The Diocese is registered with the Information Commissioner’s Office (ICO) as a data controller and consequently must process all personal data (including special categories of personal data) about data subjects in accordance with data protection legislation, domestic or otherwise (as may be in force or repealed or replaced from time to time).
For the avoidance of doubt, the Diocese remains the sole data controller, even where processing is carried out by its curial offices, parishes, departments, and agencies.
The Diocese will collect, store, use and otherwise process personal data about the people with whom it interacts, who are the data subjects. This may include parishioners, volunteers, clergy, employees, contractors, suppliers and other third parties.
The Diocese processes personal data so that it can comply with its statutory obligations and achieve its charitable objects of advancing and maintaining the Roman Catholic religion through the operation of its parishes and its other activities.
Personal data is processed and stored by the Diocese in a range of formats and every data subject has several rights in relation to how the Diocese processes their personal data.
The Diocese is committed to ensuring that it processes personal data properly and securely in accordance with Data Protection regulations, including the Data Protection Act 2018 (DPA), UK General Data Protection Regulation 2018 (UK GDPR), the Data Protection (Jersey) Law 2018 and the Data Protection (Bailiwick of Guernsey) Law, 2017. Such commitment constitutes good governance and is important for achieving and maintaining the trust and confidence of data subjects.
For further details please see our Privacy Statement below and if you have any queries then please contact our Data Protection Officer at gdpr@portsmouthdiocese.org.uk.
202 KB
© Catholic Diocese of Portsmouth 2025 | Registration number: England Registered Charity No. 1199568 Jersey Registered Charity No. 457 and Guernsey Registered Charity No.CH263 | Privacy Statement | Cookie Policy