How we use your information
Aberdeen City Council has to make inquiries and investigate where we’ve concerns that an adult may be at risk of harm. To do this we need to collect and record, and use information about adults who may be at risk of harm and information about other people who can help us with our inquiry or investigation.
This personal information may include information in our existing cases files and information we will gather as part of the inquiry or investigation process. This information is held by us on our case management system and in an electronic case file. We may share information about these inquiries or investigations with the police, the Care Inspectorate, the NHS, third sector or private sector agencies, or family members who are involved in the case, as part of the inquiry or investigation process. This will only be information which is relevant and necessary.
We receive information from partners which is added to our records. In some cases, information will be added to our records using automated processing, to speed up the time it takes to deal with simple processes. Decisions about you are not made using automated decision-making.
How long we keep your information for
We will keep information about inquires and investigation about adults who may be at risk of harm for five years, plus the current year, from the date that the case file is closed. If you decide you do not want support, we will keep your information for five years from our last contact with you.
You have rights to your data, including the right to ask for a copy of it. See the Your data page for more information on all the rights you have, and how they work in practice.
You can contact the Council’s Data Protection Officer by email at DataProtectionOfficer@aberdeencity.gov.uk or write to:
Legal and Democratic Services
Business Hub 6
Level 1 South
You also have the right to make a complaint to the Information Commissioner’s Office. They are the body responsible for making sure organisations like the Council handle your data lawfully.
Our legal basis
Aberdeen City Council is the Data Controller for this information. Wherever the Council processes personal data, we need to make sure we have a legal basis for doing so in data protection law. The Council understands our legal bases for processing personal data to make inquiries and investigate where we’ve concerns that an adult may be at risk of harm as Article 6(1)(c) and Article 6(1)(e) of the General Data Protection Regulation. This is because making inquiries and investigations about adults who may be at risk of harm is part of our public task, and something we are required to do by law, as outlined in the Adult Support & Protection (Scotland) Act 2007 (Section 4). In making inquiries and undertaking investigations about adults who may be at risk of harm the Council is also likely to process special categories of personal data. The Council understands our legal basis for doing so as Article 9(2)(h) of the General Data Protection Regulation, because processing is necessary for the provision of health or social care or treatment or the management of health or social care systems and services.