Information Governance

Under the Data Protection Act 2018, you have the right to find out what information the government and other organisations store about you. 

Data Protection is the fair and proper use of information about living people. Everyone responsible for using personal data has to follow strict rules called ‘data protection principles’ which are set out in the UK General Data Protection Regulation (UK-GDPR) and have been incorporated into the Data Protection Act 2018. The Council applies the data protection principles in its processing of personal data.  

One of these principles is the right to be informed about the collection and use of personal data, including what we will use it for, how long we will keep it and who we may share it with. The Council fulfils this requirement by creating publicly available Privacy Notices, which can be found here.

 

Under the Data Protection Act 2018, you have the right to find out what information the government and other organisations store about you. More information regarding your information rights and how we process special category and law enforcement data, together with any published Data Protection Impact Assessments can be found here.

This page lets you know how you are able to make a request under the Freedom of Information Act 2000 or the Environmental Information Regulations 2004.

Records Management is the term used for the management and control of records, these can be in electronic or paper format.

Records retention is a practice by which organisations maintain confidential records for set lengths of time, and then employ a system of actions to either redirect, store or dispose of them. All information held by Doncaster Council has a retention period, this ensures that we only ever keep the information we are supposed to for the time set out in either legislation or is common practice for the Council.  The document in the Downloads & Resources section of this page lists the current retention guidelines the Council follows.

A Senior Information Risk Owner (SIRO) is a professional who has responsibility for implementing and managing information risks within the organisation. The SIRO role is mandatory for public sector organisations such as the City of Doncaster Council. The SIRO will put the needs of the organisation at the forefront of their mind and take a risk based approach.

The City of Doncaster Council has a SIRO Board made up of assistant directors which has been implemented to provide strategic guidance to the SIRO and Caldicott Guardians on all matters concerning Records Management Strategy and Information Management, Assurance and Governance.  This includes the following: Data Protection, Freedom of Information, Information Security, Information Management and Records Management.