Decision details

Minor amendments to the Data Protection Policy

Reference: D809

Decision Maker: Leader of the Council

Decision status: Recommendations Approved

Is Key decision?: No

Is subject to call in?: No

Purpose:

To seek approval for the minor amendments made to the Council’s Data Protection Policy.

Decision:

That the revised Data Protection Policy (version 1.4) be approved.

Reasons for the decision:

To ensure the Council’s data protection policies and procedures are up to date with the recent legislation changes. To ensure the Council is compliant with the GDPR and the DPA 2018.

Alternative options considered:

An alternative option is that approval to amend Data Protection Policy is not granted. This would mean that the Council’s policy is out dated and would not reflect the recent legislative changes and requirements. The out dated policy would also include incorrect information on how the Council treats personal information. The failure to have an up to date policy document including the APD would mean that the Council would be in breach of the DPA 2018 and could open the Council up to enforcement action by the Information Commissioner’s Office and ultimately financial penalties.

Publication date: 14/02/2019

Date of decision: 14/02/2019

Accompanying Documents: