Who and what does this policy apply to?

Who and what does this policy apply to?

This policy applies to all employees, elected Members, contractors, agents and representatives and temporary staff, working for or on behalf of the council.

This policy applies to all personal information collected, created or held by the council, in whatever format. For example, paper, electronic, email, microfiche, film and however it is stored, for example, ICT system / database, SharePoint, OneDrive filing structure, email, filing cabinet, shelving and personal filing drawers.

This policy does not apply to information held by schools. If a request concerns Data Protection in a school or a wish to access school records, the requester should contact the Head Teacher of the relevant school.

Elected Members should note that they are also data controllers in their own right, and are responsible for ensuring any personal information they hold/use in their role as Elected Members is treated in accordance with Data Protection policy.

The Data Protection Policy does not apply to information about a person if they are deceased.

The DPA 2018 requires the council to maintain an ‘appropriate policy document’ that sets out how it will protect personal and special category (sensitive) data. This Data Protection Policy and our Special Category Data Protection Policy (PDF, 194.4 KB) meets the requirements of Schedule 1 of DPA 2018. The Criminal Convictions Data Policy (PDF, 221.8 KB) constitutes the ‘appropriate policy document’ for personal data relating to criminal convictions. These can be found on our website at information management and security policies.