By the nature of its function, the Foreign and Commonwealth Office (FCO) must process personal data both within and outside the United Kingdom and the European economic area. Whether this is carried out by FCO officials or by commercial partners, FCO guidance is written to ensure that all personal data are handled in a way that complies with our obligations under UK law.
The Foreign and Commonwealth Office operates in countries around the world and consequently processes personal data outside both the United Kingdom and the European economic area. The main categories are: visa applications from foreign nationals; details of UK citizens requiring passport or other consular services; and Foreign and Commonwealth Office staff records.