anchor.diff:        <li>gender (optional)</li>
         <li>IP address</li>
         <li>personal identifier (PID)</li>
  -    </ul>
  -    <p>In some situations we may also ask for some additional information such as:</p>
  -    <ul class="list-bullet list">
  -      <li>driving licence number</li>
  -      <li>Land Registry borrowers number</li>
  -      <li>National Insurance number</li>
  -      <li>HM Revenue and Customs unique taxpayer reference</li>
  -      <li>Rural Payments Agency Single Business Identifier</li>
  -    </ul>
  -    <h4 class="heading-small" id="how-personal-data-is-used-european">How personal data is used when signing in with a digital identity from another European country</h4>
  -    <p>After your digital identity from another EU country has been authenticated, we’ll pass your personal data to the government service that you want to use. Your verified identity will then be matched to a record in the corresponding government service database.</p>
  -    <p>This data includes:</p>
  -    <ul class="list-bullet list">
  +    </ol>
  +
  +    <h3 class="heading-medium" id="how-personal-data-is-used-when-signing-in-with-a-digital-identity-from-another-eu-country">How personal data is used when signing in with a digital identity from another EU country</h3>
  +    <p>After your digital identity from another EU country has been authenticated, we'll collect your personal data and pass it on to the government service that you want to use. We do this to help you to transact securely with government services.</p>
  +    <p>This personal data might include your:</p>
  +    <ol class="list-bullet list">
         <li>family name</li>
         <li>first name</li>
         <li>date of birth</li>
         <li>personal identifier (PID)</li>
  -    </ul>
  -    <p>In some situations we may also ask for some additional information such as:</p>
  -    <ul class="list-bullet list">
  -      <li>driving licence number</li>
  -      <li>Land Registry borrowers number</li>
  -      <li>National Insurance number</li>
  -      <li>HM Revenue and Customs unique taxpayer reference</li>
  -      <li>Rural Payments Agency Single Business Identifier</li>
  -    </ul>
  -    <h4 class="heading-small" id="user-support-questions-and-feedback">User support questions and feedback</h4>
  -    We process questions or feedback you send to user support, including your name and email address, details of your query, and actions we have taken to help.
  -    <h4 class="heading-small" id="technical-information">Technical information</h4>
  -    <p>When you connect to GOV.UK Verify, we collect other information that is used for monitoring, reporting and fraud prevention purposes. This includes:</p>
  -    <ul class="list-bullet list">
  -      <li>the IP address of the device you’re using to connect</li>
  -      <li>the ‘device fingerprint’, which is information collected about a remote computing device for device identification</li>
  -      <li>‘user agent string’, which is the type and version of browser and operating system</li>
  -    </ul>
  -    <h2 class="heading-medium" id="cookies-and-analytics">Cookies and analytics</h2>
  +    </ol>
  +
  +    <h3 class="heading-medium" id="how-personal-data-is-used-when-signing-in-with-gov.uk-verify-to-access-services-across-eu-member-states">How personal data is used when signing in with GOV.UK Verify to access services across EU Member States</h3>
  +    <p>After your digital identity from GOV.UK Verify has been authenticated, we'll send your personal data to the services across the EU Member States that you want to use.</p>
  +    <p>This personal data might include your:</p>
  +    <ol class="list-bullet list">
  +      <li>family name</li>
  +      <li>first name</li>
  +      <li>date of birth</li>
  +      <li>personal identifier (PID)</li>
  +    </ol>
  +
  +    <h3 class="heading-medium" id="user-support-questions-and-feedback">User support questions and feedback</h3>
  +    <p>We process questions or feedback you send to user support, including your name and email address, details of your query, and what we've done to help</p>
  +
  +    <h3 class="heading-medium" id="technical-information">Technical information</h3>
  +    <p>We might automatically collect other non-personal information like:</p>
  +    <ol class="list-bullet list">
  +      <li>your IP address (this could be a static or dynamic IP address and will sometimes point to a specific computer or device)</li>
  +      <li>which browser and operating system you're using</li>
  +      <li>how long you've spent on a particular page</li>
  +      <li>which website you came from</li>
  +      <li>which website you went to next</li>
  +    </ol>
  +    <P>This information helps us understand how you use GOV.UK Verify. We use it to find out ways we can improve GOV.UK Verify to make sure it works for the people who need it.</P>
  +
  +    <h2 class="heading-large" id=cookies-and-analytics">Cookies and analytics</h2>
       <p>You can read our full <a href="https://www.signin.service.gov.uk/cookies">cookie notice</a> to find out how we use cookies.</p>
  -    <h2 class="heading-medium" id="How-long-we-keep-your-data">How long we keep your data for</h2>
  -    <p>We will only retain your personal data for as long as:
  -      <ul class="list-bullet list">
  -        <li>the law requires us to</li>
  -        <li>we need to provide this service</li>
  -      </ul>
  -      In general, this means that we will only hold your personal data for a minimum of 1 year and a maximum of 7 years.
