https://newanglialep.sharepoint.com/sites/NewAngliaLEP/Shared Documents/General/Admin/ICO and
Data Protection/Privacy Policy/New Anglia LEP Privacy Policy 25-10-21.doc
Page 4 of 5
Withdrawal of Individual’s rights
Under Article 6(1)(e) and Article 9(2)(g) of the General Data Protection Regulation,
participants in New Anglia LEP’s business support programmes and grant schemes
are unable to claim the following rights in terms of personal data:
• the right to erasure (“right to be forgotten”)
• the right to portability of their data.
However, the data collected is your personal data, and you have the right, subject to
lawful data requirements:
• to see what data we have about you
• to ask us to stop using your data
• to ask us to delete your data, or to correct your data if there is no longer a
justification to process it
• to lodge a complaint with the independent Information Commissioner (ICO) if
you think we are not handling your data fairly or in accordance with the law.
Data Retention
Contracts with several Government Departments, including contracts with the
Department for Levelling Up, Housing and Communities, and the Department for
Businesses, Energy and Industrial Strategy, stipulate that data and evidence must be
kept for a specified period after support has been provided by New Anglia LEP and
its partners. In the case of one of these contracts, data and evidence must be kept
until the end of the year 2036.
Destruction of Information
In accordance with the General Data Protection Regulation (2016/679) and Data
Protection Act 2018, any data no longer required for the purposes that it was held for
will be destroyed. This means that New Anglia LEP will destroy all hard copy and
electronically stored information using secure methods that comply with all data
protection regulations in force at the time of destruction.
Data Breaches
In the case of a data security breach, New Anglia LEP will immediately take steps to
contain the breach. Where a serious breach is encountered, New Anglia LEP, as
Data Controller, will notify the Information Commissioner’s Office and launch an
investigation to establish the reasons behind the breach. New Anglia LEP is
permitted to take all reasonable corrective steps as resulting from a security breach,
including suspending use of any systems and/or withholding joint working with
delivery partners.
Automated decision making
New Anglia LEP does not use personal data to undertake automated decision
making.