Question to the Department for Science, Innovation & Technology:

To ask the Secretary of State for Science, Innovation and Technology, with reference to the Data Protection Act 2018 and Article 5 of the United Kingdom General Data Protection Regulation, what assessment her Department has made of the adequacy of the safeguards to ensure that personal data gathered through the digital Veteran Card service is not shared across Government departments without the explicit consent of the veteran.

The Department has conducted a data protection impact assessment (DPIA) for the digital Veteran Card, approved by the One Login Senior Responsible Officer and the Department for Science, Innovation and Technology’s Data Protection Officer, in consultation with the Information Commissioner’s Office (ICO). A Data Sharing Agreement governs processing between the Ministry of Defence and the Department for Science, Innovation and Technology and ensures that data is only used for its intended and agreed purpose.

Personal data is stored locally on the veteran’s mobile device and is only shared when the veteran actively chooses to present their digital card. There is no automatic cross-government data sharing. Veterans retain full control of their data and can delete their card at any time.