Data subject rights

Data Subject Rights

Contractors are required to assist the council in protecting the applicable legal rights of Data Subjects, which are outlined in the relevant privacy notice for the service(s) being delivered. The rights are:

•  The right to be informed
•  The right of access
•  The right to rectification
•  The right to erasure (Right to be forgotten)
•  The right to restrict processing
•  The right to data portability
•  The right to object
•  The right to object to Direct Marketing
•  Rights related to automated decision making and profiling

If a Data Subject Access Request (SAR) relating to council data is received by the contractor, they should notify the council’s Information Management Service via secure email: foi@gloucestershire.gov.uk.

Please note: If using unsecure email (i.e. not encrypted) in the first instance, email the above contact to notify the council of request, without any personal data or commercially sensitive information.

The council may contact its contractors in relation to a SAR. In this instance, we will require the request to be actioned within 10 working days of the receipt of instruction.