One of the biggest changes to UK data privacy law comes into effect on 25th May 2018.
The General Data Protection Regulation (GDPR) gives individuals more control over how their data is used and how they are contacted. The changes will also help to better protect your personal data. We have updated our privacy notices to reflect these changes. Individual specific privacy notices can be found on our paper and electronic forms, also see: General Data Protection Regulation statements . Here at Calderdale Council, you will be prompted to give consent before your data is processed unless a legal basis applies. If you subscribe to our mailing lists you will be contacted to ask for your preferences.
The General Data Protection Regulation (GDPR)
As part of the GDPR, all companies must review how they manage all personal data. This is to make sure they are GDPR compliant by 25th May 2018.
The GDPR will give you more control over your personal data
GDPR is all about giving you more control on how your personal data is used. You will have greater visibility and control over the personal data organisations hold about you – whether it is something as simple as your name, or as complex and sensitive as medical information. This means you can have greater confidence that information about you is accurate, up-to-date and properly managed.
The GDPR includes the following rights for individuals:
- the right to be informed - You can see what will happen to your data by reading the privacy Notice provided when we collect your information. The Privacy Notice will tell you why we are collecting your information, who we share it with and how long we will keep it for.
- the right of access - You can ask what information is held about you via a Subject Access Request; see: Data protection .
- the right to rectification - If you think something is wrong with the data we hold, such as incorrect address you can request that it is corrected.
- the right to erasure - You can withdraw consent at any time, unless there is a legal requirement for us to hold it.
- the right to restrict processing - You can pause the handling of your data whilst a review of your issue4 takes place.
- the right to data portability - You can request that data that we hold is easily transferred to another organisation.
- the right to object - As before you may still use the Councils complaints procedure to complain should you wish to or if your complaint is about the handling of your data you may write to our Data Protection Officer at email@example.com .
- the right not to be subject to automated decision-making - Instead of having a machine make a decision about you, you can ask for a person to review your information in order to make a decision.
You can also change your mind at any time
If you give an organisation permission to contact you, it does not mean you cannot change your mind in the future. Under the new rules, it should be easier to update your preferences on what you want to receive and how.