CCW & data protection
CCW takes its obligations under the Data
Protection Act (DPA) 1998 seriously. Our Knowledge Management Group
has responsibility for ensuring the Council keeps within the Act’s
We must comply with the eight data processing principles.
These say that personal data must be:
1. Fairly and lawfully processed;
2. Processed for limited purposes;
3. Adequate, relevant and not excessive;
5. Not kept for longer than is necessary;
6. Processed in line with the data subject’s rights;
7. Secure; and,
8. Not transferred to countries without adequate protection
Our staff have a duty to keep information about you confidential
and to maintain the security of that data. We will not release your
personal details to third parties without your consent. If you
request a copy of the information that we hold on you - known as a
Subject Access Request - you will receive information within 40
days of CCW receiving a valid request.
To be valid, requests must satisfy the following criteria:
- The request must be in writing.
- It must be from the data subject themselves (or a solicitor
acting on their behalf).
- There must be sufficient information to identify the individual
with confidence (e.g. to
be able to distinguish between multiple John Smiths).
- There must be sufficient information to be able to locate the
data. If the person is not well known to us then we may need to
know when they had contact with CCW and for what reason.
- Please enclose a cheque for £10 with your request.
Send requests to:
Access to Information Officer
Partnership Communication and Knowledge Group
Countryside Council for Wales
Maes y Ffynnon Penrhosgarnedd