National Works Agency Privacy Notice

Introduction

This Privacy Notice explains how the National Works Agency collects, processes, stores, and discloses your personal data, the types of information collected, and the reasons for processing such information.

As we gather certain types of personal data about you, it is important that you understand the terms and conditions surrounding the collection and use of your information. We assure you that the processing of your personal data is conducted in accordance with the Data Protection Act, 2020 and any applicable regulations.

This Privacy Notice provides information on:

• The personal data collected by the Agency;
• How personal data is collected, used, shared, stored, and processed;
• Security controls implemented to protect your personal data;
• Your rights regarding your personal data; and
• How to contact us regarding your personal data.

NWA recognizes the importance of safeguarding your personal data and is committed to maintaining the highest standards of confidentiality, security, and privacy for all customers, employees, and stakeholders.

Information Gathered and Utilized by the NWA

Types of Personal Data We Collect

We collect information when you make inquiries, submit applications, request services, or engage with us in ways permitted by law. Personal data collected may include:

• Contact Information: Name, aliases, residential or mailing address, email address, and telephone numbers.
• Government Identifiers: Taxpayer Registration Number (TRN), Passport Number, Voter Registration Identification, National Insurance Scheme (NIS) Number, and Driver's Licence Number.
• Demographic Information: Date of birth, age, gender, nationality, citizenship, and marital status.
• Financial Information: Banking details and other relevant financial data.
• Employment Information: Employment history, occupation, employer details, income, and job description.
• Medical Information: Medical reports and health-related documentation.
• Property Information: Information relating to real or personal property.
• Other Relevant Information: Any information required to facilitate services requested from the Agency.

Failure to provide the required information may affect or delay the processing of your request.

Purposes for Processing Your Personal Data

Your personal data may be processed for the following purposes:

• Verifying your identity;
• Completing electronic transactions;
• Complying with legal and regulatory obligations;
• Conducting business analysis and improving services;
• Research and product development, including traffic data analysis;
• Responding to requests, inquiries, claims, concerns and feedback.

How Do We Obtain Your Personal Data?

We collect personal data that you voluntarily provide through:

• Mobile applications;
• Email communications;
• Telephone interactions;
• Website forms;
• Chat functions;
• Social media platforms;
• Newsletter subscriptions;
• Surveys;
• In-person and virtual interactions.

Personal Data Collected Indirectly

Personal data may also be collected through:

• Closed Circuit Television (CCTV) systems installed at NWA facilities to promote the safety and security of staff, visitors, and assets.
• Third parties, including Government Ministries, Departments and Agencies, insurance companies, valuators, surveyors, legal professionals, contractors and other business entities.

Retention of Personal Data

The Agency retains personal data only for as long as necessary to comply with legal, regulatory, operational, and business requirements. Disposal of personal data is conducted in accordance with applicable legislation, industry standards, and best practices.

Legal Bases for Processing Your Personal Data

The NWA processes personal data based on one or more of the following lawful bases:

• Compliance with a legal obligation;
• Performance of a public task carried out in the public interest;
• Your consent, where applicable;
• Legitimate interests pursued by the Agency;
• Performance of a contract or entering into a contract;
• Protection of the vital interests of the data subject.

Your Rights Under the Data Protection Act, 2020

Subject to the provisions of the Data Protection Act, 2020, you may exercise the following rights:

• Right to be Informed – Know how your personal data is processed.
• Right of Access – Obtain information about personal data held by the NWA and request copies.
• Right to Consent – Provide or withdraw consent where applicable.
• Right to Rectification – Correct inaccurate or incomplete data.
• Right to Object – Object to certain processing activities where:
  1. The processing may cause substantial and unwarranted distress;
  2. The data is incomplete or irrelevant;
  3. The processing is prohibited by law;
  4. The data is retained beyond the legally permitted period.
• Right to Complain – Lodge a complaint with the Office of the Information Commissioner (OIC).
• Right to Data Portability – Obtain your data in a structured, commonly used, machine-readable format.
• Rights Related to Automated Decision-Making – Not be subject to decisions based solely on automated processing where such decisions significantly affect your rights and interests.

To exercise any of these rights, please contact our Data Protection Officer.

Sharing of Personal Data

NWA will not disclose personal data except where necessary for service delivery, with your written consent, or where required by law.

Disclosure may occur in the following circumstances:

• Compliance with court orders or legal proceedings;
• External audit or investigation processes;
• Requests made under the Access to Information Act;
• National security or public safety concerns;
• Crime prevention, investigation, detection, and prosecution;
• Assessment or collection of taxes or duties;
• Research, historical or statistical purposes;
• Where disclosure is otherwise required by law.

We may also share personal data with:

• Government Ministries, Departments and Agencies, professional advisors, attorneys-at-law, surveyors, contractors, and consultants.
• Regulatory bodies and tax authorities.
• Service providers offering document processing, ICT support, software hosting, records management, storage services, and confidential waste disposal.
• Postal and courier service providers.

Links to Other Websites

Our website may contain links to third-party websites. The privacy practices and guarantees described in this Privacy Notice do not apply to those sites. Users are encouraged to review the privacy notices of external websites before providing personal information.

Security of Your Personal Data

NWA is committed to protecting personal data through appropriate technical and organizational security measures.

Technical Safeguards

• Firewalls
• Backups
• Anti-virus protection
• Penetration testing
• Vulnerability assessments
• Anonymization
• Pseudonymization
• Encryption
• Access controls
• Regular software updates
• Periodic security audits

Organizational Safeguards

• Documented policies and procedures
• Employee training and awareness programs
• Routine assessments and evaluations
• Secure physical storage facilities
• Security cameras, alarms, and lock systems

Employees and third parties are granted access only to the information required to perform their duties and are bound by confidentiality obligations.

Although we employ reasonable safeguards, no security system can provide absolute protection against every possible security threat.

Changes to This Privacy Notice

NWA reserves the right to amend this Privacy Notice from time to time. Where significant changes occur, users may be notified by a website announcement, email communication, or other suitable means.

Users are encouraged to review this Privacy Notice periodically to stay informed about how personal data is protected and managed.

Disclaimer

While NWA has implemented industry-standard security measures, no method of data transmission over the Internet can be guaranteed to be completely secure.

In the event of a data breach, affected individuals will be notified as required by law, and appropriate actions will be taken to investigate, contain, and mitigate the incident.

Users are encouraged to protect their personal data by using strong passwords, maintaining secure devices, and remaining vigilant against phishing and other cyber threats.

Indemnity

While every reasonable effort is made to maintain the security of data transmitted to our systems, the Internet is not a completely secure environment. Accordingly, the NWA cannot guarantee the absolute security of information during transmission.

By engaging with the NWA, you agree to indemnify and hold harmless the Agency, its officers, employees, and agents from claims arising from the lawful use of personal data in connection with services or transactions conducted through the Agency.

Contact Us

Office of the Information Commissioner (OIC)