Record of Processing Activity (RoPA)

In very rare circumstances, it may sometimes be necessary to transfer personal information overseas. Any transfers made will be in full compliance with all aspects of the data protection legislation, for example, only with your consent if appropriate and with additional security measures in place to protect your information.

The majority of personal information is stored on systems located on the Council's own servers in the Council's own secure premises, although there are some occasions where your information may leave the UK in order to get to another organisation, or, if it is stored in a system that uses servers elsewhere.

We have additional protections on your information if it leaves the UK ranging from secure ways of transferring data, undertaking risk assessments on systems being used to ensuring we have a robust contract in place with the third party.

We will take all practical steps to make sure your personal information is not sent to a country that is not seen as "safe" either by the UK or EU Governments.