Grade A+ — Highly protective (score 97/100)
The National Archives maintains a highly protective policy, explicitly pledging not to sell personal data and providing clear mechanisms for exercising data rights.
Highly protective policy with explicit no-sale pledge and clear rights.
We do not sell your information to any other organisations.
The organization explicitly commits to not selling your personal data to third parties.
Request the erasure of your personal information where it is no longer necessary for us to retain it.
You have the right to request the deletion of your personal data when it is no longer required for the purposes it was collected.
As a government department, we have a duty to abide by the terms of His Majesty’s Government’s Security Policy Framework, and to cooperate with any law-enforcement bodies, including the police, who have a requirement to see what personal information we may have about you.
As a government entity, the organization is legally obligated to share your information with law enforcement if required by law.
retention in case of claims: we will retain it for the period in which you might legally bring claims against us (in the UK this means we will retain it for six years)
Personal data is retained for six years to ensure the organization can defend against potential legal claims.
Last reviewed 2026-08-06 under rubric v3.5.