What is the GDPR?
The General Data Protection Regulation (GDPR) is a Europe-wide law that replaces the Data Protection Act 1998 in the UK. It includes the Data Protection Act 2018 (DPA 2018). The GDPR sets out requirements for how organisations like Parish Councils need to handle personal data. The Regulations came into force on 25 May 2018.
Under the GDPR, Talaton Parish Council (`the Parish Council`) is both a Data Controller and a Data Processor. As a Data Controller, we must provide Privacy Notices Privacy Notices
explaining to individuals how their data will be used and what rights they have.
The Parish Council has a adopted a policy with regard to the collection, storage and use of personal data. Policy
Data Protection Officer
Section 7(3) of the DPA 2018 says that Parish Councils are not public authorities for the purposes of the GDPR. As we are not a public authority for the purposes of the GDPR then we do not need to appoint a Data Protection Officer (DPO). We are still subject to data protection legislation however and we must ensure that we have sufficient staff and resources to discharge our obligations under the GDPR.
The Parish Council is registered as a Data Controller with the ICO. Our reference number is Z7260977. Our details can be seen on the public register.
Security under the GDPR
The GDPR requires personal data to be processed in a manner that ensures its security. This includes protection against unauthorised or unlawful processing and against accidental loss, destruction or damage.
The Parish Council has completed an assessment of personal data held. The assessment details what data, how and why it is collected and how the data is protected. To complement this log of personal data, we have also completed a GDPR risk assessment to identify how any risk to the security of personal data is managed. These documents are regularly reviewed.
The Freedom of Information Act 2000
The Freedom of Information Act 2000 received Royal Assent on 30th November 2000. The Act defines the public authorities that are covered by the Act and so are required to adopt and maintain a publication scheme. Paragraph 7, Part II of Schedule 1 of the Freedom of Information Act defined a "local council" within the meaning of the Local Government Act 1972 as a public authority
What is a Publication Scheme?
Under the Act, every public authority is required to adopt and maintain a Publication Scheme. This scheme provides the public with a structured listing of any information released, with authorities undertaking a commitment to make it available to all. The scheme must set out how the Parish Council intends to charge for providing the information. In this scheme, the term "publication" refers to documents available in a variety of formats. The Parish Council's publication scheme defines information that the Parish Council holds and which is accessible to members of the public. The Parish Council strives to be as open as possible with local government information and the work it does. The Parish Council wishes to introduce greater openness and to continue to seek ways to make even more information available to the public.
Publication Scheme under Freedom of Information