Data protection

We collect and use personal information to deliver Council services. When we do this, we must comply with the General Data Protection Regulation and the Data Protection Act 2018. This is called data protection law.

How we use your personal information

Telling people about how we use their personal information is a key part of data protection law. Our privacy notice tells you how we do this. This includes how we collect, share, and use your information.

We also have service privacy notices which give you more detail about what we do with your personal information.

Our record retention schedule tells you how long we keep your personal information for and why. 

How the law protects you

Data protection law says that we are only allowed to use your personal information if we have a proper reason to do so. Our record of processing sets out what personal information we use and the reasons for doing so.

Your data protection rights

Under data protection law you have certain rights. You have the right to object to how we use your personal information. You also have the right to correct, sometimes delete and restrict the personal information we use. Our privacy notice sets these out in more detail and describes how you can exercise these rights.

You also have the right to request information we hold about you. This is known as a subject access request. Our access to Information page provides more information about how to make a subject access request.

Making a complaint

You have a right complain to us and the data protection regulator, the UK Information Commissioner. Our privacy notice sets out contact details.

Do you have any comments about this page?

Help us improve edinburgh.gov.uk

  • The City of Edinburgh Council will only use this email address to respond to any issues raised.