A-Z of council services A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Tel: 0845 907 2244 | email: enquiries@erewash.gov.uk  | Site map

Data Protection Act

The Data Protection Act gives individuals certain rights regarding information held about them. It places obligations on those who process information (data controllers) while giving rights to those who are the subject of that data (data subjects). Personal information covers both facts and opinions about the individual.

We are registered with the Information as a Data Controller.

The eight principles of good practice

Anyone processing personal information must comply with eight enforceable principles of good information handling practice.
These say that data must be:

1. fairly and lawfully processed

2. processed for limited purposes

3. adequate, relevant and not excessive

4. accurate and up to date

5. not kept longer than necessary

6. processed in accordance with the individual’s rights

7. secure

8. not transferred to countries outside European Economic area unless a country has adequate protection for the individual.

Rights under the act

There are seven rights under the Data Protection Act:

1. The right to subject access

2. The right to prevent processing

3. The right to prevent processing for direct marketing

4. Rights in relation to automated decision-taking

5. The right to compensation

6. The right to rectification, blocking, erasure and destruction

7. The right to ask the Commissioner to assess whether the Act has been contravened.

Making a Subject Access Request (SAR)

A citizen has the right to ask to see the information we keep about that individual (the data subject). This is known as a Data Subject Access Request.

See our Data Protection Policy for full details.

If you have any enquiries about data protection or wish to make a Subject Access Request (SAR) please contact the Data Protection Officer on 0115 9316097 or email dataprotection@erewash.gov.uk.

How helpful was this page?

Advanced >

Site search