How we protect and store your information

We hold records about you (on paper and electronically) in a secure way. We only make them available to those who have a right to see them. 

We protect personal information in different ways. This includes: 

  • pseudonymisation – using a different identifier, such as a reference number, to hide parts of your personal information. This means that someone outside of the council could work on your information on behalf of us without ever knowing it was yours 
  • access controls to systems and networks – stopping people who are not allowed to view your personal information from getting access to it 
  • training and awareness for staff – how to handle information, and how and when to report if something goes wrong 
  • regularly updating technology infrastructure – includes updating network, server, PC and mobile devices with the latest security updates

Where your information is stored

Most personal information is stored on systems in the UK or the EU. However, there are some occasions where your information may leave the UK, either to get to another organisation, or if it's stored in a system outside of the UK. 

We have additional protections on your information if it leaves the UK. This includes secure ways of transferring data and ensuring we have a robust contract in place with that third party.

We take all practical steps to make sure your personal information is not sent to a country that is not seen as safe.