General Data Protection Regulation
The General Data Protection Regulation (“GDPR”) took effect in the UK from 25 May 2018. It replaces the existing law on data protection (the Data Protection Act 1998) and gives individuals more rights and protection regarding how their personal data is used by councils. Local councils such as Sutton Cheney Parish Council must comply with its requirements, just like any other organisation.
The GDPR applies to all local councils because it is a public authority. The GDPR requires councils to appoint a Data Protection Officer (“DPO”). This is confirmed by new data protection legislation currently being debated in parliament. The Data Protection Act 1998 requires every data controller (eg organisation, sole trader) who is processing personal information to register with the ICO, unless they are exempt. Over half a million organisations are currently registered, including Sutton Cheney Parish Council.
Please see below the privacy notices as well as the ICO registration for Sutton Cheney Parish Council.