How do we protect your information?
We’ll do what we can to make sure we hold records about you (on paper and electronically) in a secure way. We’ll only make them available to those who have a right to see them. Examples of our security include:
- ‘Encryption,’ meaning that information is hidden so that it cannot be read without special knowledge (such as a password). This is done with a secret code or what’s called a ‘cypher’. The hidden information is said to then be ‘encrypted’
- ‘Pseudonymisation,’ meaning that we’ll use a different name so we can hide parts of your personal information from view. This means that someone outside of the Council could work on your information for us without ever knowing it was yours
- Controlling access to systems and networks allows us to stop people who are not allowed to view your personal information from getting access to it
- Training for our staff allows us to make them aware of how to handle information and how and when to report when something goes wrong
- Regular testing of our technology and ways of working including keeping up to date on the latest security updates (commonly called ‘patches’)
Where in the world is your information?
The majority of personal information is stored on systems in the UK. Although there are some occasions where your information may leave the UK in order to get to another organisation, or, if it’s stored in a system outside of the EU.
We have additional protections on your information if it leaves the UK ranging from secure ways of transferring data to ensuring we have a robust contract in place with that third party.
We’ll take all practical steps to make sure your personal information is not sent to a country that is not seen as ‘safe’ either by the UK or EU Governments.
In the unlikely event we would need to send your information to an ‘unsafe’ location we will always seek advice from the UK’s Information Commissioner first.
