Consent and categories of personal data

Consent

We will usually seek your consent prior to processing or sharing your information, however, if there is a legal reason, as outlined under the UK GDPR, we may not require your consent, e.g. where the disclosure is necessary for the purposes of the prevention and/or detection of crime. Where we need to disclose special category or confidential information such as medical details to other partners, we will do so only with your prior explicit consent or where we are legally required to. We may disclose information when necessary to prevent risk of harm to an individual.

Categories of personal data

We process:

• Personal information relating to identified natural persons used to deliver services such as:

Adult and children's social care, human resources, special educational needs, planning applications, access to information requests, legal claims, school appeals, library cards, blue badges, customer services, highways claims and complaints, pensions, children's services, parking services, care homes, early years, youth offending, trading standards and more.

• Special categories of information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership and data concerning health or sex life.
• Health and wellbeing information. All local authorities have a duty to improve the health of the population they serve. To help with this, we use information from a range of source data, including data collected at the registration of a birth or death to understand more about the health and care needs in the area.
• Research and statistical data to provide intelligence about Lancashire including demographic data, population projections, the economic situation, health and wellbeing information. This personal information is often pseudonymised when an identifier such as name is replaced with a unique number.

Lawful basis for processing

The lawful basis for processing this personal data must be one of the following.

• Consent: the individual has given clear consent for the council to process their personal data for a specific purpose.
• Contract: the processing is necessary for a contract the council has with the individual.
• Legal Obligation: the processing is necessary for the council to comply with the law.
• Vital Interests: the processing is necessary to protect someone's life.
• Public Task: the processing is necessary for the council to perform a task in the public interest and has a clear basis in law.
• Legitimate Interests: Processing is necessary for the purposes of legitimate interests pursued by the local authority – (the local authority will not use this lawful basis for any tasks it performs as a public authority).

Individual service and project specific privacy notices will include further details of the lawful basis for processing specific categories of personal data.