Data Protection covers any form of personal information regarding living individuals. This information, whether it is on paper or in electronic format, has legal protection under the Data Protection Act 1998.
The Act contains eight basic principles regarding personal data. It has to be:
- Fairly and lawfully processed (stored, used, destroyed)
- Processed for limited purposes
- Adequate, relevant and not excessive
- Accurate and where necessary kept up to date
- Not kept longer than necessary
- Processed in accordance with the data subject's rights
- Not transferred to countries outside the EEA without adequate protection.
How to Request Access to your personal data
If you are the subject of personal data held by us, then you have the right to expect that we will give it due protection, and to know what that information is. If you would like access to the personal information held about you please make a 'Subject Access Request', which we respond to within 40 calendar days.
A 'subject Access Request' can be made online and costs £10:
Who is entitled to personal information?
In general, personal information will only be given to an individual, and then only with appropriate identification. Requests for information about a person other than yourself will normally be rejected except for the following common situations:
- Parents may request information about a child under 16, but there is no automatic right to the data;
- A solicitor may request information on behalf of a client.
What you will get
- Copies of documents you are allowed to see under the Act (some documents will be provided by third parties or contain information about third parties and in general you will not be able to see those);
- A catalogue of the documents you can see;
- A description of common disclosures;
- An explanation of any codes used in the documents.
What is the process?
- Complete the form and send it to the Data Protection Officer (DPO), with a cheque, identification, etc, as requested on the form;
- The DPO checks the validity of the request, agrees the scope of the search and sets the 40 day time period when satisfied:
- You are sent the results of the review, or in the case of an exceptional number of documents, you may be asked to attend the office to view the documents.
- If you are unhappy with the outcome of the review, you can request an assessment of your case by the Office of the Information Commissioner.
National Fraud Initiative
To enable the Council to tackle fraud and serious crime, all or part of the personal information provided to the Council by its customers may be disclosed or supplied to external organisations or bodies.
Associated Council Documents/Links
Tel: 01304 872318