Processing revenues and benefits using Robotic Processing Automation (‘RPA’) - Fair processing notice
Under the GDPR, you have the right to be informed about how your personal data is used. This fair processing notice explains:
- how the council will use any personal information collected about you when using RPA during the handling of revenues and benefits
- your data rights.
What type of personal data will be processed
The following types of personal data will be used during the RPA of revenues and benefits:
- names
- address
- date of birth
- National Insurance number
- income
- housing benefits awards
- names of children and dependants
- salary slips
- bank statements
- identification documents
- bank details
- tenancy details
- landlord details
- any relevant details about outstanding liabilities to the council.
No special category data will be processed.
Purposes for using personal data and how personal data will be processed
- Personal data will be shared with Delta 4 Services Limited (D4S) for automating revenues and benefits transactions using RPA solutions.
- Verify Earnings & Pensions (VEP) alerts and associated personal data will be integrated and hosted on the council’s IT systems.
- VEP solutions will process each caseload of data through integration with Academy systems administered by D4S.
- Completed cases will be assessed within Academy applications and notified through a report.
- Personal data generated throughout the processing will be stored within an encrypted database hosted within the council’s infrastructure.
What are the lawful bases for processing personal data
Personal data will be used because processing is necessary for:
- compliance with a legal obligation to which the council is subject
- the performance of a task carried out in the public interest.
How is personal data obtained
Personal data will primarily be collected from:
- applications to the council for revenues and benefits
- communications within relevant workflow systems.
How long is personal data held for
- All personal data is deleted from the RPA runtime solution upon completion of the processing of relevant revenues and benefits transactions.
- D4S will within 30 days of the expiration of the service contract either delete or return all personal data belonging to Slough residents and households to the council.
- The council will govern retention of all personal data in line with its retention policy.
Your data rights
The GDPR gives you particular data rights over how your personal data is used. Please check the council’s Privacy policy.