As part of the local government reorganisation (LGR) programme in Derbyshire, the following councils are working together:
- Amber Valley Borough Council
- Bolsover District Council
- Chesterfield Borough Council
- Derby City Council
- Derbyshire County Council
- Derbyshire Dales District Council
- Erewash Borough Council
- High Peak Borough Council
- North East Derbyshire District Council
- South Derbyshire District Council
These councils are acting as joint data controllers for certain personal information shared as part of the LGR programme. This includes information shared to support analysis, business planning, due diligence, service and workforce transition planning, and the creation of any new unitary authority or authorities. Each council remains responsible as a data controller for personal information it processes independently in carrying out its own statutory functions.
Why we process your information
We may share and process personal information where it is necessary to prepare for and deliver local government reorganisation. This includes the operation of a central data hub, which is used to standardise, analyse, and securely manage information to support informed decision-making during the transition.
What information may be shared
We only share the minimum personal information necessary. This primarily relates to employees and workers of the participating councils. Where necessary and proportionate, limited personal data relating to residents, customers, service users, suppliers, partners, members of the public or other individuals may be processed only where strictly required to support service analysis and transition planning. The participating councils will not share special category personal data, such as health information, ethnicity, religious beliefs, or criminal offence data under this arrangement.
Personal information may also be shared, where necessary and proportionate, with organisations supporting the LGR programme. This may include professional advisers, auditors, consultants, IT suppliers, government departments, regulators or other public authorities where this is necessary to support the planning, oversight or implementation of LGR. Any sharing will be subject to appropriate legal, contractual and security safeguards.
Lawful basis for processing
We process this information based on public task (Article 6(1)(e) UK GDPR) - that is, the processing is necessary for the performance of a task carried out in the public interest.
How we protect your information
Appropriate technical and organisational measures are in place to keep your information secure. Where possible, personal information is anonymised or pseudonymised. Access to information in the data hub is strictly controlled. The central data hub is hosted by South Derbyshire District Council acting as data custodian. Wherever possible, personal information is anonymised, pseudonymised, or processed as modified/aggregate insights before being made available for use.
How long we keep your information
Personal information will only be retained for as long as it is necessary for the purposes of the LGR programme, in line with the data sharing agreement between the participating councils, and will be securely deleted when no longer required, subject to any overriding statutory or audit obligations.
Your rights
You have rights under data protection law, including the right to access your personal information, request correction, restrict processing, or object to processing in certain circumstances. Because the processing is necessary for a public task, the right to object may be limited where the processing is necessary for a public task. To exercise any of these rights, please contact the data protection officer of the relevant council. (Details follow). You have the right to contact any of the participating councils although requests would normally be managed by the council that originally collected the information. You may also complain to the Information Commissioner's Office (ICO) if you are unhappy with how your data has been handled.
Further information
Full details of the joint controller arrangement (including respective responsibilities) are set out in the Derbyshire LGR Data Sharing Agreement, which is available on request from any of the participating councils or via their websites once published.
Participating councils' DPO contact details
Here is a full list of the participating councils' DPO contact details:
This privacy notice was last updated on 5 August 2026 and will be reviewed as the LGR programme progresses or if processing arrangements change.