Blue badges privacy notice

This privacy notice is designed to help you understand how and why processes your personal data in relation to application, eligibility assessment, and enforcement of the blue badge scheme. This notice should be read in conjunction with our corporate privacy notice.

Who are we?

North Yorkshire Council are a ‘data controller’ as defined by Article 4(7) of the UK General Data Protection Regulation (UK GDPR). We have appointed Veritau Ltd to be our data protection officer.

Their contact details are:

Information Governance Office


West Offices

Station Rise


North Yorkshire



Tel: 01904 552848

What personal information do we collect?

When applying for a blue badge customer portal you will be asked to provide:

  • basic identifiers (M): title, name, address, date of birth, and gender
  • contact details: phone number and email address
  • place of birth and surname at birth (M)
  • national insurance number
  • vehicle registration number (VRN) of vehicles in which the badge will be used most frequently
  • serial number of current blue badge (if renewing a badge) or the name of the previous issuing local authority if someone has held a badge before (M)

You will also be asked to provide certain special categories of data:

  • details of medical condition(s) and/or permanent disabilities

Why do we collect your personal information?

We collect your information for an application for a blue badge and for us to check your eligibility for the service using the guidelines provided by the department for transport. Once eligibility for the service is confirmed or denied any documents relating to a medical condition or details of a temporary disability will be destroyed and not retained by us. Details about how the decision was reached on eligibility maybe retained and this may make reference to how your medical condition or permanent disability qualified you for the service.

When we requests blue badges to be printed through the blue badge improvement service, they will be asked to complete some mandatory fields. It is therefore essential that the information marked above with an (M) is provided at application stage.

The information is needed to personalise the badge or to enable data-matching for fraud prevention purposes.

Your information will also be used to contact you when your blue badge has expired to remind you to re-apply.

Who do we share this information with?

We participate in the nation fraud initiative which is current ran by the Audit commission. Your information will be shared with the Audit Commission and it will be compared with deceased information from the Department for Work and Pensions database.

Our website has more information about how your data may be used for fraud prevention purposes.

How long do we keep your information for?

Data held

Retention period

Documents to evidence any medical condition or temporary or permanent disability

Duration of the application and eligibility check period (6-10 weeks)

Customer details

As long as a customer chooses to have a live Blue Badge. Where Blue Badges are cancelled or not renewed data will be removed from the system 1 year following cancellation or expiry

What is our lawful basis for processing your information?

Under the chronically sick and disabled persons act 1970, we have a statutory obligation to maintain a register showing the holders of badges issued by the authority. It is responsible for determining and implementing administrative, assessment and enforcement procedures in accordance with the governing legislation (disabled persons (badges for motor vehicles) (England) regulations 2000 as amended.

For more information about how we use your data, including your privacy rights and the complaints process, please see our corporate privacy notice.