Training Accreditation Privacy Notice
Updated March 2025
About this service or activity
The Driver and Vehicle Standards Agency (DVSA) is an executive agency of the Department for Transport (DfT). We administer the following schemes:
- Dangerous Goods Driver Training (DGDT)
- Dangerous Goods Safety Advisors (DGSA)
- Drink Drive Rehabilitation (DDR)
- Driver Certificate of Professional Competence (DCPC)
- Earned Recognition (ER)
- National Vocational Training (NVT) programme
- Taxi Driver Periodic Training (TDPT) in Northern Ireland
To effectively administer the approvals, audits and examinations for these schemes, DVSA provides:
- Guidance and support to training providers
- A “find your nearest” service on www.jaupt.org.uk and www.gov.uk
The data controller for DVSA is DfT (ICO registration Z7122992). We operate TDPT on behalf of the Driver & Vehicle Agency (DVA) in Northern Ireland; for TDPT, DVA is the controller and DVSA is the processor.
What data we need
For DCPC, TDPT, DDR, NVT and DGDT, we collect from training providers:
- Name, address, email & phone of the responsible person/primary contact
- Trainer names, unique ID (e.g. driving licence number or date of birth), qualifications/certificates
- Dates, times, trainer’s name, client’s name, and locations of training sessions
Find your nearest (FYN) services
If you opt in, the following data is published:
- DCPC, TDPT & DDR: business name, contact name, telephone, address, website, email, course details, dates/times, sector & venue postcode
- DGDT: business name, telephone, city, email address
Replacement ADR card & DGSA certificates
We collect from candidates:
- Candidate number (if known), full name, date of birth, address & postcode
- Telephone number, email address
- Reason for replacement
National Vocational Training (NVT)
We collect from applicants:
- Name, address, email, mobile, driving licence number
- Employer’s name, address & contact details
- Course enrolled on
- Proof of passing lorry/bus practical test (pass certificate or full licence copy)
We verify licence entitlement with DVLA’s Driver Validation Service.
Dangerous Goods Safety Advisors (DGSA)
We collect from candidates booking exams or issuing certificates:
- Name, date of birth, address & postcode
- Telephone number, email, country of birth, nationality
- Examination/qualification details
For the public list on GOV.UK, we publish name, email, postcode, telephone, qualification details & candidate number.
Earned Recognition (ER)
We collect organisation name of approved training providers opting into ER.
Lawful basis for processing
- DCPC, DDR, NVT, TDPT, DGDT & DGSA: public task under various Regulations (e.g. DCPC Regulations 2007, Rehabilitation Courses Regulations 2012, etc.)
- ER: public task via course application disclosure
- Find your nearest services: consent (withdraw by emailing DCPC_CC@dvsa.gov.uk or adr@dvsa.gov.uk)
Why we need it
To approve, audit and oversee training providers; to add/remove you from “find your nearest”; to determine NVT eligibility; to book DGSA exams & issue certificates; and to issue replacement ADR cards.
What we do with it
We collect, use and store your data only for the purposes set out here. We will not sell or rent it, nor share it for marketing. We may share if required by law (e.g. court order, fraud prevention). TDPT data is shared with DVA NI for course approval, audit and review.
How long we keep your data
- 4 years after centre approval expires or after NVT card expiry
- 2 years after DGSA exam booking
- 12 months after replacement ADR/DGSA request
- Up to 2 years after addition to DGSA list (unless qualification lasts longer)
Evidence of licence entitlement is deleted once verified. Data removed immediately if a provider can no longer operate.
Where it might go
All data is held on DVSA servers in the UK. DGDT & DGSA data is also held by the Scottish Qualifications Authority (data processor).
Protecting your data & your rights
See the DVSA Personal Information Charter on GOV.UK for how we protect your data and your rights to access, rectify or erase it.
Automated decision making & profiling
We do not use automated decision-making or profiling as defined under data protection law.
Changes to this notice
We may update this notice at any time. The “Updated” date at the top will be revised. Please review periodically.
How to contact us
If you have questions or concerns about your personal data, contact: Data Protection Manager
DVSA
1 Unity Square
Nottingham NG2 1AY
For general enquiries, contact DVSA Customer Services. To complain, you may also contact the Information Commissioner’s Office.
Version 0.3, March 2025