  -    </p>
  -    <h2 class="heading-medium" id="companies-and-government-organisations">Certified companies, digital identity schemes in other European countries and government organisations</h2>
  -    <p>The government organisations, digital identity schemes in other European countries and certified companies that we partner with are the <a href="https://ico.org.uk/for-organisations/guide-to-data-protection/key-definitions/">data controllers</a> who will also process your data for their own purpose. These purposes are not described in this privacy notice. Read their privacy policies to learn how they process your data and how to exercise your rights around how they do it.
  -    </p>
  -    <h2 class="heading-medium" id="sharing-information-with-third-parties">Sharing information with third parties</h2>
  -    <p>We share information with government services and certified companies to verify your identity and only in the ways described in this privacy notice. We won’t share your personal data with any other organisations or for marketing, market research or commercial purposes.</p>
  -    <p>
  -      We may pass on personal data if we have a lawful reason, for example as part of a criminal investigation or fraud prevention activity.
  -    </p>
  -    <h2 class="heading-medium" id="where-data-is-stored">Where your data is stored</h2>
  -    <p>GOV.UK Verify processes your personal data in the European Economic Area (EEA).</p>
  -    <h2 class="heading-medium" id="links-to-other-websites">Links to other websites</h2>
  -    <p>GOV.UK Verify is one of the services on GOV.UK and has links to other websites. This privacy notice only applies to <a href="https://www.gov.uk/government/publications/introducing-govuk-verify">GOV.UK Verify</a> and doesn’t cover other government services and transactions that we link to.</p>
  -    <h2 class="heading-medium" id="identity-assurance-principles">Identity Assurance Principles when signing in with GOV.UK Verify</h2>
  -    <p>GOV.UK Verify has been designed to comply with the <a href="https://www.gov.uk/government/uploads/system/uploads/attachment_data/file/361496/PCAG_IDA_Principles_3.1__4_.pdf">Identity Assurance Principles</a> prepared by the Cabinet Office <a href="https://www.gov.uk/government/groups/privacy-and-consumer-advisory-group">Privacy and Consumer Advisory Group</a>.
  -      You can also find more detailed information about the service on the <a href="https://identityassurance.blog.gov.uk/">GOV.UK Verify blog</a>.
  -    </p>
  -    <h2 class="heading-medium" id="children-privacy-protection">Children’s privacy protection</h2>
  -    <p>We understand the importance of protecting children's privacy online. GOV.UK Verify is not designed for, or intentionally targeted at, children 13 years of age or younger. It is not our policy to intentionally collect or maintain data about anyone under the age of 13.
  -    </p>
  -    <h2 class="heading-medium" id="how-we-protect-your-data">How we protect your data and keep it secure</h2>
  -    <p>We are committed to doing all that we can to keep your data secure. To prevent unauthorised access or disclosure we have put in place technical and organisational procedures to secure the data we collect about you - for example, we protect your data using varying levels of encryption.We also make sure that any third parties that we deal with have an obligation to keep all personal data they process on our behalf secure.
  -    </p>
  -    <h2 class="heading-medium" id="changes-to-this-notice">Changes to this notice</h2>
  -    <p>We may change this privacy notice at our discretion at any time. When we make changes to this notice, we will update the last modified date at the top of this page. Any change to this privacy notice will be applied to you and your data as of that revision date.  We encourage you to review this privacy notice regularly to stay informed about how we are protecting your data.
