Forwarding emails from your gov.uk mailbox to another mailbox

Forwarding emails from your gov.uk mailbox to another mailbox

Whilst it is technically possible to automatically forward incoming emails to another mailbox from your gov.uk email address, the Central Digital and Data Office (CDDO) strongly advise against this due to several key security and privacy risks.

These include;
  1. Data Security: Government emails often contain sensitive or confidential information. Personal email services may lack the stringent security protocols required by government standards, increasing the risk of data breaches.
  2. Data Protection Legislation: Forwarding emails may violate data protection laws like the GDPR, as personal email services may not meet the compliance standards needed for handling sensitive government data.
  3. Risk of Phishing and Malware: Personal accounts are generally more vulnerable to phishing attacks. If a personal account is compromised, it could lead to unauthorised access to government information, which can be especially risky if those emails contain confidential attachments or links.
  4. Audit and Compliance Issues: Government communications often need to be auditable and stored securely. Forwarding emails to a personal account creates records that are outside the government’s secure system, hindering compliance with data retention policies and auditing requirements.
  5. Loss of Control over Data: When emails are moved to a personal account, the government loses control over how and where the data is stored, potentially resulting in accidental or intentional information sharing.
  6. Potential Legal Liability: Mishandling government data can have legal repercussions. Forwarding emails to a personal mailbox could lead to disciplinary action or legal consequences if data breaches or privacy violations occur.
  7. Risk of Information Leaks: Personal email accounts can be more easily accessed by non-government individuals, leading to potential leaks of sensitive or classified information.
Ensuring all communications stay within secure, government-approved channels minimises these risks and safeguards sensitive information.

If a councillor still chooses to automatically or systematically forward their gov.uk emails to another mail account, in the event of an FOI or Subject Access Request, the councillor may need to surrender their personal email account. This can be difficult and challenging administratively, causing large time and financial costs to the council and the individual.
    • Related Articles

    • Email Forwarding

      Overview If you're away you may want to forward your emails rather than delegate access to it. This means that someone else can receive your emails but not access the rest of your email account or send emails on your behalf. Note that this should ...
    • Transferring an old email archive to your new gov.uk mailbox (from Gmail)

      Overview When moving to a new gov.uk mailbox with Parish Online you may feel lost without your historic archive of emails. Fortunately there's a process for sucking up that email archive and storing it in your new gov.uk mailbox. This tutorial will ...
    • Transferring an old email archive to your new gov.uk mailbox (IMAP Provider)

      Overview When moving to a new gov.uk mailbox with Parish Online you may feel lost without your historic archive of emails saved with your old provider. Fortunately there's a process for sucking up that email archive and storing it in your new gov.uk ...
    • Connecting your mailbox to your email software

      Overview Your email mailbox can be added to any email software that supports IMAP. Recommended Apps For the best (and easiest) user experience, we recommend downloading the following apps to access your email on computers, tablets and mobile phones. ...
    • Suggested Code of Conduct for using gov.uk email addresses within local councils

      Overview This provides a suggested document that your council could adopt to guide staff and councillors on the use of your gov.uk email address. Please note that this suggested Code of Conduct is provided without warranty. Please contact SLCC, NALC ...