Data protection and security

Data protection laws are in place to protect your privacy by regulating how your personal data is collected, stored and used by Devon County Council.

Your data protection rights

You have rights under data protection law. These include the right to:

  • access your personal data
  • request correction or deletion
  • object to how your data is used
  • request restriction of processing

Find out more about these rights and how to access them.

You can also obtain independent advice on your data protection rights from the Information Commissioner’s Office.

To find out how to access your personal data, please visit access your personal data.

If you are trying to locate a friend, family member or loved one, please refer to our locating friends and family guidance.

Complaints about how your personal data is handled

What is a data protection complaint?

A data protection complaint is when you are unhappy with how we have handled your personal data. This might include concerns about how your information has been used, shared, or kept, or if you believe information about you is inaccurate.

For example, you might think that:

  • we have shared your data incorrectly
  • your personal data is inaccurate
  • we have not responded properly to your request for your information
  • your data has not been kept secure

If you are unsure whether your concern is a data protection complaint, please contact us and we will help.

Find out more about how to make a data protection complaint.

Data protection breach

A data protection breach is different to a data protection complaint. It happens when something goes wrong with personal data, for example, if information is lost, shared with the wrong person, or accessed without permission.

Some situations may involve both a complaint and a data breach. If you are unsure, you can contact us and we will direct your concerns to the right team.

How to report a data breach

If you believe there has been a data breach involving Devon County Council, please report it to us as soon as possible.

Report it online using our security incident reporting form or email us information.governance@devon.gov.uk.

Please provide as much detail as you can, including when the incident happened and what information may be involved. We will review the information and take appropriate action.

Data Protection Officer

Devon County Council is required by law to have a Data Protection Officer (DPO)

The DPO:

  • advises the Council on data protection law
  • monitors compliance
  • is the contact point for the ICO

Contact details

Data Protection Officer
Devon County Council
County Hall
Topsham Road
Exeter
Devon, EX2 4QD

Telephone 01392 383792 or email information.governance@devon.gov.uk.

Security

We have appropriate technical and organisational measures in place to protect personal data, including:

  • data protection and cyber security policies
  • mandatory staff training
  • secure email systems
  • controlled access to systems
  • monitoring and audit processes

Further details of the technical security controls that the Council has in place is outlined on our security webpage.

Privacy and transparency

For more information:

Requests for personal data for crime prevention and detection

Data protection law allows Devon County Council to share personal where this is necessary for:

  • preventing or detecting crime
  • investigating offences
  • supporting the prosecution of offenders

Find out more about how to request data for crime prevention and detection.