Fraud investigations privacy notice
The following privacy notice applies to corporate fraud investigations.
This notice explains how personal information is going to be used, what it is used for, who it might be shared with and why and for how long it is to be kept.
What information is collected?
- Personal and family details
- Lifestyle and social circumstances
- Good and services
- Financial details
- Employment and education details
- Housing needs
- Visual images, personal appearance and behaviours
- Licenses and permits held
- Business activities
- Case file information
- Criminal convictions and offence
- Immigration status
We may also collect and process special categories of personal information that may include:
- Racial or ethnic origin
- Political opinions
- Religious or philosophical beliefs
- Trade union membership
- Data concerning health
- Data concerning a person’s sex life or sexual orientation
Why do we collect your personal information?
This authority has a legal duty to protect the public funds it administers, and may use information held about you for all lawful purposes, including but not limited to the prevention and detection of crime including fraud and money laundering.
One of the primary objectives of the councils Anti-Fraud & Corruption Strategy is to ensure the prevention of fraud and corrupt acts and ensure that any instances or allegations of these are investigated and dealt with effectively. As part of this we may conduct investigations into transactions and records held across different business areas.
Crawley Borough Council (CBC) is registered as a Data Controller with The Information Commissioner’s Office (Registration Number Z5327706).
The council complies with The Data Protection Act 2018 and the GDPR.
We ensure that your personal data is processed fairly, kept safe and secure and retained for no longer than is necessary.
The Data Protection Officer (DPO) for CBC is the Head of Governance, People & Performance. If you have any concerns or questions about how we look after your personal information, email firstname.lastname@example.org.
The legal basis for processing personal data
- Processing is necessary for compliance with a legal obligation
- Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
Who we share data with
We pass data to:
- The Cabinet Office
- Government agencies
- Specified anti-fraud organisations (SAFOs)
- The Police
- Judicial agencies e.g. Courts
- Department for Work & Pensions
- Local authorities
- Credit reference agencies
- Internal departments
- Other third-party organisations, as allowed by law
We will only share information with these organisations where it appropriate and legal to do so. We may also share information, for example, if there is a risk of serious harm or threat to life. Where this is necessary, we are required to comply with all aspects of the General Data Protection Act 2018.
We will not share data with third-parties for marketing purposes.
We will hold your personal information for 6 years where personal data relates to the allegation, investigation or sanction of a crime. We may be required to keep personal data for longer where we have a statutory duty to do so, for example to aid debt recovery or to comply with criminal justice retention periods.
You have the right to:
- Be informed of data processing (which is covered by this privacy notice)
- Access your personal information (known as a Subject Access Request)
- Have inaccuracies corrected
- Have information erased
- Restrict processing
- Data portability
- Intervention in respect of automated decision making/profiling
- Withdraw Consent (see below)
- Complain to the Information Commissioner’s Office (See below)
To exercise any of these rights please contact the Data Protection Officer.
Withdrawal of consent
The lawful basis upon which CBC process personal data is set out in this notice. However, where personal data is solely processed on the basis of consent, you will have the right to withdraw that consent.
Where can I get advice?
If you have any worries or questions about how your personal information is handled please contact our Data Protection Officer.
For independent advice about data protection, privacy and data rights, you can contact the Information Commissioner’s Office (ICO):