Skip to content
Home > Corporate Information > Data Protection

Data Protection

Data Protection covers any form of personal information regarding living individuals. This information, whether it is on paper or in electronic format, has legal protection under the Data Protection Act 2018.

The Act contains eight basic principles regarding personal data. It has to be:

  • Fairly and lawfully processed (stored, used, destroyed)
  • Processed for limited purposes
  • Adequate, relevant and not excessive
  • Accurate and where necessary kept up to date
  • Not kept longer than necessary
  • Processed in accordance with the data subject's rights
  • Secure
  • Not transferred to countries outside the EEA without adequate protection

How to request access to your personal data

If you are the subject of personal data held by us, then you have the right to expect that we will give it due protection, and to know what that information is. If you would like access to the personal information held about you please make a 'Subject Access Request', which we will respond to within 30 calendar days.


Who is entitled to personal information?

In general, personal information will only be given to an individual, and then only with appropriate identification. Requests for information about a person other than yourself will normally be rejected except for the following common situations:

  • Parents may request information about a child under 16, but there is no automatic right to the data
  • A solicitor may request information on behalf of a client

What you will get

  • Copies of documents you are allowed to see under the Act (some documents will be provided by third parties or contain information about third parties and in general you will not be able to see those)
  • A catalogue of the documents you can see
  • A description of common disclosures
  • An explanation of any codes used in the documents

What is the process?

  • Complete the form and send it to the Data Protection Officer (DPO) with proof of identification as requested on the form;
  • The DPO checks the validity of the request, agrees the scope of the search and sets the 30 day time period when satisfied:
    • You are sent the results of the review, or in the case of an exceptional number of documents, you may be asked to attend the office to view the documents.
  • If you are unhappy with the outcome of the review, you can request an assessment of your case by the Office of the Information Commissioner

National fraud initiative

To enable us to tackle fraud and serious crime, all or part of the personal information provided to us by our customers may be disclosed or supplied to external organisations or bodies.

Associated Council Documents/Links


Tel: 01304 872318


. Keep Me Posted.