Legal basis for processing
The Health & Safety team uses personal identifiable information about residents, businesses and users of its services to enable it to carry out specific functions relating to; health & safety; and public health and for which it is responsible.
Any personal information processed by the team is done so under Article 6(1)(e) of the General Data Protection Regulations (GDPR), because it is necessary to enable us to exercise our official authority, i.e.to undertake our various statutory functions, duties or powers as laid down by law. Any sensitive data (special category data) is only processed when it also falls under condition (g) of Article 9(2) of the GDPR, ie.where the processing is necessary for reasons of substantial public interest on the basis of legislation for which the team have statutory obligations.
Examples of the legislation under which the team have legal responsibilities include, but is not limited to:
Health and Safety at Work Act 1974}
and all Regulations made under it
The department also processes criminal offence data under Article 10 of the GDPR and maintains a comprehensive register of criminal convictions. It does so in its official capacity having regard to its enforcement duties.