Purpose and lawful basis for processing

North Devon Council is being provided with data from the UK Government and Devon County Council in respect of people resident in North Devon who are required to self isolate further being contacted or as required by the NHS Test and Trace service.  This is being shared with North Devon Council to enable it to support people who have no other support mechanisms in place to help during the mandated period of self-isolation.

The lawful bases we rely on to process personal data are as follows:

• Article 6(1)(d) of the GDPR, which allows us to process personal data where this is necessary when individuals' health and safety is at risk; and
• Article 6(1)(f) of the GDPR, which allows us to process personal data where this is necessary in the legitimate interests of us as data controller or a third party (such as the UK government which has asked local authorities to carry out this task as a matter of priority during the current pandemic and has shared data for this purpose)

If the information we collect or process to assist vulnerable people and those identified as in need contains special category data, such as health data, the lawful bases we rely on to process it is article 9(2)(c) of the GDPR where the information must be provided to save someone's life (and their consent cannot be obtained) or article 9(2)(g) of the GDPR where the provision of this information would protect a person at risk (ie. it can be shown that it is in their substantial interests). 

What we need

We have been supplied with personal data collected by the UK Government and passed to Devon County Council and then passed to us to deal with at a district level.  This includes names, addresses, contact details (such as email address and telephone numbers), age and gender.

What we do with it

We will use the personal data provided by the UK Government, along with records that we hold to contact the individuals identified and coordinate community and voluntary groups (including One Barnstaple, One Ilfracombe, One South Molton, One Northern Devon and the Braunton Community Network as well as other links in parishes across North Devon) to assist them depending on their need, for instance going shopping for them or collecting prescriptions. 

How long we keep it

For information about how long we hold personal data, see our Retention Schedule.

What are your rights?

We are acting pursuant to our and the UK Government's legitimate interests in respect of acting on behalf of the Council and the UK Government to protect vulnerable individuals and those in need in our area. You therefore have the right to object to our processing of your personal data. There are legitimate reasons why we may refuse your objection, which depend on why we are processing it. For more information on your rights see Your Rights.