Privacy Notice

  1. Purpose of the registration?

Registration and identification of refugees is key for the people concerned, as well as for States to know who has arrived, and to facilitate access to basic assistance and protection. The process of registration enables the early identification of individuals with specific needs within a population and their referral to an available protection response. The very fact of being registered can protect against refoulement (forced return), arbitrary arrest and detention. It helps keep families together and assists UNHCR in reuniting separated children with their families.
Registration of asylum seekers and refugees is primarily a state responsibility carried out under national and international law, however UNHCR can also provide support as set out in the ExCom Conclusion on the Registration of Refugees and Asylum-seekers No. 91 (LII).

UNHCR and governments collaborate in a number of ways to achieve this. In Bangladesh, Rohingya refugees were initially registered by the Government of Bangladesh, Ministry of Home Affairs. Following the 2018 Memorandum of Understanding (MOU), the Government of Bangladesh (GoB) handed over the data to UNHCR, to establish a unique and trusted identity management system to enable protection and the delivery of humanitarian assistance. Since then, the registration has been a joint undertaking of UNHCR and GoB. Authorized UNHCR staff and government officials, including – but not limited to – the Office of the Refugee Relief and Repatriation Commissioner (RRRC) and Camp in Charges (CiCs), can access specified information depending on their functions. Without this collaboration, UNHCR and GoB would not be able to register new births and marriages, issue documents, approved relocation requests and otherwise facilitate camp administration, nor be able to undertake the biometric identification of new arrivals. This collaboration is essential to facilitate access to protection, services, assistance as well as to promote self-reliance for refugees and coordinate the humanitarian response.

The legitimate basis for the processing of personal data by UNHCR is ‘UNHCR’s mandate. This is because this data processing is linked to delivery of protection and essential assistance, services to refugees in line with UNHCR’s mandate, is for reasons of public order, security and based on the Personal Data Protection Ordinance 2025.

During the registration process, you were provided with information about the sharing of your basic biodata (including name, date of birth, and country of origin), biometrics and, in some cases minimum information, about your assessed vulnerabilities with other humanitarian actors for the purpose of providing you with protection services and assistance. You have the right to enquire further about which humanitarian actors will receive your information, the precise purpose for which your personal data is to be shared, and what personal data will be shared. Should you raise concern about the sharing of any personal data with humanitarian actors, UNHCR will address your concerns.

The confidentiality of refugees’ personal data is an important part of refugee protection. Neither UNHCR nor the GoB will share your biodata with the Government of Myanmar (GoM) unless specific conditions are met. This commitment of confidentiality is part of the Memorandum of Understanding on the Exchange of Personal Data 2018 (MoU) which forms the legal basis for the processing of your data between UNHCR and the GoB. It is only when UNHCR has assessed that conditions to return are conducive and you have taken an informed decision to voluntarily return to Myanmar that your biodata can be shared with the GoM. Please note that all your personal data are recorded and stored in ways that meet information security standards.

  1. What personal data will be collected from you?

Please note that during registration/biometric identification only authorized personnel are allowed to collect and update your records. We will collect the following data from you and your family members:

  1. Basic information: Name, date of birth, sex, ethnicity, country of origin, family composition, addresses and contact details.
  2. Other information: Disabilities or special protection needs (if applicable), work experience and skills, education, and languages.
  3. Biometrics: Individual photographs, ten-digit fingerprints and two iris scans. Iris scans are not taken for those who go through the biometric identification process.

Your biometrics are unique to you and allow UNHCR and GoB to establish your unique identity record in our systems for the purposes of providing essential protection services and assistance. Therefore, we treat your biometric data with utmost care. UNHCR stores your personal data in UNHCR’s Population Registration and Identity Management Ecosystem system (PRIMES). To maintain data accuracy and ensure effective protection, it is important that you keep your information up-to-date and inform UNHCR registration staff of any changes, for example regarding family composition or address.

  1. Who has access to your personal data? 

UNHCR works closely with GOB as part of the joint registration process under the 2018 Memorandum of Understanding. Only authorized UNHCR personnel and government officials can access your personal data depending on their functions.

