Who we are
Worcestershire County Council is a ‘Controller’ under the General Data Protection Regulation (GDPR) and pay the required annual Controller fee to the Information Commissioner's Office (ICO). We are a public authority and have a nominated Data Protection Officer in place.
We are responsible for managing the information we hold and we recognise that this information is important to you. We take our responsibilities seriously and use personal information fairly, correctly and safely in line with the legal requirements set out by the GDPR. Anyone who receives information from us is also under a legal duty to do the same and our suppliers and providers have a set of data protection clauses included in their contract.
Where we need to share sensitive or confidential information, such as medical details, we will do so with your consent or where we are legally required or able to do so. We may share information to prevent risk of harm to an individual.