You are Here : Council  >  Council and Democracy  >  Data Protection
Sunday , February , 25 2018

Carlisle City Council

The Data Protection Act 1998  imposes stringent requirements that any organisation holding personal data must comply with. The legislation states that all processing undertaken must be fair and lawful, accurate and up-to-date, and that the data is adequate, relevant, not excessive and is held for no longer than is necessary. It is also mandatory that appropriate technical measures are taken to prevent unauthorised or unlawful processing or disclosure of data. This includes accidental loss or destruction of, or damage to, personal data.

Personal data can only be processed if at least one 'condition for processing' applies. These conditions are set out in the Act and include consent, a legal obligation or the processing is necessary for the performance of a contract. The rules also introduce "sensitive personal data", which includes any information that details racial or ethnic origin, political affiliations, sexual orientation, religious or other beliefs. This data demands greater protection and one of the following must be true: an individual's explicit consent is required; is a legal requirement; to protect the vital interests of the individual. Where consent is obtained, the individual must be made fully aware of the purposes for which the data is to be used and of any recipients.

Data held in manual or paper form is subject to the Act.

Individuals' rights are enshrined in provisions to enable anyone to see a full description of the data held about him, on payment of a fee. This information has to be altered if it is inaccurate or likely to cause damage or distress (subject to an exemption).

Individuals can also request details of how automatic decision-making processes operate. This can impact on the use of data for direct marketing, either by mail or telephone. Compensation can be claimed for damage caused by breach of the Act.

Data Protection Policy

Carlisle City Council's Data Protection Policy is based on the Data Protection Act 1998. It should be read in conjunction with the Appendices and the Definitions Section, which contain details of some of the terms used throughout this policy. The policy document is maintained by the Council's Information Officer.

  • Definitions
  • Statement of intent
  • Fair and lawful processing
  • Consent
  • Security measures
  • Transfers overseas

More information on these definitions are available in the FAQ below, If you have any queries regarding the City Council's Data Protection Policy, please contact:

Information Officer
Civic Centre

Tel: 01228 817165
E-mail: [email protected]

  Data Protection - FAQ

Obtaining your information

You have a right under section 7 of the Data Protection Act 1998 to obtain a copy of information held about you by Carlisle City Council. This information can be in electronic format and/or manual records forming part of a 'relevant filing system'.

If you wish to obtain your own information from Carlisle City Council you can download the form (see downloadbale documents) and send it to the e-mail or postal address given below. To receive a copy of the form through the post, please contact the council's Corporate Information Officer.

Corporate Information Officer
Carlisle City Council
Civic Centre

Tel: 01228 817165

E-mail: [email protected]

It is important that we obtain a sufficient amount of information from you to enable us to locate the data and records that you require. Consequently, we would request that you fill in the subject access request form in the downloadable documents section below. Alternatively, you can download our form .

We charge a fee of £10 for this service. 

To ensure that you are identified as the data subject, we require that you provide proof of identification with your request. You can attend the Civic Centre for this proof to be checked and verified by the Corporate Information Officer or another officer. Alternatively you can send photocopies of the documents with your completed form.

Once we have received your completed form and payment we will send an acknowledgement. We are legally required to send you a copy of the information requested within 40 calendar days, however every effort will be made to provide it as quickly as possible. We will only release the information requested after we have your proof of identification.

If we can be of assistance with the completion of the form or you require any further information please contact the Corporate Information Officer at the above address.

If you wish to obtain care records, these are held by Cumbria County Council

This A to Z of services list provides links to service pages alphabetically