This notice should be read in conjunction with our corporate privacy notice.
Who are we?
North Yorkshire Council is a ‘Data Controller’ as defined by Article 4(7) of the UK General Data Protection Regulation (UK GDPR).
What personal information do we collect?
The elections registration officer will collect the following categories of personal information:
- names and contact details
- address
- date of birth
- nationality
- case details and case history
- National Insurance number
- identification documents
- copies of passport or other photo ID – flag for service to review
- family and relationships
The returning officer will process the following categories of personal information:
- election staff – names, addresses and contact details, date of birth, National Insurance number, nationality, account information, right to work information, identification documents
- candidates – names, addresses and contact details, date of birth
As part of our duties, we may be required to collect sensitive personal information or certain types of special category information. Special category information may be processed through the documentary exceptions process, the anonymous registration process or in relation to elections staff.
Why do we collect your personal information and what is our lawful basis for processing?
Service
Elections
Purpose
The electoral registration officer and returning officer (including acting, deputy and local) are the ‘data controllers’ as defined by Article 4(7) of the UK General Data Protection Regulation (UK GDPR).
The electoral registration officer and returning officer are data controllers and collect personal data you provide for the purpose of registering your right to vote. You need to be registered to be able to vote in any election or referendum for which you are eligible. We have a duty to maintain a complete and accurate register throughout the year.
The electoral registration office (‘ERO’) is legally obliged to collect the categories of personal data specified above to produce an electoral register. The electoral register is then used by the returning officer to facilitate the running of elections and to ensure effective conduct of the elections process. This is required to allow you to vote.
If you do not provide the ERO with the requested information, you may not be able to vote and you may be breaking the law (as it is a legal obligation to register).
The information you provide is held in electoral registers which are managed by electoral registration officers who, using the information received, keep two registers – the full electoral register and the open (edited) register. The full register is published once a year and is updated every month. The ERO will include your name on the electoral register so that you are able to vote by your chosen method.
Lawful basis
UK GDPR article 6 (1)(c) – processing is necessary for compliance with a legal obligation to which the controller is subject.
UK GDPR article 6 (1)(e) – processing is necessary for the performance of a task carried out in the public interest.
Who do we obtain your information from?
The ERO is legally entitled to inspect and make copies of local records such as Council Tax and customer service records for the purposes of their registration duties (Regulation 35, Representation of the People (England and Wales) Regulations 2001). Therefore to fulfil their duties, the ERO may collect information from specific areas of the council. All other information is collected from you during the election process.
Who do we share this information with?
The council’s electoral registration officer will share information with the returning officer so that they can ensure proper conduct of the election process and the council, who support the administration of the election.
The council will share your information with our contracted printers in order to print and post your poll cards, postal packs and other registration and election material.
To verify your identity, the data you provide will be processed by the individual electoral registration digital service managed by the cabinet office. As part of this process, your data will be shared with the department of work and pensions and the cabinet office suppliers that are data processors for the individual electoral registration digital service. You can find more information about how your data is used on the government website.
The electoral register is re-published once a year and is updated monthly. The council are also legally required to share the full register with particular people and organisations who are mandated as statutory recipients of the electoral register. Further information can be found from the electoral commission here. We are also required to share details of whether you have voted (but not how you voted) to those who are entitled in law to receive it after an election.
The open register contains the same information as the full register but is not used for elections or referendums. It can be sold to any person, organisation or company for a wide range of purposes. It is used by businesses and charities for checking names and address details, users of the register include direct marketing firms and online directory firms. Your name will be included on the open register unless you ask for it to be removed. Removing your details from the open register will not affect your right to vote.
How long do we keep your information for?
Elections
| Data held | Retention period |
|---|---|
| Personal data | The electoral registration officer and returning officer are obliged to process your personal data in relation to preparing for and conducting elections. Your details will be kept and updated in accordance with our legal obligations and in line with statutory retention periods |
Other relevant transparency information
The legislations, policies and guidance that relate to this service includes, but is not limited to:
- Electoral Administration Act 2006
- Electoral Registration (Disclosure of Electoral Registers) Regulations 2013
- Electoral Registration and Administration Act 2013
- Equality Act 2010
- EU General Data Protection Regulation (GDPR) 2018
- Local Elections (Parishes and Communities) (England and Wales) Rules 2006
- Local Elections (Principal Areas) (England and Wales) Rules 2006
- Political Parties, Elections and Referendums Act 2000
- Representation of the Peoples Act 1983, 1985 and 2000
- Representation of the People's Regulations 2001, 2013, 2014, 2015, 2016
For more information about how we use your data, including your privacy rights and the complaints process, please see our corporate privacy notice.