The Data Protection Act is the law that covers the processing of personal data. It includes how the data is obtained, how it is stored, how it can be used and what can be disclosed. It also give certain rights to people whose personal data is being processed.
The Council is a Data Controller. This means we hold personal information about people for the purpose of providing appropriate services.