Data protection
Data protection legislation applies to the processing, holding and deletion of personal data that identifies a living individual. It applies to personal data regardless of the format in which the data is held in (in other words, it applies equally to paper and electronic records).
The legislation confers enhanced rights of privacy for an individual and certain obligations on the Data Controller (the body processing the personal data).
There are six data protection principles and an individual has the right to request to see their own information.
In order to fulfil our functions, there is a need for us to collect and use information about people who we work with (e.g. service users, employees, members of the public, suppliers).
We need to ensure that the handling of personal information complies with the data protection legislation.
Freedom of Information
The Freedom of Information Act 2000 covers rights of access to information held by public bodies. Members of the general public can request, and expect to receive, information held by the public body (subject to any exemptions and restrictions imposed by the Act).
The council is a public body and is therefore subject to the Freedom of Information Act 2000.
Data protection and Freedom of Information legislation is enforced by the Information Commissioner’s Office.