How does a fostering agency protect my personal information?

A fostering agency protects your personal information through clear data governance at every stage, from your first enquiry through assessment, approval and ongoing support. This includes deciding what information is genuinely needed, limiting its use to a lawful purpose, training staff to handle it properly and reviewing how information is managed when circumstances change.

During the fostering process, an agency may need information about your identity, household, health, finances, relationships, employment, living arrangements and previous experience. It may also request references, criminal record information and details relevant to safeguarding. These checks are necessary because the agency must assess whether fostering would be safe and suitable. You should be told why each category of information is needed rather than being asked for personal details without an explanation.

Ask how information is handled at each stage. A responsible agency should be able to explain:

• which teams or professionals can see different parts of your file;
• how information submitted through an enquiry form, email, telephone call or online portal enters the agency’s records;
• how paper documents, electronic files and mobile devices are protected;
• how staff are trained to identify and report inappropriate access or disclosure;
• how long different records are kept and what happens when the retention period ends; and
• who to contact if you have a question, complaint or data protection request.

Information should be shared on a need-to-know basis. For example, an assessing social worker may require detailed information for your assessment, while a member of an administrative team may only need contact details to arrange an appointment. The agency should not treat every employee, contractor or partner organisation as having automatic access to your complete record.

Fostering also involves information about children and young people, which requires particular care. An agency may need to share relevant details with a local authority or other professional involved in assessing, placing or safeguarding a child. This does not mean that your entire personal history should be circulated. Information shared should be relevant, proportionate and limited to the purpose for which it is needed. In some safeguarding situations, information may need to be disclosed without asking for your permission first, particularly where delay could put someone at risk or where another legal duty applies. The agency should explain this distinction clearly.

Consent is not the answer to every data-sharing decision. An agency may rely on a legal obligation, a safeguarding duty or another lawful basis when processing information. You should therefore ask what legal basis applies to a particular use of your information and whether withdrawing consent would affect only optional communications, such as marketing, or an essential part of the assessment process. Agreeing to receive information about fostering is not the same as agreeing to every possible use of your data.

You should also be told whether external organisations are involved. These might include organisations carrying out identity or background checks, medical assessments, training administration or information technology services. The agency remains responsible for checking that such providers handle information appropriately and that any sharing is relevant to the stated purpose.

Your data protection rights may include asking for a copy of the personal information held about you, requesting correction of inaccurate details and asking questions about how your information is being used. Depending on the circumstances, you may also be able to request deletion, restrict processing or object to a particular use. These rights are not absolute: an agency may need to retain information to meet a legal, regulatory or safeguarding requirement, and some records may contain information that cannot be disclosed in full. It should explain the reason if it cannot comply with a request in the way you expected.

Accuracy matters particularly in a fostering assessment. If your circumstances change, or you discover that a report contains an error, tell the agency promptly and ask how the record will be corrected. You can ask for your explanation to be added to the file if a disputed point cannot immediately be resolved. Keep copies of important information you provide and note when you made a request, so there is a clear record of the issue.

It is reasonable to ask what would happen if personal information were sent to the wrong person, accessed improperly or lost. The agency should have an incident procedure, assess the risk, take steps to contain the problem and make any notifications required by data protection rules. Where an incident creates a significant risk to you, it may need to tell you what happened and what action you should take.

Before sharing detailed information, read the agency’s privacy notice and raise any point you do not understand. Useful questions include:

• Will my enquiry be used for marketing, and how can I stop optional communications?
• Which information will be shared with the assessing team, local authority or other professionals?
• How long will my enquiry and assessment records be retained?
• Can I see the information used in my assessment and ask for inaccuracies to be corrected?
• Who handles data protection concerns, and how can I make a formal complaint?

Clear answers to these questions indicate that the agency treats privacy as part of safe and accountable fostering practice, rather than as paperwork completed only at the start of your application.