The Council is the data controller for purposes of the Data Protection Act (2018), and The General Data Protection Regulation (EU) 2016/679 ("GDPR") and is registered as a data controller with the Information Commissioner’s Office (ICO).

Brighton & Hove City council are committed to protecting your personal information. As a data controller we have a responsibility to make sure you know why and how your personal information is being collected in accordance with relevant data protection law.

Purposes & Lawful basis of processing

We are collecting your data for the purpose of an audit of an adult social care provider under contract to Brighton & Hove City Council.  We have a legal obligation processing data in accordance with the Care Act 2014, Section 5, 2 and GDPR Article 6, 1 (c). Where we are processing special category data, this is in line with GDPR Article 9, 2(h) provision of social care and the Data Protection Act 2018, Schedule 1, Part 1, 2 (e).

Who we will Share your Data with

Your data may be shared with Brighton and Hove Adult Social Care Commissioners, Sussex Clinical Commissioning Group & the CQC [Care Quality Commission].

How Long we will Hold your Data (Retention)

We will not keep your identifiable data for longer than 12 weeks at which point it will be anonymised. 

Transferring Data outside the European Economic Area

Your information is not processed outside of the European Economic Area.

Your information rights 

  • under GDPR you have certain rights concerning your information
  • for further information on your rights visit our website

Further information

If you would like to discuss this further please phone our Information Governance Team on 01273 29 59 59 or send an email to

You can also contact the Council's Data Protection Officer.

You can also contact the ICO for further information or to make a complaint:

Information Commissioner’s Office (ICO)

Address: Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF

Phone: 0303 123 1113 (local rate) or 01625 545 745 if you prefer to use a national rate number.

Email ICO 

Report a concern on the ICO website.