Data protection policy
Disclosure of data
Personal data may be lawfully disclosed where one of the following conditions apply:
- the individual has given their consent (eg. a member of staff or a customer has consented for the Council to correspond with a named third party
- there is a Power of Attorney in place which authorises a third party to act on behalf of the data subject in relation to that issue.
- this is allowed by legislation: the Data Protection Act 2018 sets out exemptions from UK GDPR at Schedules 2 and 3.