National Fraud Initiative privacy notice

This privacy notice should be read in conjunction with Colchester City Council’s Privacy Policy. 

This privacy notice sets out what personal data we will use, how we will use it, and why we need to in respect of the National Fraud Initiative (NFI).

Under the Local Audit and Accountability Act 2014, we are a mandatory participant in the NFI and consequently are required to provide the following data sets, where we hold the relevant information, to the Cabinet Office as part of the data matching exercise.

Information collected

We collect and process personal data that you provide to us which may include:

• Name
• Contact details (such as address, telephone number, email address)
• Date of birth
• National Insurance Number
• NHS number
• Payroll information (for staff)

The following data sets may be shared:

• Payroll
• Pensions
• Trade creditors’ payment history and trade creditors’ standing data
• Housing (current tenants and individuals on a housing waiting list) and right to buy (completed and in progress)
• Housing benefits (provided by the DWP)
• Council Tax reduction scheme
• Council Tax
• Electoral register
• Students eligible for a loan (provided by the Students Loan Company)
• Private supported care home residents
• Transport passes and permits ( including residents’ parking, blue badges and concessionary travel)
• Insurance claimants
• Licences – market trader/operator, taxi driver and personal licences to supply alcohol
• Personal budget (direct payments) and social care

Agencies we might share your information with

Whilst working with you, we may share your information with some of the following third parties:

• National Fraud Initiative

The purpose and lawful basis for processing

The lawful basis for the processing of your personal data is Article 6 (1) (C) Legal Obligation. Colchester City Council requires the above information in order to comply with the Local Audit and Accountability Act 2014. We only request the minimum amount of information and ensure that is it stored securely.

Length of time we keep your information

The data is collected collectively for the purpose of providing it to the NFI, once collated, and uploaded to the NFI portal the information is deleted immediately. We will only hold your personal data for as long as necessary and in line with our retention schedules.

How we protect and store your personal data

We take the confidentiality of personal information very seriously and use recognised security and access controls to protect your information from unauthorised access, loss, misuse, alteration or corruption. We have procedures and processes in place to ensure that your personal information is managed appropriately.

Your information may be held outside of the UK. Where this is the case, we ensure that additional measures are in place to protect your data and to ensure that we continue to comply with data protection requirements.

Updates to this privacy notice

We will continually review and update this privacy notice to reflect changes in our processes and procedures, as well as to comply with changes in the law. When such changes occur, we will revise the 'last updated' date on this notice. We encourage you to periodically review this notice and to be informed of how we are protecting your information.