Issue - meetings

The Committee was informed that, at its meeting on 12 March 2020, the Joint Staff Consultative Group had considered a revised Data Security Breach Management Policy and Procedure and recommended that the Committee adopt the revised Procedure.

The Policy was designed to ensure that all personal data the Council processed, including that of colleagues and customers, was managed appropriately and in compliance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (DPA), collectively referred to as ‘Data Protection legislation’.

This policy applied to all users of the Council’s information, data, information systems and its physical buildings. It applied not only to staff and Members, but also, where appropriate, contractors, agency staff, service providers, consultants and anyone else engaged to work in the organisation. Its scope encompassed data, information, software, systems, and paper documents.

RESOLVED that the revised Data Security Breach Management Policy & Procedure, as set out at Annex A to the agenda report, be adopted.