Data Protection and Local Authorities in the United Kingdom

Abstract

This chapter is specially designed to provide you, the reader, with a lucid description of how data protection is viewed through the lens of a local authority. Within it’s four sections the chapter explains why local authorities process personal information and what it does with it, how it protects it and what happens when it is not protected. Personal data is a valuable commodity. As creatures of statute, local authorities derive their powers either from the Act of Parliament, which sets them up, or from other legislation regulating their activities. In this twenty-first century’s information society, organisations including local authorities are acutely aware of the power of information and their obligations to it.

At a time when councils are increasingly working with community partners, when data is shared it is vital that they uphold their legal responsibilities under the Data Protection Act. Failures not only put local residents’ privacy at risk, but also mean that councils could be in line for a sizeable monetary penalty. We must also consider the detrimental impact these breaches continue to have on the individuals affected. Disclosing details about someone’s social housing status can be upsetting and damaging for those affected. To help tackle this issue I’ve submitted a business case to the government to ask for them to extend my compulsory audit powers. (Christopher Graham, Information Commissioner, Excerpt of the Information Commissioner’s Office Press Release of 10^th February 2012)