Privacy Information for UK Borders, Immigration and Citizenship

This guide explains the UK government's privacy notice for borders, immigration, and citizenship. It covers what personal data is collected, why it is used, how long it is kept, and your rights. The official guidance was published on GOV.UK on 6 August 2026.

The UK government’s privacy notice for borders, immigration and citizenship spells out what personal data the Home Office collects, why it uses it, and what you can do about it. This guide distils the key points and tells you where to go for the full document.

At a glance

• Publication date: 6 August 2026
• Official source: GOV.UK
• Applies to borders, immigration, and citizenship
• Explains data collection and use
• Covers your data protection rights

What Is the Privacy Notice for Borders, Immigration and Citizenship?

This guidance is a privacy notice. It explains how the UK Home Office handles your personal information when you use borders, immigration, or citizenship services — from visa applications to entry at the border and citizenship requests.

The notice was published on GOV.UK on 6 August 2026 and is the official source of information. If you are applying for a visa, entering the UK, or applying for citizenship, this notice applies to you.

It details what data is collected, why it is collected, how long it is kept, and who it is shared with. It also outlines your rights under data protection law.

The notice is part of a wider set of transparency documents. The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 require organisations to explain how they use personal data. This notice meets that requirement for border, immigration, and citizenship services.

It is not a one-off document. The Home Office may update it when processes change. You should check the GOV.UK page for the latest version before relying on it.

Who Should Read the Privacy Notice for Borders, Immigration and Citizenship?

You should read this guidance if you are:

• Applying for a UK visa
• Entering the UK at a border
• Applying for citizenship
• Dealing with immigration enforcement
• Using any UK Visas & Immigration service

Even if you are not sure whether it applies, it is worth checking. The notice explains exactly when your data may be used.

It also applies to people who sponsor visa applicants, such as employers or family members. If you provide information as part of someone else’s application, your data may be processed too.

If you are a legal representative, a charity worker, or an adviser helping someone with an immigration matter, you should also read the notice. It helps you explain to your client how their data will be handled.

If you are a British citizen travelling on a UK passport, the notice still applies to you at the border. Your passport data and travel history may be collected and checked.

What Personal Data Is Collected?

The notice explains that the Home Office collects personal data. This can include your name, address, date of birth, nationality, and biometric data like fingerprints or a photo. It may also include information about your travel history and immigration status.

The exact list is in the official notice. The data collected depends on the service you are using. For example, a visa application collects different data than a border check.

Other data types may include:

• Passport and travel document details
• Contact information, such as email and phone number
• Financial information for visa applications
• Employment and education history
• Criminal records, if relevant
• Information about family members
• Biometric data, including facial images and fingerprints
• Immigration history, including previous refusals or overstays

Some data is considered sensitive. This includes data about your health, religion, or ethnicity. The notice explains when the Home Office may collect such data. For example, you may need to provide health information for a visa application.

You should only provide the data that is asked for. If you are unsure why a specific piece of data is needed, ask the Home Office before you submit it.

Why Is Your Data Used?

Your data is used to run the immigration and border system. This includes:

• Processing visa applications
• Checking who enters the UK
• Preventing crime and illegal immigration
• Enforcing immigration law
• Protecting national security

The notice gives the legal basis for each use. It also explains when your data may be shared with other agencies, such as the police.

Specific purposes may include:

• Assessing your eligibility for a visa or citizenship
• Verifying your identity
• Conducting security and criminality checks
• Making decisions on entry or refusal
• Managing immigration enforcement, including detention or removal
• Preventing identity fraud
• Sharing data with other government departments for policy and research

The legal basis for processing is usually that it is necessary for the performance of a task in the public interest, or for the exercise of official authority. For some uses, your consent may be required. The notice explains which basis applies to each purpose.

If you do not provide the required data, your application may be delayed or refused. The Home Office needs the data to make a decision.

How Long Is Your Data Kept?

The notice states that your data is kept only as long as needed. The exact retention periods are in the official notice. They depend on the type of data and the purpose.

For example, biometric data may be kept for a certain number of years. Other records may be kept longer for security reasons. Check the official notice for specific periods.

Retention periods are not uniform. Here are general examples:

• Visa application records may be kept for several years after a decision.
• Biometric data may be kept for a set period, often around 10 years, but this can vary.
• Border entry and exit records may be kept for shorter or longer periods depending on the system.
• Citizenship application records may be kept for life, as they relate to your legal status.

These are general examples only. You must check the official notice for the exact periods that apply to your situation.

After the retention period ends, your data is securely deleted or anonymised. Anonymised data cannot be linked back to you.

If you have a complaint or a legal challenge, your data may be kept longer. This is to protect the Home Office’s legal position.

Your Rights Under the Notice

Under data protection law, you have rights. These include the right to:

• Access your personal data
• Ask for incorrect data to be corrected
• Object to certain uses of your data
• Ask for your data to be deleted in some cases

The notice explains how to exercise these rights. It also tells you how to contact the Home Office’s data protection officer.

Other rights you may have include:

• The right to restrict processing in certain circumstances
• The right to data portability, where it applies
• The right to withdraw consent, if processing is based on consent
• The right not to be subject to automated decision-making, including profiling, in some cases

To exercise your rights, you usually need to make a subject access request. You can do this online or by post. The Home Office has a dedicated process for this.

