Individual Rights Requests and Schedule 2 requests under GDPR

Subject to certain exemptions, you have rights over the data the Council holds about you (your 'personal data').

These rights include:

• the right to rectification (correction) of your data

• the right to erasure (the right to be forgotten)

• the right to restrict processing and

• the right to object to processing

• the right not to be subject to automated decision making including profiling

Where you have given consent for Lewisham Council to use personal information about you for a specific service, you can also use this form to notify us of your withdrawal of consent. It is important to note that if you do wish to withdraw consent, without it we may not be able to provide some Council services to you.

If you wish to exercise any of these rights, please request access to the information we hold about you.

Please note that your rights request is not an absolute right and it may be declined by the Council in certain cases. You have the right appeal our decision to the Information Commissioners Office.

Proof of identity

The Council needs to be satisfied that you are who you say you are.

To help us establish your identity once you have submitted an individual rights request we will contact you to provide two forms of ID and ask you to email them to DPO@lewisham.gov.uk.

We accept:

• passport 

• birth certificate

• driver’s license

• identity card

• utility bills (from the last 3 months)

• bank statements (from the last 3 months)

If you're making this request on behalf of someone else, you must provide evidence you have the right to do so. Therefore we would ask for a letter of consent. If the request was for a child, you will need to provide a birth certificate or any other relevant legal documentation evidencing you have parental responsibility for that child.

To submit an Individual Rights request you can do this via telephone, email or by filling in the Individual Rights Requests under GDPR form.

Telephone: 0208 314 9928

Email: DPO@lewisham.gov.uk

Schedule 2 Part 1 Para. 2 Data Protection Act 2018

The police and other agencies can request access to personal information held by local authorities for specified purposes. These types of request include Schedule 2 Part 1 Para. 2 Data Protection Act 2018.

They can ask for information if it's about:

• prevention or detection of crime
• the apprehension or prosecution of offenders
• assessment or collection of tax, duty or imposition of a similar nature

The Act:

• does not give an automatic right of access to information
• states that public bodies can assess the merits of requests and decide whether or not to apply the exemption

See the Information Commissioners Office guidance about exemptions. It includes reasons we must take into consideration when deciding whether to release information to relevant authorities.

Make a Schedule 2 Part 1 Para. 2 Data Protection Act 2018 request

To make a request, please:

• complete an SCH 2 form

Please note the request will need to be signed off by an officer (rank of inspector or above) if the request is from the police.

Please send the completed form to dpa@lewisham.gov.uk.

Third party disclosures

Individuals or data subjects can give signed written consent for us to disclose information. However, we must be satisfied that consent was freely given by the data subject.