The Data Protection Act 1998 is intended to protect the privacy of individuals and place obligations on organisations that process personal data. Personal data means any information about a living individual that can identify them. It covers both facts and opinions about an individual.

View the full Data Protection Act 1998 on the OPSI website.

The Information Commissioner is an independent official appointed to oversee the Data Protection Act. Further information can be found on the Information Commissioner's Office website.

York's Data Protection Policy

The council has to store personal information. Our Data Protection Policy explains the way that councillors, council employees, and anyone else working with the council should handle personal information. You can download our policy from the right hand side of this page.