Data Protection
Haringey Council holds personal information about about residents and service users. All the information about you that we hold is protected under the Data Protection Act 2018.
What is the Data Protection Act 2018?
The Data Protection Act is the legal framework that ensures your personal information is used fairly and lawfully.
By law, all organisations that hold information about you must follow the six principles set out in the Act. These principles make sure your rights are protected and state that all information must:
- be processed fairly and lawfully and in a transparent manner
- be obtained for specific, explicit and legitimate purposes
- be adequate, relevant and not excessive
- be accurate and where necessary kept up to date
- not be kept any longer than necessary
- be kept secure
Further information about the Data Protection Act can be found at the Information Commissioner’s website (external link).
For more detailed information about the personal information that we hold and how we use it, please see our Record of Processing Activities page.
See also:
Your data protection rights
- You have the right to be informed about the collection and use of your personal data including why we process personal data, how long we will keep it and who it will be shared with.
- You have the right to access your personal data so that you can be aware of and verify the lawfulness of the processing.
- You have the right not to be subject to automated decision-making and to be informed about such decision-making. Haringey does not use technology to make automated decisions about individuals.
- You have the right to have inaccurate information corrected.
- You have the right to object to processing, to erasure of information, to restrict processing and to data portability.
Further information about your data protection rights can be found at the Information Commissioner’s website (external link).
To exercise any of these rights in relation to information that Haringey Council holds about you, please contact Haringey’s Data Protection Officer.
Accessing your information
You are entitled to access the personal information that we hold about you so that you know what information we hold about you and can confirm that it is being held and processed lawfully.
There is no charge (except where requests are unreasonable or excessive). We must provide your information within one month (30 days). If the request is complex the timescale can be extended by a further two months to a total of 90 days.
Before we can deal with an access to personal information request (or Subject Access Request), we need to verify the identity of the person making the request. Haringey Council is a large organisation that holds information about individuals for many different reasons. We may require some information from you (such as which council service might hold information about you) to help us locate the information you are seeking.
Subject Access Requests
The Data Protection Act gives people the right to access information held about them. If you think that Haringey Council holds information about you and would like to access that information, please complete the following form:
Are you enquiring on behalf of someone else?
We must have the written consent of the person the information is about (the 'Data Subject') to give that information to someone requesting it on their behalf.
Page last updated:
Give us feedback about this page
Please note if you have a service issue you need help with then please visit our contact pages.
Overall, how easy was it to get the help you wanted today?
* = response required
