Data Protection

UK General Data Protection Regulation (UK GDPR) 2021

The council processes all of the personal information you provide in accordance with this regulation.  For further details please see our Privacy Policy.

Accessing my own information?

If you wish to view information that the council holds about you, you must make what is known as a 'subject access request' (SAR) or a 'personal information request' (PIR).

You are entitled to be told if any personal date is held about you AND if so:

• to be given a description of the information
• to be told for what purposes the information is processed
• to be told the organisations or types of organisations to which your information may have been disclosed.

You are also entitled:

• to be given a copy of the information with any difficult or technical terms explained
• to know, if the council is holding the information, where it came from
• to be given an explanation as to how any automated decisions taken about you have been made.

For full information about the General Data Protection Regulation you can visit the Information Commissioner’s website.

How do I make a request?

The council may ask for information it reasonably needs to verify your identity and to find the information.

You may also need to provide the council with information such as whether, for example, you are a customer or employee of the council.

An open-ended request for access such as “give me a copy of all the information you hold on me” will not be sufficient for the council to find the information. Information which may help might include details of information thought to be held, the relevant departments, dates of documents, relevant time periods etc.

When we have received your request, we must give you the information or a reason why the information cannot be given to you within 30 calendar days.

Sometimes, your personal information may contain information about other people. This is referred to as 'third party information'. You are only permitted to access information about you and we may have to withhold or edit information, so that it does not identify third parties.

Information that may be withheld

In principle, individuals have access to all personal data held about them; however, there are a few exceptions.

The council can withhold personal information, if providing you with the information could affect:

• the way crime is detected or prevented
• catching or prosecuting offenders
• assessing or collecting tax or duty
• the information identifies other people who have not consented to their information being passed on.

Will the council ever refuse my request?

The council is entitled to refuse to answer a request that is manifestly unfounded or excessive, particularly if the request is repetitive. Where the council decides that a request is manifestly unfounded or excessive the council will usually decline to comply with the request.

Can I make a request for someone else?

Yes, but we need to be absolutely sure that you are authorised by them to make the request. Proof must be in writing and signed by that person.

Can I request information about a deceased person?

You may only access your own information under the General Data Protection Regulation. Requests for other people’s information, including the deceased, will be dealt with under the Freedom of Information Act.

What if I am not happy with the way my request has been dealt with?

If you are unhappy with the way your request has been handled or you wish to object to the council's decision in the first instance, please visit our complaints page.