C:\web\tmp\d81e292daeebeb0acd7c8da3d7ccf8d8.docx
Page 4 of 5
Freedom of Information Act 2000
As a Company Limited by Guarantee we are not formally subject to the Freedom of
Information Act 2000. However, we recognise the importance of accountability and
transparency and voluntarily adhere to this legislation. We respond to Freedom of
Information requests in the same way as organisations which are formally bound by
the legislation and always seek to make information available wherever possible.
Withdrawal of Individual’s rights
Under Article 6(1)(e) and Article 9(2)(g) of the General Data Protection Regulation,
participants in New Anglia LEP’s business support programmes and grant schemes
are unable to claim the following rights in terms of personal data:
the right to erasure (“right to be forgotten”)
the right to portability of their data.
However, the data collected is your personal data, and you have the right, subject to
lawful data requirements:
to see what data we have about you
to ask us to stop using your data
to ask us to delete your data, or to correct your data if there is no longer a
justification to process it
to lodge a complaint with the independent Information Commissioner (ICO) if
you think we are not handling your data fairly or in accordance with the law.
Data Retention
Contracts with several Government Departments, including contracts with the
Department for Levelling Up, Housing and Communities, the Department for
Education, and the Department for Businesses and Trade, stipulate that data and
evidence must be kept for a specified period after support has been provided by New
Anglia LEP and its partners. In the case of the Department for Levelling Up, Housing
and Communities, and the Department for Businesses and Trade, data and evidence
must be kept until 31st December 2033.. In the case of the Department for
Education, data and evidence must be kept until 31st December 2031.
Destruction of Information
In accordance with the General Data Protection Regulation (2016/679) and Data
Protection Act 2018, any data no longer required for the purposes that it was held for
will be destroyed. This means that New Anglia LEP will destroy all hard copy and
electronically stored information using secure methods that comply with all data
protection regulations in force at the time of destruction.
Data Breaches
In the case of a data security breach, New Anglia LEP will immediately take steps to
contain the breach. Where a serious breach is encountered, New Anglia LEP, as
Data Controller, will notify the Information Commissioner’s Office and launch an
investigation to establish the reasons behind the breach. New Anglia LEP is
permitted to take all reasonable corrective steps as resulting from a security breach,
including suspending use of any systems and/or withholding joint working with
delivery partners.