This council is registered with the data controller ICO
If you’re concerned about how an organisation is handling your personal data Contact the ICO for advice or to make a complaint.
ICO
Telephone: 0303 123 1113
Textphone: 18001 0303 123 1113
Monday to Friday, 9am to 5pm
Find out about call charges
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
General Data Protection Regulation: https://www.gov.uk/data-protection
In the UK, data protection is governed by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Everyone responsible for using personal data has to follow strict rules called ‘data protection principles’ unless an exemption applies. There is a guide to the data protection exemptions on the Information Commissioner’s Office (ICO) website.
Anyone responsible for using personal data must make sure the information is:
used fairly, lawfully and transparently
used for specified, explicit purposes
used in a way that is adequate, relevant and limited to only what is necessary accurate and, where necessary, kept up to date kept for no longer than is necessary handled in a way that ensures appropriate security, including protection against unlawful or unauthorised processing, access, loss, destruction or damage There is stronger legal protection for more sensitive information, such
as:
race
ethnic background
political opinions
religious beliefs
trade union membership
genetics
biometrics (where used for identification) health sex life or orientation There are separate safeguards for personal data relating to criminal convictions and offences.
Your rights
Under the legislation, you have rights in relation to your personal data, with some exceptions. These include the right to:
be informed about how your data is being used access personal data have incorrect data updated have data erased stop or restrict the processing of your data data portability (allowing you to get and reuse your data for different
services)
object to how your data is processed in certain circumstances You also have rights when an organisation is using your personal data
for:
automated decision-making processes (without human involvement) profiling, for example to predict your behavior or interests
Data Protection Act 2018:
https://www.legislation.gov.uk/ukpga/2018/12/contents
Overview
(1)This Act makes provision about the processing of personal data.
(2)Most processing of personal data is subject to the [F1UK GDPR].
(3)Part 2 supplements the [F2UK GDPR].
(4)Part 3 makes provision about the processing of personal data by competent authorities for law enforcement purposes F3....
(5)Part 4 makes provision about the processing of personal data by the intelligence services [F4(and certain processing carried out by competent authorities jointly with the intelligence services)].
(6)Part 5 makes provision about the Information Commissioner.
(7)Part 6 makes provision about the enforcement of the data protection legislation.
(8)Part 7 makes supplementary provision, including provision about the application of this Act to the Crown and to Parliament.