General Data Protection Policy

Individuals’ Rights

GDPR gives individuals rights with some enhancements to those rights already in place:

• The right to be informed
• The right of access
• The right to rectification
• The right to erasure
• The right to restrict processing
• Right to data portability
• The right to object
• The right not to be subject to automated decision-making including profiling.

The two enhancements of GDPR are that individuals now have a right to have their personal data erased (sometime known as the and right to be forgotten) where their personal data is no longer necessary in relation to the purpose for which it was originally collected and data portability must be done free of charge. Data portability refers to the ability to move, copy or transfer data easily between different computers.

If a request is received to delete information, then the DPO must respond to this request within a month. The DPO has the delegated authority from the Council to delete information.

If a request is considered to be manifestly unfounded then the request could be refused or a charge may apply. The charge will be as detailed in the Council Freedom of Information Publication Scheme. The Parish Council will be informed of such requests.