Cautionary Contact Database- Privacy

The following privacy notice tells individuals what to expect when they have been registered as a potentially aggressive and violent person on the council's Cautionary Contact Database

This notice explains how personal information is going to be used, what it is used for, who it might be shared with and why and for how long it is to be kept.

The council (S&ELCP Councils) is fully committed to complying with The Data Protection Act 2018 and the General Data Protection Regulation (GDPR).

We ensure that your personal data is processed fairly, lawfully kept safe and secure and retained for no longer than is necessary.

The Data Protection Officer for S&ELCP Councils is contactable by email at this address : data.protection@boston.gov.uk.
 

Data Controller

The Data Controller is Joint ELDC, SHDC and Boston Borough Council. Each Council is registered as a Data Controller with The Information Commissioner's Office.
 

What information may be collected?

- Your name
- Your address
- Contact details
- Notes and other information we obtain directly from you about actual or potential violent behaviour - for example we may make a note of the words you said if you threatened a member of staff
- Notes and information we obtain from any council department or third parties in relation to actual or potential violent behaviour
- Photographs/images recorded by the council's CCTV systems

Why do we collect your personal information?

The Council owes a duty of care to its employees under the Health and Safety at Work etc. Act 1974 and has a legal duty under RIDDOR - Reporting of injuries, Diseases and Dangerous Occurrences Regulations 2013 - to record and report incidents of work related violence.

In the event or likelihood of this happening, personal information about you will be collected to assess the risks to our employees (including the risk of reasonably foreseeable violence) and retained on the Cautionary Contact Database for short.

We will use the information we hold about you for the purposes stated, in general this will be to assess the risks to our employees. We will therefore use the information we hold about you on the Caution Register to assess if there is a risk to our staff when they contact or visit you.
 

How do we collect this information

We collect this information via a number of methods including:
- Collecting information from those who you may have been violent or aggressive towards
- Council employees who have completed an cautionary contact report form
- Other sources  we may receive information about you form other organisation, agencies or service providers
- We may receive information about you for a legal reason.

Who has access to your personal information

Council staff who look after the Cautionary Contact Database and staff who are working with you or have a need to contact/visit you will have access to the data on the Cautionary Contact Database. Access is controlled and limited to those who need the information in order to carry out their duties safely.

In order to prevent unauthorised access or disclosure of the details on the Cautionary Contact Database suitable controls are in place to limit the number of staff who can see the register.

Records will not be visible for general viewing.

Who we share data with

We may share your information with other agencies, organisations and contractors that may come into direct contact with you. We do this to assess the risks to their employees as part of their work.  We will be sharing data with PSPS as our back office service provider, and other organizations that share our buildings.  

We also have a duty to pass information to third party organisations such as the Police if there has been a crime committed.

Where we feel that others are at risk, we will share the information without your consent.

When sharing information we do so in line with UK Data Protection Laws and any agreed information sharing protocols.
 

Retention periods

Any information gathered will be kept in line with statutory requirements as set out above. Personal data will not be retained for longer than necessary in relation to the purposes for which they were collected.  Retention periods will be in line with the Council's Procedure on the Management of the Cautionary Contact Database.  Information will be deleted from archive 6 years from when deleted.  Deleted records will not show on live database.
Information held on the Register will be subject to periodic review.

All the information we collect is stored securely on our IT systems. All information we hold about you is confidential.

Where can I get advice?

If you have any worries or questions about how your personal information is handled please contact our Data Protection Officer.

For independent advice about data protection, privacy and data rights, you can contact the Information Commissioner's Office (ICO):

Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire DK9 5AF
Tel:  0303 123 1113 (local rate) or 01625 545 745 if you prefer to use a national rate number
Visit ico.org.uk
Email casework@ico.org.uk