The law on data protection is covered by the EU General Data Protection Regulation (GDPR) and Data Protection Act 2018.
How we comply with data protection law
We must comply with data protection law in regards to any personal information we hold about you.
This means that:
- we will process information about you lawfully and fairly
- we will use your information for the purposes it was obtained
- we will not keep more information about you than necessary
- we will take steps to make sure that information about you is kept accurate and up to date
- we will not keep information about you for longer than necessary
- we will always try to make sure that personal information about you is kept securely
What is a subject access request?
You have the right to access personal information which we may hold about you. This is called a subject access request.
You are not entitled to receive personal information about someone else unless you have a legal power to do so. For example, this would be where you have a legal power of attorney over someone else.
How do I make a subject access request?
For your own protection we have to make sure that the request is genuinely from you. Therefore we will need two forms of identification to be sent along with your request. These should include something that identifies you, for example a passport or driving licence and something that confirms your address such as a utility bill.
Please send your request and forms of identity to firstname.lastname@example.org
If you prefer, you can send your request and forms of identity by post to the Data Protection Officer, Legal and Democratic Solutions, Civic Centre, Windmillhill Street, Motherwell, ML1 1AB.
How much will a subject access request cost?
There is no fee for making a subject access request.
When will I receive my information?
We will aim to respond to your request as quickly as possible and normally within one calendar month of the date when the request was received. This will be the date when the request was received along with proof of your identity.
We may sometimes have to contact you to clarify what information you are looking for.
Where the request is complex or if you have made more than one request at the same time we may extend the time limit for a response for a further two months.
For further information on how we use your information and your legal rights in respect of your information please visit our privacy and cookies page.
How to request information not about you
If you are looking for information which is not about you, you should consider making a request under the Freedom of Information (Scotland) Act 2002.
If you are looking for information about your child's school records, you should make a request either directly to the school or through Education headquarters.
For more information you can view our data protection policy and records retention schedule below.
Data Protection Policy
North Lanarkshire Council records retention schedule
This file may not be suitable for users of assistive technology. Please contact us to request an accessible format.