Privacy Notice Internal Audit
Who do we hold personal information about ?
- We carry out audits, and investigation work, in respect of all of the Council’s various services and departments to ensure they are complying with the law (including data protection legislation) and the Council’s rules and procedures. As part of that work we may access the personal information held by those services – this will include information about customers, contractors, suppliers, people we licence or regulate and people we take enforcement or legal action against;
- We often get involved in investigating complaints about other Council services and so we will have personal information about the complainant and any witnesses.
What types of personal information do we hold ?
Audit work:
We will access and review any personal information held by the Council. This can include:
- Your contact details (such as name, address, telephone number and email address)
- Your date of birth
- Names of family members and details of your household makeup
- Your photograph or CCTV footage of you
- Information relating to enforcement action we may have taken or investigations we have carried out, such as interview records (which may be in paper form or which could be voice recordings of interviews)
- Financial information such as bank details, details of grants received, asset ownership
- Details of earnings, national insurance numbers, pension information
This is usually information you and / or your agents will have supplied to us, although it may include personal information the Council has collected about you from other people.
Complaints:
- Your contact details (such as name, address, telephone number, email address) and those of any witnesses
- Your date of birth
- Details of your complaint
This is usually information you will have supplied to us.
What types of special categories of personal information do we hold ?
As part of our audit work we may access and review special categories of personal information held by the Council. This can include:
- Basic criminal disclosure information (for example, in respect of licence applicants).
- Health details or details of vulnerability (such as being in care or having a learning disability etc.)
- Information about your race or ethnicity
This is usually information you will have supplied to us.
What do we use personal information for ?
- To carry out internal audits in accordance with section 151 Local Government Act 1972
- To investigate complaints
What is the legal basis for the use of personal information ?
We will process your personal information (including special categories of personal information) in accordance with our obligations under the Data Protection Act 2018. In particular, we will use your personal information:
- With your consent; and / or
- Where this is necessary to perform a task in the public interest or in the exercise of official authority vested in the Council.
Who might we share your personal information with ?
Sometimes we will share your personal information with other agencies in order to perform a task in the public interest or in the exercise of official authority vested in us. For example, we may share your personal information:
- With the Police in connection with an investigation; and
- With HMRC if we find evidence of fraud;
- With Action Fraud UK if we find evidence of fraud;
- With National Anti-Fraud Network if we find evidence of fraud;
- With the Department of Work & Pensions in connection with the National Fraud Initiative
- With the Cabinet Office in connection with the National Fraud Initiative;
- With Lancashire County Council if we have safeguarding concerns;
- With other Local Authority Audit Teams in connection with investigation / potential fraudulent activity.