Revenue and benefits management software - Fair processing notice
Under the GDPR, individuals have the right to be informed about how their personal data is used. This Fair processing notice explains:
- how the council will use any personal information collected about you during the migration of its existing data systems to a software as a service solution
- your data rights.
What type of personal data will be processed
The following types of personal data will be used during the migration to the software as a service solution:
- names
- contact information
- household composition
- income and savings
- receipt of any disability related benefits
- identifiers
- financial information
- online digital behavioural information
- criminal offence data.
Special category data that will be processed include health data.
Purposes for using personal data and how personal data will be processed
Personal data will be shared with Capita for the purposes of helping to administer revenues and benefits more efficiently using a cloud platform.
All data is encrypted efficiently at rest and in transit through a 256 Bit AES encryption. This aims to:
- boost collection rates
- speed up the processing of benefits for vulnerable people.
Data will be stored within relevant one cloud applications.
What are the lawful bases for processing personal data
Personal data will be used because processing is necessary for:
- compliance with a legal obligation to which the council is subject
- the performance of a task carried out in the public interest.
Special category data will be processed based on substantial public interest.
How is personal data obtained
Personal data will primarily be collected from existing on-premise revenues and benefits systems within the council. Other sources of data include:
- customers' housing benefit and revenues information and
- associated council tax and non-domestic rates records.
How long is personal data held for
Personal data will not be retained for more than a period of six years. The council will also manage the retention of personal data in line with its retention policy.
Your data rights
The GDPR gives you particular data rights over how your personal data is used. Please check the council’s Privacy policy.