Working with personal data

Everyone at the council has a responsibility to protect data.

Data protection means keeping personal information safe and secure. This could be things like:

• names
• addresses
• contact details
• bank details
• other details that might identify someone

We take data protection seriously to ensure that everyone's personal information is kept safe and used responsibly. It's important to know that there are laws in place to protect personal information, such as the UK General Data Protection Regulation (UKGDPR), which sets out rules for how personal data should be collected, used, and stored. 

You can submit a request to the Information Governance team for help and advice on how to manage data safely and securely.  

Find out more about Data Privacy Impact Assessment (DPIA) and the Information Governance Activity Evaluation (IGAE). 

How we define personal data 

Read the definition of personal data processed under the Data Protection Act 2018. 

What is personal data? (PDF, 161.04KB)

Individuals’ data and rights 

Data protection legislation sets out everyone’s rights regarding the collection and storage of their own personal data and the council’s obligation to be transparent about that data. Our Data protection subjects rights guidance explains those rights and what the council has to do to protect them.  

Data protection subject rights (PDF, 128KB)

Consent and data 

This guidance sets out the legal basis for reliance on consent and explains what procedures to follow when consent does not reliably cover the processing of data.  

Guidance on consent (PDF, 220KB)