if you'd like to participate in user research -- getting in touch with you about your reference -- analysing reference and service usage data - -### If you're awarded QTS - -If you’re awarded qualified teacher status, you’ll be added to the database of registered teachers in England. Your data is then subject to the [privacy policy](https://teacherservices.education.gov.uk/Resources/Guidance/SelfServiceDataSharingGuidance.pdf) of that service. This will be a permanent record. - -They'll add the following data to the database of qualified teachers: - -- first name -- last name -- date of birth -- email address -- details of your qualifications and training -- your teacher status - -## Building a better QTS application process - -We use some user data to improve our services. For example, we’ll look at any feedback you give us about our services so we can improve them. - -We may contact you to ask if you’d like to participate in user research. This helps us improve our services and policies. You do not have to participate, and choosing to participate or not will not affect your application in any way. - -## Getting insight to make government policy better - -We’ll analyse your data to help us inform government policy around teacher recognition, recruitment and retention. When we do, we’ll anonymise your personal information so you cannot be identified. - -## How long we keep your data - -|

Usage

|

Retention Period

| -| ----------------------------------------------------------- | -------------------------------- | -| Who has checked their eligibility and what outcome they got | 2 years | -| Application form | 5 years | -| The database of qualified teachers | The active lifetime of a teacher | -| If you email us to ask us for help | 6 months | - -## Who we share your data with - -We need to share personal data for the purpose of awarding QTS. - -### Sharing applicant data with people who can confirm teaching work history - -We share applicant data with people who can confirm their work history as a teacher, to help them identify these applicants. - -The data we share includes: - -- the applicant’s name -- date of birth -- any identifying reference or registration numbers -- the employment details that the applicant has shared with us - -### Sharing applicant data with organisations that can confirm teaching qualifications or professional standing as a teacher - -We share applicant data with organisations that can validate applicant qualifications or professional standing as a teacher. - -This could include: - -- relevant teaching regulators -- academic awarding institutions (including universities and teacher training bodies) - -This includes: - -- the applicant’s name -- date of birth -- any identifying reference or registration numbers -- the qualification or professional standing details that the applicant has shared with us - -### External organisations who process data - -We share data with our data processors for the purposes of providing this service. Data protection agreements are in place with each of these processors and they’re required to comply with the UK GDPR and the DPA 2018 as data processors. - -## Your rights - -Under the DPA 2018 and the UK GDPR, you have the right to find out what data we have about you. However, your rights are conditional on the lawful basis under which your data is being processed. Our lawful basis is public task, which grants you the following rights: - -- being informed about how your data is being used -- accessing personal data -- having incorrect data corrected -- restricting the processing of your data (for example where the data is inaccurate or outdated) -- objecting to how your data is processed in certain circumstances, including automated processing and profiling - -If you have any questions about how we’ll use your personal information, -email [qts.enquiries@education.gov.uk](mailto:qts.enquiries@education.gov.uk) -and enter ‘Data protection enquiry’ as a reference. - -You can also contact the Data Protection Office by emailing -[dataprotection.office@education.gov.uk](mailto:dataprotection.office@education.gov.uk). - -You can find further information about your data protection rights on -the [Information Commissioner’s -website](https://ico.org.uk/for-organisations/guide-to-data-protection/principle-6-rights/). - -### Consent and how to make a complaint - -As we have a clear purpose for processing your personal data, we would not -explicitly seek your consent to process your data. - -If you’re unhappy with our use of your personal data, please -email [qts.enquiries@education.gov.uk](mailto:qts.enquiries@education.gov.uk). - -You can also contact the DfE Data Protection Office: - -Deputy Director, Departmental Data Protection Officer
-Wellington Place
-Leeds
-LS1 4AP
-[data.protection@education.gov.uk](mailto:data.protection@education.gov.uk) - -Alternatively, you have the right to raise any concerns with the [Information -Commissioner’s Office (ICO)](https://ico.org.uk/concerns/). - -## Keeping our privacy notice up to date - -We’ll update this privacy notice when required. You should review it at least once a year. - -This version was last updated on 7 November 2022 diff --git a/app/views/teacher_interface/application_forms/edit.html.erb b/app/views/teacher_interface/application_forms/edit.html.erb index 4d5bbc5cf9..0b0111525f 100644 --- a/app/views/teacher_interface/application_forms/edit.html.erb +++ b/app/views/teacher_interface/application_forms/edit.html.erb @@ -44,7 +44,7 @@ <%= f.govuk_error_summary %>

How we handle your data

-

You can read about the data we collect from you, how we use it and how it’s stored, in our <%= govuk_link_to "privacy policy", privacy_path %>.

