Policy paper: SFO Privacy Policy

The Serious Fraud Office (“SFO”) is committed to the responsible handling and security of personal data. Your privacy is important to us and protected in law.

Applies to England, Northern Ireland and Wales

Personal data is any data which identifies a living individual directly or indirectly, in particular by reference to an identifier such as their name, address or date of birth.

The processing of personal data can mean anything we do with personal data, including but not limited to collecting, recording, storing and sharing.

The Director of the Serious Fraud Office is the data controller. You can contact the SFO at:

Address: The Serious Fraud Office, 2-4 Cockspur Street, London, SW1Y 5BS

You can contact the SFO’s Data Protection Officer at:

Address: Data Protection Officer, Serious Fraud Office, 2-4 Cockspur Street, London, SW1Y 5BS

The primary purpose for processing personal data determines what law protects your rights and provides the legal basis for our processing activities.

Where the SFO processes your personal data for general purposes not relating to our casework, the UK GDPR and Part 2 of the Data Protection Act apply.

Where the SFO processes your personal data for law enforcement purposes in connection with our casework, Part 3 of the Data Protection Act applies.

What information do we collect about you?

The SFO collects personal data from a range of sources in the course of the exercise of its statutory Law Enforcement functions. Types of personal data we process under Part 3 of the DPA 2018 may include information such as: