Data Protection

Your data protection rights

Every individual has certain rights in relation to their own personal data and their privacy, and in relation to the information we keep about you.

Personal data is any information related to a living person, that could be used to directly or indirectly identify that person. A data subject is the living person that the personal data is about.

Subject access request

You have the right to access personal data we hold about you. This is called a subject access request. This could be electronic information in emails or databases, or paper information in files, records, or archives. You can only access your own personal data. If data about other people is included within your files, then it is likely that we may not provide you with this information.

When requesting information from the Authority you should provide your name, address, and telephone number. Also, please can you provide a full description of the information you require. If you can tell us dates and which service(s) you have had contact with at the Authority, it will help us locate your personal information quickly.

If the information that you are seeking is held by one of the upper tier councils you must contact Lancashire County Council, Blackburn with Darwen Council or Blackpool Council directly to make your request.

By law, the Authority must verify your identity before any personal information is disclosed. This is to ensure you only receive information to which you are entitled. If further evidence of your identity, address, legal status, or relationship to the data subject is required LCCA will contact you directly.

Any personal information you provide on the form will be held and processed by Lancashire County Combined Authority for the purpose of administering and responding to your request. This information will be held securely and will not be disclosed to other parties, without your permission. The information which you provide will be destroyed in a secure manner when the retention period has expired. 

Making a data protection request

How to make a request

You can complete the online subject access request form

Or you can write to: County Hall, Fishergate, Preston, Lancashire PR1 8XJ

You will also need to send copies of documents that prove your identity and address, so that we can be certain that only you have access to your personal data. 

What kind of identification do I need to provide?

For proof of identity and address, you will need to provide a copy of two documents, one from section A and one from section B. 

You are advised to only send copies of these documents to us, and not the originals. 

Please post or email copies of these documents: 

Section A - Primary trusted documents 

  • current and valid passport
  • current and valid driving licence photocard (full or provisional)
  • birth certificate
  • marriage / civil partnership certificate
  • HM Forces identity card

Section B - Secondary trusted documents 

  • mortgage statement – issued last 12 months
  • bank or building society statement – issued in the last three months
  • bank or building society account opening confirmation letter – issued in the last three months
  • credit card statement – issued in the last three months
  • utility bill – issued in the last three months
  • central or local government, government agency, or local council document giving entitlement, for example from the department for work and pensions, the employment service, HMRC – issued in the last three months

How long does it take? 

Once we have checked your identity, and we are certain of what your request is, then we will let you know as soon as possible. 

We then have up to 30 calendar days to respond to your request.

If your request is complex or very large, we may need a further 60 calendar days to deal with your request. We will write to you and let you know if this is the case. 

Can I complain if I am unhappy? 

If you are unhappy with the way in which your data has been handled or the way in which a data protection request has been answered, then you may complain to our Data Protection Officer or write to County Hall, Fishergate, Preston, Lancashire PR1 8XJ.

If you are still unhappy with the response from our data protection officer, or if you would rather complain straight to a regulator, then you may make a complaint to the Information Commissioner’s Office which regulates data protection and information governance matters in the UK. 

You can do this via the ICO’s website.

ICO helpline: 0303 123 1113.

You can find out more information about your data protection rights from the Information Commissioner’s Office

Data Protection Policy

The Data Protection Policy has been written to inform you about how the Lancashire Combined County Authority will ensure compliance with its' obligations under data protection law in the processing of personal data and special category personal data relating to our citizens, customers, suppliers and other individuals for a range of purposes.

Read the Data Protection Policy