The Data Protection Act 2018 and the General Data Protection Regulation (GDPR) gives legal rights to individuals (data subjects) in respect of personal data processed about them.
The data protection Act came into force on 23 May 2018 and the GDPR came into force on 25 May 2018. Collectively, they replace the Data Protection Act 1998.
The Data Protection Act and the GDPR (referred to as the Legislation) are designed to cover the collecting, storing, viewing, distribution, disposal and any other processing of personal data.
The Legislation requires data controllers and data processors to follow six key principles in the processing of personal data. It gives rights to individuals about whom information is recorded.
This applies to all individuals whether they are an employee, elected member or a member of the public.
Each individual has the right to be informed, access personal data, erase personal data, obtain data under data portability, prevent processing likely to cause damage or distress and only opt-in for the purposes of direct marketing.
They also have rights in relation to automated decision taking, to take action for compensation if they suffer damage by any contravention of the Act by the data controller, to rectify, block, erase or destroy inaccurate data and to make a request to the Information Commissioner for an assessment to be made of the data controller if they feel that the Legislation has been contravened.
We have published a data protection leaflet on how citizen rights under the Legislation are handled by the authority.
Data Protection Officer
Brent Council’s Data Protection Officer is
The Data Protection Officer, Brent Civic Centre, Engineers Way, Wembley, HA9 0FJ.
020 8937 1402
Asking us for information we may hold about you
You have a right to access your personal data and relevant supplementary information. This is known as a Subject Access Request. Further information can be found at www.ico.org.uk.
You can make a request by completing a Subject Access Request and emailing it to the Data Protection Officer at email@example.com, or by post to the Data Protection Officer, Brent Council, Civic Centre, Engineers Way HA9 0FJ.
You should receive a response within one month, unless a different period applies as described under the ICO’s SARs code of practice.
Should you be dissatisfied with the outcome of your request for information or the way we have processed your personal information please contact the council’s data protection officer at firstname.lastname@example.org, or in writing to The Data Protection Officer, Brent Civic Centre, Engineers Way, Wembley, HA9 0FJ. If the council is unable to resolve the matter you have the right to complain to the Information Commissioner directly.
The Information Commissioner can be contacted by:
email@example.com (please include your telephone number)
0303 123 1113 (local rate) or 01625 545 745 if you prefer to use a national rate number
01625 545 510
The Information Commissioner
Should you be dissatisfied with the outcome of your request for information or the way we have processed your personal information please contact the council’s data protection officer at