Bringing the Community together
The General Data Protection Regulation (GDPR) is a new regulation which has been incorporated into the Data Protection Act (DPA) 2018. It strengthens the previous Data Protection Act 1998 (DPA) and will give individuals more rights and protections. It sets out the requirements for how all organisations handle personal data and came into effect as of 25th May 2018.
The GDPR applies to personal data which covers any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier.
The GDPR requires personal data to be processed in a manner that ensures its security. This must include protection against unauthorised or unlawful processing and against accidental loss, destruction or damage.
The GDPR requires organisations to have a valid basis in order to process personal data. There are six lawful bases for processing data and the Parish Council will ensure that it uses the basis the most appropriate when processing such data.
Lawful Basis for Processing Data:
For more details on the lawful basis used by Gt Barton Parish Council for processing personal data please read the document here.
The GDPR creates some new rights for individuals and strengthens some of the rights that currently exist under the DPA. the following rights for individuals:
For a copy of the retention periods for all data, including personal data, view Gt Barton's Data Retention Policy.
The GDPR introduces the ‘right of access’ for individuals and from 25 May, data subjects will have the right to request:
A Subject Access Request (SAR) is a request for personal information that the Parish Council may hold about an individual. If an individual wishes to exercise their subject access right, the request must be made in writing. The purpose of a SAR is to make individuals aware of and allow them to verify the lawfulness of processing of their personal data. Under the GDPR and the current Data Protection Act (DPA), individuals have the right to obtain confirmation as to whether personal data is being processed.
NHS Track and Trace Privacy Notice - To support NHS Test and Trace (which is part of the Department for Health and Social Care) in England, we have been mandated by law to collect and keep a limited record of staff, customers and visitors who come onto our premises for the purpose of contact tracing.