Data Protection
Data Protection & Security Policies
Devon County Council has a number of policies that have been adopted which govern the authority's handling of information. These policies have been implemented in order to ensure the correct handling of information and to ensure compliance with the Data Protection Act and other statutory requirements.
In this section
- Corporate Disposal Policy
- Data Protection Policy
- Personal Information Security Policy
- Publishing Information on the Web Policy
- Security Incident Reporting Policy
Corporate Disposal Policy
The purpose of this policy is to assist in the safe disposal of information, computer equipment and media owned by Devon County Council.
Data Protection Policy
The Council has established the Data Protection policy to support the authority's commitment to upholding the Data Protection Act. It is the personal responsibility of all employees (temporary or permanent), Members, contractors, agents and anyone else processing information on our behalf to comply with this policy. This policy continues to apply to employees and individuals, even after their relationship with the Council ends.
Personal Information Security Policy
Devon County Council has produced a Personal Information Security Policy, which states how the Council expects staff, contractors and agents of the council to behave when using equipment and accessing information.
Publishing Information on the Web Policy
This policy is intended to make clear the responsibilities of authors and approvers who publish information on the web and brings together elements of the Data Protection Policy 
(81KB - pdf help) and the Personal Information Security Policy (92KB - pdf help).
Security Incident Reporting Policy
This Policy is about the handling of incidents where there has been a loss of, or breach of, security relating to information belonging to Devon County Council.
The Authority has a responsibility to monitor all incidents that occur within the organisation that may breach security and/or confidentiality of information. All incidents need to be identified, reported, investigated and monitored. It is only by adopting this approach that the County Council can ensure that incidents of a particular nature do not keep re-occurring.
