Using your personal data
In deciding what personal data to collect, hold and use, we are committed to ensuring that we will:
- recognise that any personal data handled by the council is held on behalf of that person and that we ensure we respect that responsibility
- adopt and maintain high standards in respect of the handling and use of that personal data
- only collect, hold and use personal data where it is necessary and proportionate to do so
- securely delete any personal data when no longer needed
- keep your personal data secure and safe
- not unnecessarily and without good reason, infringe the privacy of individuals
- consider and address the privacy risks first when planning to use or hold personal information in new ways, such as when introducing new systems
- be open with individuals about how we use their information and who we give it to
- make it easy for individuals to access and correct their personal information
- ensure that there is effective safeguards and systems in place to make sure personal information is kept securely and does not fall into the wrong hands
- provide training to staff who handle personal information and treat it as a disciplinary matter if they misuse or don’t look after personal information properly
- put appropriate financial and human resources into looking after personal information to make sure we can live up to our promises
- regularly check that we are living up to our promises and report on how we are doing
We may disclose personal data to third parties, but only where it is necessary, either to comply with a legal obligation, or where permitted under the Data Protection Act, for example where the disclosure is necessary for the purposes of the prevention and/or detection of crime, or where it is necessary to allow a third party working for or on behalf of ourselves.
We will strive to ensure that any personal data in our care will be kept safe and that where your information is disclosed to a third party, we will seek to ensure that the third party has sufficient systems and procedures in place to prevent the loss of personal data.
Where we seek to disclose sensitive personal data, such as medical details, to third parties, we will do so only with your prior express consent or where we are legally required to do.