Data Protection
Haringey Council holds personal information about about residents and service users. All the information about you that we hold is protected under the Data Protection Act 2018.
What is the Data Protection Act 2018?
The Data Protection Act is the legal framework that ensures your personal information is used fairly and lawfully.
By law, all organisations that hold information about you must follow the eight principles set out in the Act. These principles make sure your rights are protected and state that all information must:
- be processed fairly and lawfully and in a transparent manner
- be obtained for specific, explicit and legitimate purposes
- be adequate, relevant and not excessive
- be accurate and where necessary kept up to date
- not be kept any longer than necessary
- be kept secure
Further information about the Data Protection Act can be found at the Information Commissioner’s website (external link).
Your data protection rights
You have the right to be informed about the collection and use of your personal data including why we process personal data, how long we will keep it and who it will be shared with.
You have the right to access your personal data so that you can be aware of and verify the lawfulness of the processing.
You have the right not to be subject to automated decision-making and to be informed about such decision-making. Haringey does not use technology to make decisions about individuals.
You have the right to object to processing and to the rectification and erasure of inaccurate information.
Further information about your data protection rights can be found at the Information Commissioner’s website (external link).
To exercise any of these rights in relation to information that Haringey Council holds about you, please contact Haringey’s Data Protection Officer.
Accessing your information
You are entitled to access the personal information that we hold about you so that you know what information we hold about you and can confirm that it is being held and processed lawfully.
There is no charge (except where requests are unreasonable or excessive). We must provide your information within one month (30 days). If the request is complex the timescale can be extended by a further two months to a total of 90 days.
Before we can deal with an access to personal information request (or Subject Access Request), we need to verify the identity of the person making the request. Haringey Council is a large organisation that holds information about individuals for many different reasons. We may require some information from you (such as which council service might hold information about you) to help us locate the information you are seeking.
Subject Access Requests
The Data Protection Act gives people the right to access information held about them. If you think that Haringey Council holds information about you and would like to access that information, please complete the following form:
Are you enquiring on behalf of someone else?
We must have the written consent of the person the information is about (the 'Data Subject') to give that information to someone requesting it on their behalf.
Twitter
Facebook
