Fixed Penalty Notices for Environmental Offences service privacy notice

In order to process Fixed Penalty Notices, Brighton & Hove City Council collects, stores and processes your personal information.

This privacy notice explains what information we collect from you, and what we do with it.

The data controller for your data

Brighton & Hove City Council is the data controller for purposes of the Data Protection Act (2018) and The General Data Protection Regulation (EU) 2016/679 ("GDPR") and is registered as a data controller with the Information Commissioner’s Office (ICO) under registration number Z5840053.

Brighton & Hove City Council are committed to protecting your personal information. As a data controller, we have a responsibility to make sure you know why and how your personal information is being collected in accordance with relevant data protection law.

Why we’re collecting your data

We are collecting your data for the purpose of processing a Fixed Penalty Notice. 

What is the legal basis for collecting your data

The council has a lawful basis for processing data for the purpose of Fixed Penalty Notice under:

  • The General Data Protection Regulation 2016, Article 9(2)(g) [Substantial Public Interest]
  • The Data Protection Act 2018, Schedule 1, Part 2, Paragraph 10 [Preventing and detecting unlawful acts] and Paragraph 12 [Regulatory requirements with regard to dishonest or unlawful acts]

The council has statutory powers pertaining to enforcement under the following acts:

  • The Environmental Protection Act 1990 sections: 33ZA, 33ZB, 34A, 47ZA, 88, schedule 3A paragraph 7
  • The Anti-Social Behaviour Act 2003, section 43
  • The Anti-Social Behaviour, Crime and Policing Act 2014, section 68

The data we may collect

  • Contact details including name, address, email address and phone number
  • Date of birth
  • Visual images, personal appearance and behaviour
  • Licenses or permits held
  • Business activities

Who we’ll share your data with

Your data may be shared with:

  • Officers in City Environment Management for the purposes of processing your Fixed Penalty Notice
  • Any persons with a need to access your data relating to responding to a complaint or enquiry
  • The council’s legal team where necessary for the purposes of providing legal guidance and for prosecution.
  • Where a fixed penalty notice proceeds to court action data will also be shared with the courts, the defendant and their legal representatives. 

How long we’ll keep data for and why

If your FPN is paid within the deadline, photos or footage will be deleted within 90 days. We will hold your details and the financial record that your FPN has been paid for two years.

If your FPN is not paid and proceeds to prosecution your data will be retained until all court proceedings have been discharged and any appeal processes exhausted. 

How your data will be stored

  • Your information will be stored electronically and on paper records.
  • We will only make your information available to those who have a need to know. Example of the security measures we used are:
    • Training for our staff allows us to make them aware of how to handle information and how and when to report when something goes wrong
    • We use Encryption meaning that information is hidden so that it cannot be read without special knowledge (such as a password). This is done with a secret code. The hidden information is said to then be ‘encrypted’.
    • Pseudonymisation meaning that we’ll use a different name so we can hide parts of your personal information from view. This means that someone outside of the Council could work on your information for us without ever knowing it was yours.
  • Controlling access to systems and networks allows us to stop people who are not allowed to view your personal information from getting access to it.
  • Regular testing of our technology and ways of working including keeping up to date on the latest security updates (commonly called patches).

Transferring data outside the European Economic Area

Your information will not be transferred outside of the European Economic Area. 

Your rights

Depending on the legal basis for processing your information you may have the following rights:

  • A right to a copy of data held about you, an explanation for its processing and who it has been shared with.
  • A right to rectification (correction) of data which can be shown to be incorrect.
  • A right to restrict processing if you can show that it is not fair or lawful for the data to be used for a particular purpose.
  • A right to object to processing if you dispute that there is a lawful basis to process your data, following which the Council would need to demonstrate its lawful basis.

How to get advice or make a complaint

Data Protection Contacts

If you wish to discuss any of your data protection rights, you can contact the Data Protection Team on 01273 29 5959 or by email at

The council has also appointed a Data Protection Officer. Contact the Data Protection Officer.

Whilst we would prefer that you contact us first with any concerns that you might have, you can also contact the Information Commissioner’s Office. The ICO is the national regulator with responsibility for ensuring compliance with data protection.

Information Commissioner’s Office

You also have the right to lodge a complaint with a supervisory authority.

Contact details for ICO are stated below:

The ICO can be contacted:

  • on their website
  • by phone: 0303 123 1113
  • by post: Wycliffe House, Water Ln, Wilmslow SK9 5AF

This privacy notice will be subject to review when there is a change.

  • Date: April 2019
  • Date for Review: April 2020