Layla Moran MP – Privacy Notice
Who we are
Layla Moran is the Member of Parliament for Oxford West and Abingdon. This notice explains what personal information Layla and her office collect, why we collect it, how long we keep it, and what your rights are.
Layla Moran MP is the data controller for personal information handled by her Westminster and constituency offices. In this notice, "we" means Layla and the staff and authorised volunteers who work for her.
You can contact us at:
House of Commons, London SW1A 0AA
01235 522535
layla.moran.mp@parliament.uk
We handle personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This notice covers Layla's work as your MP. It does not cover campaigning or membership activity by the Liberal Democrats, which is covered by the party's own privacy notice.
Since 1 April 2019, elected representatives have been exempt from paying the data protection fee to the Information Commissioner's Office (ICO).
What information we collect
When you contact us for help with a problem, or to share your views on a local or national issue, we collect the information we need to respond. This may include:
your name, date of birth, address, email address and phone number
your correspondence with us and any documents you send
reference numbers linked to your case, such as an NHS, National Insurance or Home Office reference
financial, housing, employment, immigration or family details relevant to your case
information about other people involved in your case, such as family members
sensitive information, explained under "Sensitive information" below
We always ask for your address, so that we know you are one of Layla's constituents. We also collect contact details when you ask for a tour of Parliament or tickets, book a place at an event, or message Layla's social media accounts.
Most information comes directly from you. We also receive information from:
someone contacting us on your behalf, such as a relative, carer or councillor
organisations replying to enquiries we have made for you
the electoral register, which we may use to check that the information we hold is accurate
How we use your information and our lawful basis
We use your information to help you and to respond to you. We do not use it for automated decision-making or profiling.
Representing constituents and responding to their concerns is part of Layla's role as an MP. Our lawful basis for that work is public task, under Article 6(1)(e) of the UK GDPR and section 8 of the Data Protection Act 2018. We do not rely on your consent to handle casework.
What we do | Lawful basis |
Take up your case and reply to you | Public task, Article 6(1)(e) |
Reply to you about a policy issue you have raised | Public task, Article 6(1)(e) |
Send you an occasional update on a topic you have contacted us about | Public task, Article 6(1)(e) |
Arrange tours, tickets and events you have asked for | Public task, Article 6(1)(e) |
Keep a record of what we have done on your behalf | Public task, Article 6(1)(e) |
Check the accuracy of our records against the electoral register | Public task, Article 6(1)(e) |
Respond to data protection requests and complaints | Legal obligation, Article 6(1)(c) |
Sensitive information
Casework often involves sensitive details, which the law calls special category data. This includes information about your health, racial or ethnic origin, religious beliefs, political opinions, trade union membership and sexual orientation. It can also involve criminal convictions or allegations.
We handle this information under Article 9(2)(g) of the UK GDPR (substantial public interest) and paragraph 23 of Schedule 1 to the Data Protection Act 2018. That paragraph allows elected representatives to use sensitive information when responding to requests for help. The same Schedule allows us to handle information about criminal convictions and offences.
We use only what is necessary for your case. We keep an internal policy document setting out the safeguards we apply, as the Act requires.
If you tell us about another person, such as a family member, we treat their information with the same care. Where someone contacts us on your behalf, we may check with you before acting.
Who we share your information with
We share only what is necessary to take your case forward. Depending on your enquiry, that may be with:
government departments and agencies
local councils, and councillors where they are helping with your case
NHS bodies, the police, regulators and ombudsmen
companies and other organisations involved in your case, such as water and energy companies, housing associations and landlords
Please tell us when you get in touch if there is anyone you do not want us to approach, or anything you do not want passed on.
We use service providers that store or handle information on our instructions and under contract:
the Parliamentary Digital Service, which provides our email and file storage
Caseworker.MP, our casework management system
We may share information without your agreement where the law requires it, or where we believe someone is at risk of serious harm.
We do not sell your information, and we do not share casework information with anyone for campaigning purposes.
Where your information is stored
Your information is held on secure systems. Access is limited to Layla and the staff and authorised volunteers who need it for their work.
Some of our service providers may handle information outside the UK. Where that happens, we make sure it is protected by safeguards recognised under UK data protection law, such as UK adequacy regulations or approved contract terms.
How long we keep your information
We keep casework and correspondence for up to five years after your case is closed, or until Layla stops being the MP for Oxford West and Abingdon, whichever comes first. We keep it for that time because cases are often reopened and we need to see what was done before.
The same five-year period applies to everything else we hold, including tour and event bookings and records of data protection requests and complaints. Staff records are covered separately below.
At the end of that period, information is securely deleted or destroyed.
If Layla stops being your MP, the casework records we hold will be securely destroyed. They will not be passed to her successor or to any political party, unless you ask us to transfer an open case.
You can ask us to delete your information sooner. See "Your rights" below.
Staff records
Any HR records about people who work for Layla will be held for the required statutory periods.
Keeping you informed
We will contact you about the issue you raised with us, including later developments on it.
We do not send regular newsletters from the constituency office. From time to time we may send you an update about a topic you have contacted us about. Every update tells you how to stop receiving them, and you can opt out at any time by contacting us.
Your rights
You have the right to:
ask for a copy of the information we hold about you, known as a subject access request
ask us to correct information that is inaccurate or incomplete
object to our use of your information; we will then stop unless we have a compelling reason to continue
ask us to delete your information, or to restrict how we use it, in certain circumstances
ask us to stop sending you updates at any time
To use any of these rights, contact us using the details under "Who we are". Requests are handled by our Office Manager. There is no charge.
We will respond within one month. If your request is complex, we may need up to two further months and will tell you if this is the case. We may ask for information to confirm your identity where we are not sure who we are dealing with.
Some rights have limits. For example, we may need to withhold information about other people, or keep a record of work we have done. Where we cannot do what you ask, we will explain why.
MPs are not public authorities under the Freedom of Information Act 2000, so Layla's office is not required to answer Freedom of Information requests.
Complaints
If you are unhappy with how we have handled your information, please tell us first so that we can put it right. Email layla.moran.mp@parliament.uk with "Data protection complaint" in the subject line, or write to or phone us using the details under "Who we are".
Our Office Manager will acknowledge your complaint within 30 days, look into it without undue delay and tell you the outcome.
You also have the right to complain to the Information Commissioner's Office:
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
0303 123 1113
Changes to this notice
We review this notice at least once a year and whenever the law changes. The current version is always published on Layla's website.
Last reviewed: 6 October 2026