Data Protection Act 1998 – Personal Information
One of the exemptions to the Freedom of Information Act concerns personal data – information we hold on an individual. Access to the information is protected under the Data Protection Act 1998, which gives an individual the right to ask what personal information is held about them, and subject to exemptions, must be supplied with that information within 40 calendar days. These are known as 'subject access requests'.
Under the Data Protection Act, 'personal data' is defined as certain types of data that relates to a living individual, that can be identified from the data or other information.
There is also a classification of 'sensitive personal data' that includes:
- Racial or ethnic belief
- Religious or other beliefs of a similar nature
- membership of a Trade Union
- Physical or mental health or condition
- Sexual life
- Offences (including alleged offences and the proceedings)
Some directorates hold more detailed information on case files where you may be receiving services from them.
For example, we may hold information about you if you have been using our education or social care services, and you can find out more information on your rights and how to access your records. Our County Record Office may hold past information about family members from a number of sources, see the main categories of information held.
For general subject access requests see our Information Request page.
Sharing your information to provide services
'Personal data' includes information we hold to contact you and process the services you require. See our Information Sharing page for more information.