Privacy and Data Sharing

Data Processing means the collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of any data that identifies living individuals. 

Two templates have been created to include all of the information required to comply with data protection legislation (UK General Data Protection Regulation/Data Protection Act 2018) and to ensure that individuals are well informed about data processing activities undertaken by the council.  Depending on the nature of your service you can use either the: 

• Privacy Notice - template - Service specific - hosted (SharePoint)

• Privacy Notice - template - Service specific - disaggregated (SharePoint)

The Privacy Notice explains what data the council will collect, why we need it, how we will use it, who it will be shared with and the security measures the council has in place to protect it.  It is important that notices are reviewed when anything changes, for example a change in the law that requires the council to collect more or less data, a new contract or change of provider.

To complete the template, you may need assistance from the following:

• Commissioning - to check Service Specifications
• Contracts/Legal - to check contractual details with external providers
• Service Lead - to define what data is needed and the purpose for collecting it
• ICT/Systems - to ensure that data is being handled using the most secure methods available

If you need help with completing the Privacy Notice Template, you can get in touch with council's Data Protection Officer (dataprotection@cumberland.gov.uk).  

Otherwise, once you’ve finished email an MS Word copy to: dataprotection@cumberland.gov.uk.