Data Protection Policy 2025
Data Protection Policy – Summary
Long Ashton Parish Council is committed to protecting personal and sensitive data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy outlines how the Council collects, processes, stores, and shares data responsibly and transparently.
Key Principles
- Data is processed lawfully, fairly, and transparently.
- It is collected for specific, legitimate purposes and kept only as long as necessary.
- Personal data is kept secure and up to date.
Your Rights
Individuals have the right to:
- Access their data
- Request corrections or deletion
- Object to processing
- File complaints with the Parish Clerk or the Information Commissioner's Office
AI and Data Protection
The Council uses AI tools (e.g. Microsoft Copilot, ChatGPT) only under strict conditions:
- No personal data is processed without a lawful basis.
- AI outputs are reviewed by humans.
- A Data Protection Impact Assessment (DPIA) is required before deploying AI tools that process personal data.
Transparency and Access
The Council publishes key information such as meeting minutes, financial reports, and Councillor responsibilities on its website. It also supports public participation and complies with transparency regulations.
For more details or to exercise your data rights, please contact the Parish Clerk at clerk@longashtonparishcouncil.gov.uk.