September 6, 2020

Submission to the United Kingdom's Department for Digital, Culture, Media & Sport (DCMS) in Response to a Call for Views on Proposals for Improving the Cyber Security of Consumer Smart Products Sold in the United Kingdom

Proposals for Regulating Consumer Smart Product Cyber Security - Call for Views July 2020

Feedback Form

The questions set out below seek your feedback on the government’s Call for Views on proposals for improving the cyber security of consumer smart products sold in the UK through legislation.

Respondents are encouraged to provide answers to these questions using the feedback survey for this Call for Views. Alternatively, if unable to complete the survey, respondents can download and populate this feedback template and email their responses directly to securebydesign@dcms.gov.uk.

We recommend reading the Call for Views in full before submitting feedback. You do not have to answer all of the questions. All responses should be submitted in advance of the closing date for this Call for Views, which is 23:59 Sunday 6th September 2020.

Privacy notice

The following is to explain your rights and give you the information you are entitled to under the Data Protection Act 2018 and the General Data Protection Regulation (“the Data Protection Legislation”). This notice only refers to your personal data (e.g. your name, email address, and anything that could be used to identify you personally) not the content of your response.

  1. The identity of the data controller and contact details of our Data Protection Officer
    The Department for Digital, Culture, Media and Sport (“DCMS”) is the data controller. The Data Protection Officer can be contacted at
    dcmsdataprotection@dcms.gov.uk.You can visit the DCMS website to find out more about how DCMS uses and protects your information
  2. Why your personal data is being collected
    Your personal data is being collected as an essential part of the Call for Views process, so that the government can contact you regarding your response and for statistical purposes, such as to ensure individuals cannot complete the survey more than once.
  3. The legal basis for processing personal data
    The Data Protection Legislation states that, as a government department, the department may process personal data as necessary for the effective performance of a task carried out in the public interest. i.e. a Call for Views.
  4. How your personal data will be shared
    Copies of responses may be published after the survey closes. If this happens, the government will ensure that neither you nor the organisation you represent are identifiable, and any response used to illustrate findings will be anonymised.
    If you want the information that you provide to be treated as confidential, please contact foi@dcms.gov.uk. Please be aware that, under the Freedom of Information Act (FOIA), there is a statutory Code of Practice with which public authorities must comply and which deals, amongst other things, with obligations of confidence. In view of this, it would be helpful if you could explain why you regard the information you have provided as confidential. If the government receives a request for disclosure of the information, the government will take full account of your explanation, but cannot give an assurance that confidentiality can be maintained in all circumstances. An automatic confidentiality disclaimer generated by your IT system will not, of itself, be regarded as binding on the Department.
  5. How long your personal data will be kept for
    Your personal data will be held for two years after the survey is closed. This is so that the department is able to contact you regarding the result of the survey following analysis of the responses.
  6. Your rights in relation to access, rectification and erasure of data
    The data that is being collected is your personal data, and you have considerable say over what happens to it. You have the right:
    to see what data we have about you:
    to ask us to stop using your data, but keep it on record;
    to have all or some of your data deleted or corrected;
    to lodge a complaint with the independent Information Commissioner if you think we are not handling your data fairly or in accordance with the law.

    You can contact the ICO at
    https://ico.org.uk/, or telephone 0303 123 1113. ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
  7. Additional information
    Further to the above, you should also be aware of the following:
    Your personal data will not be sent overseas.
    Your personal data will not be used for any automated decision making.
    Your personal data will be stored in a secure government IT system.

    If you need any further information related to the processing of your personal data please contact the DCMS Data Protection Team at dcmsdataprotection@dcms.gov.uk and specify which survey you have concerns about.

For additional information and form, please see PDF attached.