Data protection

The Data Protection Act 1998 gives legal rights to individuals (data subjects) in respect of personal data processed about them.

The act gives effect in UK law to EC Directive 95/46/EC (the 'Directive'). It received Royal Assent in July 1998, and came into force on 1 March 2000. It fully replaces the Data Protection Act 1984.

The Data Protection Act 1998 is designed to cover the collecting, storing, viewing, distribution, disposal and any other processing of personal data.

The act requires data controllers to follow eight key principles in the processing of personal data. It gives rights to individuals about whom information is recorded.

This applies to all individuals whether they are an employee, elected member or a member of the public.

Each individual has the right to access personal data, prevent processing likely to cause damage or distress and prevent processing for the purposes of direct marketing.

They also have rights in relation to automated decision taking, to take action for compensation if they suffer damage by any contravention of the Act by the data controller, to rectify, block, erase or destroy inaccurate data and to make a request to the Information Commissioner for an assessment to be made of the data controller if they feel that the Act has been contravened.

We have published an explanatory leaflet on how citizen rights under the Data Protection Act 1998 are handled by the authority.

The Personal Information Promise was launched in 2009 by the Information Commissioner to help to raise standards of data protection and strengthen public trust and confidence in the way organisations handle personal information.

Asking us for information we may hold about you

You can ask us for information we may hold about you by:


Writing to

The Data Protection Officer, Brent Civic Centre, Engineers Way, Wembley, HA9 0FJ.

We will inform you within 40 days if we store any personal information about you - although we may require proof of your identity and information to locate your personal data.


Should you be dissatisfied with the outcome of your request for information or the way we have processed your personal information please contact the council’s data protection officer at, or in writing to The Data Protection Officer, Brent Civic Centre, Engineers Way, Wembley, HA9 0FJ. If the council is unable to resolve the matter you have the right to complain to the Information Commissioner directly.

The Information Commissioner can be contacted by:

Email (please include your telephone number)


0303 123 1113 (local rate) or 01625 545 745 if you prefer to use a national rate number


01625 545 510

Writing to

The Information Commissioner
Wycliffe House
Water Lane
Wilmslow, Cheshire


Contact us form