What gives us the right to use your personal information?

Under the UK General Data Protection Regulation (GDPR) and Data Protection Act 2018, the lawful bases we rely on for processing your personal information are:

• GDPR Article 6 (1) (c) Legal Obligation – we collect and lawfully process your personal data under the Equalities Act 2010 and the subsequent Public Sector Equality Duty 2011.
• GDPR Article 6 (1) (e) Public Task – we collect and lawfully process your personal data as it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us

For special category data:

• GDPR Article 9(2)b. Obligations and specific rights of the controller in the field of employment, social security and social protection law
• GDPR Article 9(2)g. Substantial public interest, based on law
• GDPR Article 9(2)h. Health and social care or treatment or the management of health or social care systems and services
• GDPR Article 9(2)i. Public health

The conditions in the DPA 2018 are:

• Part 2(8) – necessary for equality of opportunity,
• Part 2(9) – necessary for promoting or maintaining diversity in the racial and ethnic origins of individuals who hold senior positions in the organisation,
• Part 2(6)(2)(a) – exercise of a function conferred on a person by an enactment.

Gloucestershire County Council is the data controller under data protection legislation as the Council collects and processes personal information about you in order to provide services and meet their statutory and regulatory obligations. 

Gloucestershire County Council is registered as a data controller with the Information Commissioner’s Office (ICO). Our registration number is Z7334901.