What is the GDPR?
The General Data Protection Regulation (GDPR) is a Europe-wide law that replaces the Data Protection Act 1998 in the UK. It includes the Data Protection Act 2018 (DPA 2018). The GDPR sets out requirements for how organisations like Parish Councils need to handle personal data. The Regulations came into force on 25th May 2018.
Under the GDPR, the Parish Council is both a Data Controller and a Data Processor. As a Data Controller, we must provide Privacy Notices explaining to individuals how their data will be used and what rights they have. These Privacy Notices may be viewed in the document table below.
The Parish Council has also adopted a number of policy statements with regard to the collection, storage and use of personal data. These policy statements may be viewed in the document table below.
Data Protection Officer
Section 7(3) of the DPA 2018 says that Parish Councils are not public authorities for the purposes of the GDPR. As we are not a public authority for the purposes of the GDPR then we do not need to appoint a Data Protection Officer (DPO). We are still subject to data protection legislation however and we must ensure that we have sufficient staff and resources to discharge our obligations under the GDPR.
The Parish Council has currently decided to implement a contract service agreement with the Local Council Public Advisory Services (LCPAS) to provide GDPR support and to act as the Council’s DPO as required. A copy of the service agreement may be viewed here.
Information Commissioner’s Office (ICO)
The Parish Council is registered as a data controller with the ICO. Our reference number is ZA473785. Our details can be seen on the public register here and in our registration entry details document below.
Security under the GDPR
The GDPR requires personal data to be processed in a manner that ensures its security. This includes protection against unauthorised or unlawful processing and against accidental loss, destruction or damage.
The Parish Council has completed an assessment of personal data held. The assessment details what data, how and why it is collected and how the data is protected. To complement this log of personal data, we have also completed a GDPR risk assessment to identify how any risk to the security of personal data is managed. Both of these documents are regularly reviewed.
General Data Protection Regulation Documents
|115||Allotment Tenant Privacy Notice||N/A|
|116||Assessment of Personal Data Held||N/A|
|117||Computer & Telephone Misuse Policy||N/A|
|118||Email Contact Privacy Statement||N/A|
|119||Employee Privacy Statement||N/A|
|120||GDPR Jargon and Acronym Buster||N/A|
|121||GDPR Risk Assessment||N/A|
|122||General Data Protection Awareness Checklist for Councillors||N/A|
|123||General Privacy Notice||N/A|
|124||ICO Registration Certificate 2019-20||100Kb|
|125||Information Protection Policy||N/A|
|126||Job Application Privacy Notice||N/A|
|126||New Councillor Privacy Notice||N/A|
|128||Removable Media Policy||N/A|
|129||Social Media and Electronic Communication Policy||N/A|
This is the unique identifier of the document within the library. Use this number if you need to report an issue with a document.
This is the title of the document. Select the name to view and or download the document in a separate window.
This is the format of the document file. If you are using a mouse, hover over the type image to see a description of the document type. See below for more information on the Document Types.
This is the size of the document file in Kilobytes (Kb) or Megabytes (Mb). The size is N/A if the document is in one of the Google formats
The List Length
The document list is initially displayed with the first 10 entries. The Show Entries drop-down selection box above the document list may be used to show more (or less) entries. The number of entries currently shown and the total number of entries in the list is displayed below the document list.
The Previous and Next buttons below the document list may be used to navigate between the list pages if not all the entries are shown.
The documents are initially listed in a pre-defined order. The list order may be reversed by selecting the Document Name column heading. The up/down arrow on the right side of the colum heading indicates the current sort direction.
Note that changing the sort direction affects all the documents in the list, not just those that may be currently visible.
The Search box above the document list may be used to find any document in the list. All list columns are included in the search. The search results (those documents that match the search criteria entered) are displayed as the search criteria are entered.
Remove all text from the Search box to display all the list documents again.
Note searching affects all the documents in the list, not just those that may be currently visible.
Documents with the type are [simple_tooltip content='Portable Document Format']PDFs[/simple_tooltip]. PDF is a cross-platform file format developed by Adobe. Documents from any application can be converted to PDF format. PDF documents retain the original appearance/layout/print quality independent of the files native application and platform.
Documents with the type are [simple_tooltip content='A word processing format like MS Word']Google Docs[/simple_tooltip].
Documents with the type are [simple_tooltip content='A spreadsheet format like MS Excel']Google Sheets[/simple_tooltip].
Documents with the type are [simple_tooltip content='A presentation format like MS Powerpoint']Google Slides[/simple_tooltip].
Documents with the type are [simple_tooltip content='A form that you complete']Google Forms[/simple_tooltip].
All documents in a Google format are automatically converted to a specified format when downloaded.
The GDPR compliance is one of the Parish Council’s ongoing projects. Progress on the project can be seen by selecting the GDPR project page.