  -    </p>
  -    <h2 class="heading-medium" id="who-controls-your-data">Who controls your data</h2>
  -    <p>The data controller for your personal data is the Cabinet Office – a data controller determines how and why personal data is processed.</p>
  -    <p><h4 class="heading-medium" id="your-rights">Your rights</h4>
  -    You have the right to request:
  -    <ul class="list-bullet list">
  -        <li>information about how your personal data is processed and to request a copy of that personal data you’ve given to us</li>
  -        <li>that any inaccuracies about your personal data be corrected without delay</li>
  -        <li>that any incomplete personal data is completed, including by means of a supplementary statement</li>
  -        <li>that your personal data is erased if there is no longer a justification for us to hold it</li>
  -        <li>that the processing of your personal data is restricted in certain circumstances, for example when accuracy is contested</li>
  -      </ul>
  -    If your personal data is processed on the basis of consent, then you have the right to withdraw your consent at any time.
  -    </p>
  -    <h2 class="heading-medium" id="how-to-contact-us">How to contact us</h2>
  -    <p>If you have any questions about anything in this document or if you believe your personal data has been misused or mishandled you can contact the Cabinet Office Data Protection Officer (DPO) at <a href="mailto:DPO@cabinetoffice.gov.uk">DPO@cabinetoffice.gov.uk</a>.</p>
  +
  +    <h2 class="heading-large" id="what-we-do-with-your-data">What we do with your data</h2>
  +    <p>We might share the data we collect with:</p>
  +    <ol class="list-bullet list">
  +      <li>other government departments and agencies</li>
  +      <li>the company who verified your identity</li>
  +      <li>other public bodies</li>
  +    </ol>
  +    <p>We process some personal data to help prevent fraud in government services. We do this to make sure GOV.UK Verify meets the UK government's identity standards.</p>
  +    <p>We will not:</p>
  +    <ol class="list-bullet list">
  +      <li>sell or rent your data to third parties</li>
  +      <li>share your data with third parties for marketing purposes</li>
  +    </ol>
  +    <p>We will share your data if we're required to do so by law, for example by court order, or to prevent fraud or other crime.</p>
  +
  +    <h2 class="heading-large" id="how-long-we-keep-your-data-for">How long we keep your data for</h2>
  +    <p>We will only retain your personal data for as long as:</p>
  +    <ol class="list-bullet list">
  +      <li>the law requires us to</li>
  +      <li>we need to provide this service</li>
  +    </ol>
  +
  +    <h2 class="heading-large" id="certified-companies-digital-id-schemes-in-other-european=-countries-and-governemt-organisations">Certified companies, digital identity schemes in other European countries and government organisations</h2>
  +    <p>Cabinet Office is the data controller for the data processed by GOV.UK Verify. Where these pages link out to services provided by other government organisations, digital identity schemes in other EU countries and companies that we partner with, their own privacy policies will apply. These are managed by each service provider and they are the data controllers for the data they collect. These purposes are not described in this privacy notice. Read their privacy policies to find out how they process your data and how to exercise your rights around how they do it.</p>
  +    <p>A data controller determines how and why personal data is processed. For more information, read the Cabinet Office’s entry in the <a href="https://ico.org.uk/ESDWebPages/Entry/Z7414053">Data Protection Public Register</a>.</p>
  +
  +    <h2 class="heading-large" id="where-your-data-is-stored">Where your data is stored</h2>
  +    <p>GOV.UK Verify processes your personal data in the European Economic Area (EEA)</p>
  +
  +    <h2 class="heading-large" id="your-rights">Your rights</h2>
  +    <p>You have the right to request:</p>
  +    <ol class="list-bullet list">
  +      <li>information about how your personal data is processed and to request a copy of the personal data you’ve given to us</li>
  +      <li>that any inaccuracies about your personal data be corrected without delay</li>
