What services are being provided?
The Emergency Planning Team delivers the Local Authority’s statutory responsibilities and duties as a Category 1 Emergency Responder as set out by the Civil Contingencies Act (CCA) 2004. The CCA 2004 relates to civil protection and contingency (emergency) planning. The local authority must plan and prepare for, respond to, and recover from emergencies. The statutory duties placed on the local authority as a Category 1 responder includes the anticipation and assessment of risks, production of plans for the purpose of controlling or mitigating the impact of emergency incidents and business disruptions as well as effectively responding to, and recovering from, an emergency. View the full list of statutory duties for Category 1 and 2 responders.
What will your information be used for and what is the lawful basis for requesting and using it?
Your information will be used for the purposes of delivering effective emergency response, protecting the citizens from harm. Our lawful or legal basis for using your information will be under article 6.1(e) of the GDPR:
“Public Task” “processing is necessary for the
performance of a task carried out in the public interest or in the exercise of official authority vested in the controller”, or Article 6.1(d) of the GDPR: “Vital interests” “processing is necessary in order to protect the vital interests of the data subject or of another natural person”, and authorised by the Civil Contingencies Act 2004.
What personal data do we need from you?
The Emergency Planning Team holds and maintains the contact details of organisations and individuals who can help provide emergency relief services which may be called upon in the event of an emergency, for example the contact details of key holders of pre-designated reception centres. The Emergency Planning Team commits to use anonymised data wherever possible during the risk assessment and planning process. However, during an emergency, in order to protect individuals from harm and to fulfil our statutory duties, we may collect and use, but not limited to, the following personal data:
•telephone numbers
•address
•postcode
•emergency contact details
•date of birth
•common identifier number / NHS Number / Social Care Reference Number
Special category (sensitive) data?
In order that we may deliver emergency response services appropriate to your needs we may also ask for the following ‘special category’ (sensitive) information about you which may include, but not limited to:
•health
•gender
Special category data will either be processed on the bases of article 9.2 (b) of the GDPR (where it is necessary in your vital interests) or article 9.2 (g) where it is necessary for reasons of substantial public interest.
We may also receive personal information about you from others
The CCA and accompanying regulations (Regulations 45 to 54 of The Civil Contingencies Act 2004 (Contingency Planning) Regulations 2005) places a duty on Category 1 and 2 responders to share information upon request which relates to the performance of their duties or functions relating to the preparedness, response and recovery stages of an emergency. Personal data can be requested and the responder receiving the request must comply unless an exemption applies. To help us provide emergency response services appropriate to your needs we may receive personal information about from others including, but not limited to, Category 1 and Category 2 responders, such as:
•other council departments/directorates e.g. Social Care •family members
•community members
•care providers
•emergency services
•NHS agencies
•utility companies
•other local authorities
Who will be using your personal information?
To help us provide effective emergency response and to ensure we provide the services appropriate to your needs both during an incident and throughout the longer-term recovery period the following organisations or departments may use the information you provide:
•Adult’s and Children’s Social Care
•Geographical Information Systems (GIS) in the instances of vulnerability mapping
•Health providers
With which other organisations may we share your data?
The CCA and accompanying regulations (Regulations 45 to 54 of The Civil Contingencies Act 2004 (Contingency Planning) Regulations 2005) places a duty on Category 1 and 2 responders to share information upon request which relates to the performance of their duties or functions relating to the preparedness, response and recovery stages of an emergency. Personal data can be requested and the responder receiving the request must comply unless an exemption applies. To help us provide emergency response services the following organisations or departments, but not limited to, may use the information you provide:
•emergency services
•NHS agencies
•other local authorities
•social care
•voluntary organisations
We may also share information with emergency services in other areas of the country in the event of a major incident where a person is considered to be at risk of harm.
How long will we keep your data?
We review personal data held for the purposes of emergency response activation at a minimum every three years and will destroy the personal data if it has been superseded. For legal and operational reasons all records associated with an emergency incident shall be archived for a period of no less than 15
years, as per the Council’s Emergency Management Policy. Where paper records exist, these shall be scanned to ensure a digital record is also available. For further information about how we use your information, your rights and who to contact if you have any concerns, please see our main Privacy Notice here.