What the council does to provide the information
Hart District Council is required to comply with your request within 1 month of receiving proof of identity (the time limit can be paused if clarification is asked for).
We must tell you whether we hold the information requested and, if we do, should provide you with purposes of processing, the categories of personal data being processed, the recipients or categories of recipient, the retention period, the lawful basis for processing, the source of data, whether automated decision-making is used or not and the safeguards provided where personal data is transferred to a third country (if applicable).
We should give you a copy of the information, but there may be occasions when you agree to visit us to view the information instead.
We are obliged to check whether any of the information is exempt as defined in the UK GDPR and cannot be provided after all.
The main exemption we must consider relates to other people’s rights under data protection. If your information contains details about other individuals, we must consider whether it would be lawful and fair to them to disclose it. We would normally seek their consent before making our decision.
Other exemptions we must consider relate to national security and defence, crime, taxation, prejudice of regulatory activity, legal professional privilege, the social work records exemption and health and education work records exemption.