You do not have to pay a fee for a subject access request in most cases. The Home Office must respond within one month, though this can be extended for complex requests.

If you are unhappy with how your data is handled, you can complain to the Information Commissioner’s Office (ICO). The ICO is the UK’s independent data protection authority. You can contact them through their website.

Before complaining to the ICO, you should first give the Home Office a chance to resolve your issue. The notice provides contact details for this.

How to Use the Privacy Notice for Borders, Immigration and Citizenship

You do not apply for this guidance. It is a public document. You can read it online for free. The official page is on GOV.UK.

To read the full notice, go to the official GOV.UK page. The page includes the full text and any related documents.

If you have questions about your specific situation, contact the Home Office. The notice gives contact details.

There is no application form for the notice itself. However, if you need to exercise your data protection rights, you may need to submit a request. The notice explains how to do this.

For example, to request a copy of your personal data, you can use the Home Office’s subject access request form. You can also write to them directly. The notice provides the correct address.

If you are applying for a visa or citizenship, you will need to complete the relevant application forms. The privacy notice is separate from those forms. You should read it before you submit your application.

Key Dates for the Privacy Notice for Borders, Immigration and Citizenship

The guidance was published on 6 August 2026. There is no deadline to read it. It is a standing notice, not a time-limited application.

However, if you are applying for a visa or citizenship, you should check the notice before you apply. It will help you understand how your data will be used.

The notice may be updated over time. You should check the GOV.UK page regularly for changes. The publication date is a useful reference, but the latest version is what matters.

If there are significant changes, the Home Office may issue a new version with a new date. You should always refer to the most recent version.

There are no deadlines for exercising your data protection rights. You can make a subject access request at any time. However, if you are involved in an immigration application, it is best to do it early to avoid delays.

Common Mistakes to Avoid with the Privacy Notice for Borders, Immigration and Citizenship

When dealing with this notice, people often make mistakes. Here are some to avoid:

• Not reading the notice before applying. This can lead to surprises about how your data is used.
• Assuming the notice covers all data processing. It only covers borders, immigration, and citizenship. Other Home Office functions may have separate notices.
• Providing more data than asked. Only give what is required.
• Ignoring your rights. You have the right to access and correct your data.
• Forgetting to update your contact details with the Home Office. If they cannot reach you, your application may be delayed.
• Not keeping a copy of your application and any correspondence. This helps if you need to make a complaint.
• Sharing your personal data with unapproved third parties. Only use official channels.

By avoiding these mistakes, you can protect your privacy and make the process smoother.

Practical Tips for Using the Privacy Notice for Borders, Immigration and Citizenship

Here are practical tips to get the most from this notice:

• Read the full notice on GOV.UK before you apply. Do not rely only on this guide.
• Bookmark the official page so you can check for updates.
• If you are unsure about a term, look it up in the notice’s glossary, if available.
• Keep a record of when you read the notice and the version you read.
• If you need to make a subject access request, prepare your identity documents in advance.
• Use the contact details in the notice for questions, not general immigration helplines.
• If you are using a lawyer or adviser, share the notice with them so they can advise you accurately.
• Check the notice for any specific instructions on how to exercise your rights.

These tips help you stay informed and avoid common pitfalls.

Frequently Asked Questions

What is the privacy information notice for borders, immigration and citizenship?

It is a document published by the UK Home Office that explains how your personal data is used when you interact with border, immigration, or citizenship services. It covers what data is collected, why, and your rights.

Where can I read the full privacy notice?

You can read the full notice on the official GOV.UK page: Borders, immigration and citizenship: privacy information notice.

Does this notice apply to me?

It applies if you are applying for a UK visa, entering the UK, applying for citizenship, or dealing with immigration enforcement. If you are unsure, check the notice for details.

What rights do I have over my data?

You have the right to access your data, correct it, object to its use, and request deletion in some cases. The notice explains how to exercise these rights.

How do I make a subject access request?

You can make a subject access request to the Home Office. The notice provides contact details. You may need to prove your identity. The Home Office must respond within one month.

Can I complain about how my data is used?

Yes. First, contact the Home Office’s data protection officer. If you are not satisfied, you can complain to the Information Commissioner’s Office (ICO).

Is there a fee to access my data?

In most cases, no. The Home Office cannot charge a fee for a subject access request. However, they may charge a reasonable fee if the request is clearly unfounded or excessive.

What happens if I do not provide my data?

If you do not provide required data, your application may be delayed or refused. The Home Office needs the data to make a decision.

How long does the Home Office keep my data?

The notice specifies retention periods. They vary by data type and purpose. Check the official notice for exact details.

Can I ask for my data to be deleted?

Yes, in some cases. You have the right to request deletion. However, the Home Office may refuse if they need to keep the data for legal or security reasons.

Before you apply

Now you know what the privacy notice covers. The next step is to read the full document on GOV.UK. If you are applying for a visa or citizenship, review the notice before you apply. This helps you understand how your data will be handled.

Check the official page for the most up-to-date information: Borders, immigration and citizenship: privacy information notice.

Remember, this guide is a summary. The official notice is the authoritative source. Always refer to it for specific details.

Photo by Oleksiy Yeshtokyn,🌻🇺🇦🌻 on Pexels

Contains public sector information licensed under the Open Government Licence v3.0.