+

You can read about the data we collect from you, how we use it and how it’s stored, in our <%= govuk_link_to "privacy policy", "https://www.gov.uk/government/organisations/department-for-education/about/personal-information-charter" %>.

<%= f.govuk_check_boxes_fieldset :confirmed_no_sanctions, legend: { text: "About sanctions and restrictions", tag: "h2", size: "m" }, small: true do %> <%= f.govuk_check_box :confirmed_no_sanctions, diff --git a/app/views/teacher_interface/reference_requests/edit.html.erb b/app/views/teacher_interface/reference_requests/edit.html.erb index 877c973a23..c462790f7a 100644 --- a/app/views/teacher_interface/reference_requests/edit.html.erb +++ b/app/views/teacher_interface/reference_requests/edit.html.erb @@ -6,7 +6,7 @@ <% if @reference_request.responses_given? %>

How we handle your data

-

You can read about the data we collect from you, how we use it and how it's stored, in our <%= govuk_link_to "privacy policy", privacy_path %>.

+

You can read about the data we collect from you, how we use it and how it's stored, in our <%= govuk_link_to "privacy policy", "https://www.gov.uk/government/organisations/department-for-education/about/personal-information-charter" %>.

Submitting your response

By selecting the ‘Submit your response’ button, you confirm that, to the best of your knowledge, the details you’ve provided are correct.

You will not be able to change your response or delete anything once you submit it.

diff --git a/config/routes.rb b/config/routes.rb index b8b2fd9d29..8219773ad3 100644 --- a/config/routes.rb +++ b/config/routes.rb @@ -487,7 +487,6 @@ get "cookies", to: "static#cookies" get "email/:key", to: "static#email", as: "email" get "english-language-guidance", to: "static#english_language_guidance" - get "privacy", to: "static#privacy" root to: redirect("/eligibility") end diff --git a/config/sitemap.rb b/config/sitemap.rb index 7de37238d5..8de11bfc56 100644 --- a/config/sitemap.rb +++ b/config/sitemap.rb @@ -10,5 +10,4 @@ add create_or_new_teacher_session_path, changefreq: :monthly add accessibility_path, changefreq: :monthly add cookies_path, changefreq: :monthly - add privacy_path, changefreq: :monthly end diff --git a/public/sitemap.xml b/public/sitemap.xml index bf04e0912e..c67c7db49f 100644 --- a/public/sitemap.xml +++ b/public/sitemap.xml @@ -1 +1 @@ -https://apply-for-qts-in-england.education.gov.uk2022-08-17T08:49:47+01:00weekly1.0https://apply-for-qts-in-england.education.gov.uk/teacher/sign_in2022-08-17T08:49:47+01:00monthly0.5https://apply-for-qts-in-england.education.gov.uk/accessibility2022-08-17T08:49:47+01:00monthly0.5https://apply-for-qts-in-england.education.gov.uk/cookies2022-08-17T08:49:47+01:00monthly0.5https://apply-for-qts-in-england.education.gov.uk/privacy2022-08-17T08:49:47+01:00monthly0.5 \ No newline at end of file +https://apply-for-qts-in-england.education.gov.uk2022-08-17T08:49:47+01:00weekly1.0https://apply-for-qts-in-england.education.gov.uk/teacher/sign_in2022-08-17T08:49:47+01:00monthly0.5https://apply-for-qts-in-england.education.gov.uk/accessibility2022-08-17T08:49:47+01:00monthly0.5https://apply-for-qts-in-england.education.gov.uk/cookies2022-08-17T08:49:47+01:00monthly0.5 From 9cc5f6264231e0f539da42fdc69aa8c8420b1012 Mon Sep 17 00:00:00 2001 From: Hassan Mir Date: Wed, 6 Nov 2024 13:57:15 +0000 Subject: [PATCH 2/2] Update link to privacy policy --- app/lib/consent_letter.rb | 2 +- app/views/shared/_footer.html.erb | 2 +- app/views/teacher_interface/application_forms/edit.html.erb | 2 +- app/views/teacher_interface/reference_requests/edit.html.erb | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/app/lib/consent_letter.rb b/app/lib/consent_letter.rb index 0b60b9ab62..6b6b73a813 100644 --- a/app/lib/consent_letter.rb +++ b/app/lib/consent_letter.rb @@ -21,7 +21,7 @@ def render_pdf SECTION_PAD = 48 PRIVACY_URL = - "https://www.gov.uk/government/organisations/department-for-education/about/personal-information-charter" + "https://www.gov.uk/government/publications/privacy-information-education-providers-workforce-including-teachers/5a254207-a566-44f7-ac77-6ba59fd26e04#using-your-data-when-you-use-the-apply-for-qualified-teacher-status-qts-in-england-service" def document @document ||= diff --git a/app/views/shared/_footer.html.erb b/app/views/shared/_footer.html.erb index 6d0e02ea65..1332f652dc 100644 --- a/app/views/shared/_footer.html.erb +++ b/app/views/shared/_footer.html.erb @@ -3,7 +3,7 @@ meta_items: { "Accessibility" => main_app.accessibility_path, "Cookies" => main_app.cookies_path, - "Privacy" => "https://www.gov.uk/government/organisations/department-for-education/about/personal-information-charter" + "Privacy" => "https://www.gov.uk/government/publications/privacy-information-education-providers-workforce-including-teachers/5a254207-a566-44f7-ac77-6ba59fd26e04#using-your-data-when-you-use-the-apply-for-qualified-teacher-status-qts-in-england-service" }) do |footer| %> <% if current_teacher %> <% footer.with_navigation do %> diff --git a/app/views/teacher_interface/application_forms/edit.html.erb b/app/views/teacher_interface/application_forms/edit.html.erb index 0b0111525f..4c2c7d505c 100644 --- a/app/views/teacher_interface/application_forms/edit.html.erb +++ b/app/views/teacher_interface/application_forms/edit.html.erb @@ -44,7 +44,7 @@ <%= f.govuk_error_summary %>

How we handle your data

-

You can read about the data we collect from you, how we use it and how it’s stored, in our <%= govuk_link_to "privacy policy", "https://www.gov.uk/government/organisations/department-for-education/about/personal-information-charter" %>.

+

You can read about the data we collect from you, how we use it and how it’s stored, in our <%= govuk_link_to "privacy policy", "https://www.gov.uk/government/publications/privacy-information-education-providers-workforce-including-teachers/5a254207-a566-44f7-ac77-6ba59fd26e04#using-your-data-when-you-use-the-apply-for-qualified-teacher-status-qts-in-england-service" %>.

<%= f.govuk_check_boxes_fieldset :confirmed_no_sanctions, legend: { text: "About sanctions and restrictions", tag: "h2", size: "m" }, small: true do %> <%= f.govuk_check_box :confirmed_no_sanctions, diff --git a/app/views/teacher_interface/reference_requests/edit.html.erb b/app/views/teacher_interface/reference_requests/edit.html.erb index c462790f7a..4001388f24 100644 --- a/app/views/teacher_interface/reference_requests/edit.html.erb +++ b/app/views/teacher_interface/reference_requests/edit.html.erb @@ -6,7 +6,7 @@ <% if @reference_request.responses_given? %>

How we handle your data

-

You can read about the data we collect from you, how we use it and how it's stored, in our <%= govuk_link_to "privacy policy", "https://www.gov.uk/government/organisations/department-for-education/about/personal-information-charter" %>.

+

You can read about the data we collect from you, how we use it and how it's stored, in our <%= govuk_link_to "privacy policy", "https://www.gov.uk/government/publications/privacy-information-education-providers-workforce-including-teachers/5a254207-a566-44f7-ac77-6ba59fd26e04#using-your-data-when-you-use-the-apply-for-qualified-teacher-status-qts-in-england-service" %>.

Submitting your response

By selecting the ‘Submit your response’ button, you confirm that, to the best of your knowledge, the details you’ve provided are correct.

You will not be able to change your response or delete anything once you submit it.