Title: What data is collected when you apply for the Horizon Convictions Redress Scheme (HCRS) – how it’s used, where it’s stored, your rights

Applying for the Horizon Convictions Redress Scheme (HCRS) involves submitting personal information so the scheme can assess eligibility and process your case. Understanding what data is collected, how it’s used, where it’s stored, and what rights you have helps you make informed decisions about your application.

What data is collected
– Personal identifiers: name, date of birth, current address, contact details (phone number, email), and any prior aliases or identifiers used.
– Biographical information: national insurance or equivalent identifiers, immigration status, and demographic information needed for identity verification and processing.
– Conviction and legal history: details of the conviction(s) you are seeking redress for, case numbers, sentencing information, dates of offence, and related judicial documentation.
– Applications and decision records: copies of the application form, supporting statements, letters of reference, and any communications with the scheme.
– Employment and financial information (where relevant): information to assess impact or eligibility for redress, including employment status, income, and expenses associated with the offence or its consequences.
– Evidence and supporting documentation: court documents, medical records (where pertinent to the redress), police reports, and any other materials you provide to substantiate your claim.
– Evidence of residence and identity: documents to verify your identity and residency, such as a passport, driving licence, utility bills, or official correspondence.

How the data is used
– Eligibility assessment: Data is used to determine whether you meet the eligibility criteria for the HCRS and to identify the specific remedy or redress options available.
– Processing the application: Information is required to process your application, communicate decisions, request additional information, and coordinate with relevant authorities or partners involved in the scheme.
– Verification and fraud prevention: Data may be used to verify your identity, prevent fraud, and ensure the integrity of the scheme.
– Monitoring and reporting: Aggregated, de-identified data may be used for monitoring, reporting, and evaluating the scheme’s effectiveness and for policy development.
– Compliance and auditing: Data may be accessed for regulatory compliance, audits, and to meet legal obligations or statutory reporting requirements.

Where the data is stored
– Centralised systems: Personal data is stored in secure central databases used for the administration of the HCRS.
– Physical records: Where applicable, paper files are stored in secure facilities with controlled access.
– Data sharing agreements: Data may be stored or transmitted to trusted partners or service providers under formal data processing agreements that specify security and confidentiality requirements.
– Cloud and backups: Data may be hosted or backed up in encrypted form within approved cloud environments or data centres, subject to security controls and retention schedules.
– Retention periods: Data is retained for as long as necessary to administer the scheme, comply with legal obligations, and fulfil statutory or policy requirements. After retention, data is securely archived or disposed of in accordance with retention schedules and data protection laws.

Your rights
– Right to access: You can request a copy of the personal data held about you and obtain information about how it is being processed.
– Right to correction: If any personal data is inaccurate or incomplete, you can request corrections.
– Right to erasure (where applicable): In certain circumstances, you may ask for your data to be deleted when it is no longer needed or when consent is withdrawn, subject to legal or regulatory retention requirements.
– Right to restriction of processing: You can request that processing of your data be restricted in certain circumstances, such as while a correction is pending.
– Right to data portability: In some cases, you may ask for a structured, commonly used, and machine-readable format of your data to transfer it to another organisation.
– Right to object: You can object to processing that is based on legitimate interests or for processing for certain purposes. There may be legitimate grounds for continued processing that override your request.
– Rights in relation to automated decision-making: If the scheme employs automated decision-making or profiling, you have rights to obtain human review or to contest decisions under certain conditions.
– How to exercise your rights: Contact details and process for making data-related requests are provided by the scheme’s data protection officer or privacy team. You may be asked to verify your identity before requests are processed.
– Right to lodge a complaint: If you believe your data rights have been violated, you can file a complaint with the relevant supervisory authority or data protection regulator.

Security and best practices
– Data security measures: The HCRS uses appropriate technical and organisational measures to protect data from unauthorised access, loss, or disclosure. This includes access controls, encryption, secure transmission, and regular security assessments.
– Minimisation: Only data necessary for the assessment and administration of the scheme should be collected and processed.
– Access controls: Data access is restricted to authorised personnel involved in administering the HCRS, with role-based permissions and audit trails.
– Transparency: You should be informed about what data is collected, how it is used, who it may be shared with, and your rights, typically through a privacy notice accompanying the application process.
– Data sharing with third parties: Any sharing with external organisations is governed by data sharing agreements and legal bases, with a clear purpose tied to the operation of the scheme.

Tips for applicants
– Read the privacy notice: Before submitting your application, review the privacy information that explains how your data will be used.
– Provide accurate information: Ensure the data you submit is complete and accurate to avoid delays or issues with eligibility.
– Organise documents: Collect and label evidence clearly to facilitate verification and processing.
– Ask about retention: If you have concerns about how long your data will be kept, ask for the retention schedule.
– Keep records: Maintain copies of what you submit and any correspondence with the scheme.

If you have specific questions about your data or need assistance with a particular aspect of the HCRS application, you may wish to contact the scheme’s data protection lead or privacy officer for personalised guidance.

September 10, 2026 at 01:45PM
指南：Horizon Convictions Redress Scheme（HCRS）隐私通知
https://www.gov.uk/government/publications/horizon-convictions-redress-scheme-hcrs-privacy-notice
申请 Horizon Convictions Redress Scheme（HCRS）时收集哪些数据——用途、存储位置、您的权利。

阅读更多中文内容： 申请 Horizon Convictions Redress Scheme (HCRS) 时收集的数据、用途、存储位置与权利解读