General Data Protection Regulations

The General Data Protection Regulation) took effect in the UK on 25 May 2018. It replaced the existing law on data protection (the Data Protection Act 1998) and gives individuals more rights and protection regarding how their personal data is used by councils. Local councils and parish meetings must comply with its requirements, just like any other organisation.

NALC produced a number of explanatory documents to help with the introduction and implementation of the regulations and worked closely with the Office of the Information Commissioner to ensure that the obligations were as proportionate as possible for local councils. This resulted in the removal of the obligation to appoint a Data Protection Officer – a change very much welcomed by local councils.

The Toolkit is an invaluable tool for local councils containing clear statements of the actions they need to take and providing model forms and documents where needed.

Any queries regarding the Regulations can be directed to the Information Commissioner or to ChALC.

Other General Data Protection documents you may find useful are:

Personal Data Management and Audit Policy
Basic Privacy Notice
Detailed Privacy Notice