  +      <li>that any incomplete personal data is completed, including by means of a supplementary statement</li>
  +      <li>that your personal data is erased if there is no longer a justification for us to hold it</li>
  +      <li>that the processing of your personal data is restricted in certain circumstances, for example when accuracy is contested</li>
  +    </ol>
  +    <p>If your personal data is processed on the basis of consent, then you have the right to withdraw your consent at any time.</p>
  +
  +    <h2 class="heading-large" id="links-to-other-websites">Links to other websites</h2>
  +    <p>GOV.UK Verify is one of the services on GOV.UK and has links to other websites.</p>
  +    <p>This privacy notice only applies to <a href="https://www.gov.uk/government/publications/introducing-govuk-verify">GOV.UK Verify</a> and doesn’t cover other government services and transactions that we link to.</p>
  +
  +    <h2 class="heading-large" id="identity-assurance-principles-when-signing-in-with-gov-uk-verify">Identity Assurance Principles when signing in with GOV.UK Verify</h2>
  +    <p>GOV.UK Verify has been designed to comply with the <a href="https://www.gov.uk/government/uploads/system/uploads/attachment_data/file/361496/PCAG_IDA_Principles_3.1__4_.pdf">Identity Assurance Principles</a> prepared by the Cabinet Office <a href="https://www.gov.uk/government/groups/privacy-and-consumer-advisory-group">Privacy and Consumer Advisory Group</a>.</p>
  +    <p>You can also find more detailed information about the service on the <a href="https://identityassurance.blog.gov.uk/">GOV.UK Verify blog</a>.</p>
  +
  +    <h2 class="heading-large" id="childrens-privacy-protection">Children’s privacy protection</h2>
  +    <p>We understand the importance of protecting children's privacy online. GOV.UK Verify is not designed for, or intentionally targeted at, children that are 13 years of age or younger. It is not our policy to intentionally collect or maintain data about anyone under the age of 13.</p>
  +
  +    <h2 class="heading-large" id="how-we-protect-your-data-and-keep-it-secure">How we protect your data and keep it secure</h2>
  +    <p>We're committed to doing all that we can to keep your data secure. To prevent unauthorised access or disclosure we have put in place technical and organisational procedures to secure the data we collect about you. For example, we protect your data using varying levels of encryption.</p>
  +    <p>We also make sure that any third parties that we deal with have an obligation to keep all personal data they process on our behalf secure.</p>
  +
  +    <h2 class="heading-large" id="changes-to-this-notice">Changes to this notice</h2>
  +    <p>We may change this privacy notice. In that case, the ‘last updated’ date at the bottom of this page will change. Any changes to this privacy notice will apply to you and your data as of that date.</p>
  +    <p>We encourage you to review this privacy notice regularly to stay informed about how we are protecting your data.</p>
  +
  +    <h2 class="heading-medium" id="how-to-contact-us-or-make-a-complaint">How to contact us or make a complaint</h2>
  +    <p>You can contact the Verify Privacy Team at <a href="mailto:verify-privacy@digital.cabinet-office.gov.uk">verify-privacy@digital.cabinet-office.gov.uk</a> if you:</p>
  +    <ol class="list-bullet list">
  +      <li>have a question about anything in the privacy notice</li>
  +      <li>think that your personal data has been misused or mishandled</li>
  +    </ol>
  +    <p>You can also contact the Cabinet Office Data Protection Officer (DPO) at <a href="mailto:DPO@cabinetoffice.gov.uk">DPO@cabinetoffice.gov.uk</a>.</p>
       <p>Or by post at:</p>
       <p>
       <address>
  
positive.code:       London SW1A 2AS
      </address>
      </p>
  
      <p>You can make a complaint to the Information Commissioner’s Office (ICO), who is an independent regulator. The Information Commissioner can be contacted at <a href="mailto:casework@ico.org.uk">casework@ico.org.uk</a> or on 0303 123 1113.</p>
  
      <p>Or by post at:</p>
      <p>
      <address>
        Information Commissioner's Office
  
negative.code:     </address>
      </p>
      <div class="meta-data group">
        <p class="modified-date">Last updated: 28 May 2019</p>
      </div>
    </div>
  </div>