Data protection policy

Personal data may be lawfully disclosed where one of the following conditions apply:

• the individual has given their consent (eg. a member of staff or a customer has consented for the Council to correspond with a named third party
• there is a Power of Attorney in place which authorises a third party to act on behalf of the data subject in relation to that issue.
• this is allowed by legislation: the Data Protection Act 2018 sets out exemptions from UK GDPR at Schedules 2 and 3.