The Data Protection Act 1998
The Data Protection Act 1998 gives you a right to access information which is held about you.
Access to your information
You have a right to request a copy of all information the Council holds about you. This is called a subject access request.
To do this you should complete an Information Request Form| (PDF, 44.2Kb) and send it to us with a fee of £10 with some proof of identity.
What we must do
The Act regulates how organisations like the Council collect, processes, stores and if appropriate, discloses personal information held electronically and in paper files. The Data Protection Register records how we do this.
Personal information is information that relates to a living individual who can be identified from that information, for example, names and addresses. The Act also protects 'sensitive' information you supply to the Council, including, information about your health, racial or ethnic origin and the commission or alleged commission of any offence.
The Act requires that anybody who processes personal information must keep to eight data protection principles:
-
Be obtained and processed fairly and lawfully
-
Be obtained for a specified and lawful purpose
-
Be adequate, relevant and not excessive for these purposes
-
Be accurate and kept up-to-date
-
Not kept for longer than is necessary
-
Be processed in accordance with the data subject's rights
-
Be kept safe from unauthorised access, accidental loss or destruction
-
Not be transferred to a country outside the EEA (the EU plus Norway, Iceland and Liechenstein), unless that country has adequate levels of protection for personal data.
More information is available on the Information Commissioner's Office|.
Data Protection Registration
The Council's Data Protection Registration entry is Z4840237|, this expires on 21 August 2010.