Data protection guidance for Electoral Registration Officers and Returning Officers

The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 apply to the processing of all personal data.

Data protection legislation does not override requirements to gather and process information as set out in existing electoral law but there is impact on how this information is processed and the responsibilities of EROs and ROs to keep data subjects informed. 

You are personally responsible as an Electoral Registration Officer (ERO) and/or Returning Officer (RO) for ensuring that you comply with the requirements of current data protection legislation. 

This guidance, which includes practical examples where possible, is designed to support you in meeting:

• your duty to comply with the requirements of current data protection legislation 
• your obligations, as they relate to your electoral administration responsibilities. 

It was developed in close consultation with colleagues across the electoral community including the Association of Electoral Administrators (AEA), Department for Levelling Up, Housing & Communities (DLUHC), the Information Commissioner’s Office (ICO), the Scottish Assessors Association (SAA) and the Society of Local Authority Chief Executives (SOLACE) to identify the impact of the legislation on EROs and ROs.1