Data Protection Act

Changes to Data Protection Regulations (UK GDPR)

New General Data Protection Regulation (UK GDPR) started on 25 May 2018. Data can seem a complex subject, but its part of everything we do. The UK GDPR puts customers' rights at the centre of data protection. It will change how businesses and local authorities handle the information held on you.

The information below summarises how we comply with the requirements of the General Data Protection Regulation and how you can obtain details of personal information we hold about you.

For more information: 

Data Protection Policy | Erewash Borough Council

What is New?

There are quite a few differences between the way things work now and the way they will work in the future.  The UK GDPR will make it much easier for you to get hold of the information organisations hold on you, and will give you the right to withdraw consent for your personal data to be used, when consent is used as the lawful basis for processing your data. You can request information held on you free-of-charge.

• You will be able to get hold of the information organisations hold on you much more freely.
• It will be simpler for you to withdraw consent for your personal data to be used.
• You will be able to ask for data to be deleted
• Councils and all organisations will need to obtain "explicit" consent when they process sensitive personal data.
• Personal data will include things such as IP addresses, DNA and small text files known as cookies
• It will be a criminal offence to re-identify anyone from anonymised or pseudonymised data.
• Both personal data and sensitive personal data are covered by UK GDPR.

What is personal data?

Personal data is information about a living individual from which that person can be identified. That information can be in a variety of formats. For example it might be on computer, in a paper filing system or in more unusual formats such as CCTV footage.

Why does Erewash Borough Council collect data about people?

We need to collect personal data to fulfil our functions in relation to the provision of services such as planning, environmental health, enforcement, licensing, collection of council tax and business rates, and payment of Housing Benefits.

What principles apply to the collection of personal data?  

There are six governing principles that must be followed in relation to the processing of data about individuals:

• Personal data should be processed fairly, lawfully and in a transparent manner.
• Data should be obtained for specified and lawful purposes and not further processed in a manner that is incompatible with those purposes.
• The data should be adequate, relevant and not excessive.
• The data should be accurate and where necessary kept up to date.
• Data should not be kept for longer than necessary.
• Data should be kept secure.