Under an improved modality for data processing that will be rolled out in 2026, UNHCR will continue to store and manage your data for joint continuous registration, documentation, and humanitarian response. Relevant Government authorities (including Ministry of Foreign Affairs (MOFA), Ministry of Home Affairs (MOHA), Ministry of Disaster Management and Relief (MoDMR), Office of the Refugee Relief and Repatriation Commissioner (RRRC), Department of Immigrations and Passports (DIP) , Election Commission (EC), and Bangladesh Telecommunication Regulatory Commission (BTRC) will be able to access your data through a new database developed by the Bangladesh Computer Council (BCC) to support protection and access to services. Importantly, no new categories of personal data will be accessed by these authorities beyond what is already jointly processed today.

  1. Who do we share your information with?

We share your information with:

  1. UN Agencies and/or non-governmental organizations working in Bangladesh for Rohingya refugees: We share your personal data with other UN Agencies or non-governmental organizations best suited to provide you with the services (protection or assistance) you need.
  2. With Governments: To enable their responsibilities to provide protection and assistance to and seek durable solutions for refugees, data such as relevant biographical individual, biometrics and family-level information can be shared with the authorities of the host State or resettlement countries. As mentioned above, your personal data would only be shared with the Government of Myanmar (GoM) if UNHCR has assessed that conditions to return are conducive and that you have taken an informed decision to voluntarily return to Myanmar.

The personal data can be shared with the respective entities on the basis of UNHCR’s mandate and the data sharing Protocols between UNHCR and the respective entities. Your personal information shall be treated with utmost care in compliance with UNHCR’s Data Protection and Privacy Framework. Please note that some organizations who deliver assistance in partnership with UNHCR may identify you through your biometrics. Using a needs-based approach, UNHCR will provide them with limited and secure access to our system only when they deliver the assistance to verify your identity but will not transfer or share your biometrics outside our database to them.

Your personal data will be kept confidential and not be shared with any third parties beyond those described above without you being informed.

  1. How long do we retain your personal data?

Your personal data will be kept in UNHCR database as long as you are of concern to UNHCR and until it is necessary for the provision of protection and assistance and seeking of solutions in accordance with relevant regulations, rules, policies, administrative instructions, and other instruments established or adopted by the United Nations. After this, your file will be closed. Your file may be preserved in UNHCR Archives only when required for administrative, fiscal, legal, statistical or scientific research purposes; for accountability of UNHCR’s actions.

  1. Your rights

We are committed to respecting the confidentiality of your personal information. You have the following rights:

  1. Right to information: To request more information regarding handling your personal records.
  2. Right to access: You may request access to your personal data.
  3. Right to amend: You have the right to request to amend the data that you consider inaccurate, incomplete, or excessive.
  4. Right to object: If you feel uncomfortable providing your personal data or do not want it shared with organizations or institutions.
  5. Please note that refusals to the processing of personal data may in some circumstances lead to deregistration and, as a result, the discontinuation of protection and assistance. This is because the processing of some personal data is required for the GOB and UNHCR’s joint processes. More details can be provided on request.

Please and your requests, concerns will be evaluated in accordance with UNHCR Data Protection and Privacy Framework which sets out your rights as data subjects and how they are applied.

  • If you have concerns regarding the collection and use of your personal data, or if you would like to lodge a complaint about the use of your personal data by UNHCR, you may do so by approaching the UNHCR office or contacting us on [email protected].
  • All services provided by UNHCR, and partners are free of charge. In case someone approaches you for money or favors for providing UNHCR’s services, please contact:
  • Email address: [email protected]
  • Call UNHCR Helpline: 16670. Calling is free of charge.
  • Drop your message in confidential complaint boxes
  • You can also make a complaint with the Inspector General’s Office at [email protected]. 
  • You can always submit your request or complaint regarding your personal data; please visit UNHCR offices in the Registered Camps or speak to any UNHCR protection or field staff.
  • If you are unsure where to find information, ask a Site Management volunteer or a Community Outreach Member.
  • You can also reach UNHCR for any concerns and/or complaints through:
    • Email address: [email protected]
    • Call UNHCR Helpline: 16670. Calling is free of charge.
    • Drop your message in confidential complaint box.

Please see the Notice on improved data processing, Frequently Asked Questions Frequently Asked Questions on Improved Data Processing Modalities between the Government of Bangladesh and UNHCR modalities for your reference.