General Data Protection Regulation (GDPR) and the Data Protection Act 2018

Legislation requires the Council to respect the principles of fair processing when handling your personal information.   This also guarantees individuals certain rights in relation to the processing of their personal data, including the rights of access, rectification and erasure.

Information about your rights under GDPR and the Data Protection Act 2018 can be found on the Information Commissioner’s Office website.

Do you want to know what information the Council holds about you?

 The Council has a duty under data protection legislation to provide individuals with access to information about themselves on request.  Usually, personal information will only be given to the person who is the subject of the data, and then only when their identification has been verified.  Requests for information about a person other than yourself will usually be rejected except in the following circumstances:

  • someone with parental responsibility may request information about a child under 13, but there is no automatic right to the data
  • a solicitor may request information on behalf of a client with their client’s written consent
  • requests from other individuals acting with the explicit written consent of the data subject or a registered Lasting Power of Attorney or who have been made a Deputy by the Court of Protection.

You will receive:

  • copies of information you are allowed to see
  • a description of the information disclosed to you
  • a description of how and why your information is being processed, who has access to it and / or an explanation of any codes used in the documents you have received

 Do you think the data we hold about you is inaccurate or incomplete or do you want us to stop processing it or erase it?

 If you think the data we hold about you is inaccurate or incomplete, we will need you to tell us why and usually provide evidence to support this.  Additionally, you can ask us to erase or stop processing your data however we can only do this where we do not have a statutory authority (legal basis) for doing so.

To view the Council’s Rights of Access, Rectification and Erasure (RARE) Request Procedure please click here.

What is the process to exercise your right to access, rectify or erase your personal data?

  1. Firstly it would help us if you could complete the form below which will ensure we receive all the information we need to start your request:Rights of Access, Rectification and Erasure Request (RARE) Form

    This form can be used for all requests to access data we hold about you.

  2. Send your form, together with the relevant proofs of identity as required to us following the instructions on the form.
  3. We will check the documentation and validity of your request and contact you if any further information or evidence is needed. We will return any original documents promptly by First Class Signed For delivery.  We will then commence your request and complete it within 30 calendar days.
  4. If you are dissatisfied with the information provided to you or how we have handled your request, you can ask us to review it within 3 months of the date your request was completed. We will then carry out a review and provide you with a response within 20 working days.
  5. If you are unhappy with our handling of your request or the outcome of any review, you can request an assessment of your case by the Information Commissioner’s Office.