How the law allows us to use your personal information

There are a number of legal reasons why we need to collect and use your personal information. Data protection law calls this the lawful basis for processing.

Generally, we collect and use personal information where:

• you, or your legal representative, have given consent
• you have entered into a contract with us
• it is necessary to perform our statutory duties or to exercise our ‘official authority’
• it is necessary to protect someone in an emergency
• it is required by law
• it is necessary for employment purposes
• you have made your information publicly available
• it is necessary for legal cases or enforcement action
• it is in the public interest
• it is necessary to protect public health
• it is necessary for archiving, research, or statistical purposes

If we have consent to use your personal information, you have the right to remove it at any time.

As a public body we will often be processing your data to perform our statutory duties or to exercise our ‘official authority’, so consent will not be required in this instance and therefore cannot be withdrawn.