Toggle mobile menu visibility

Highways privacy notice

What this document is for

This privacy notice provides details on how we, Norfolk County Council, use your personal information for the purposes of providing highways services.

By 'use' we mean the various ways your personal information may be processed including storing and sharing the information.

Further details

We also provide the following details in our general privacy notice on our website:

  • Who we are
  • How long we use your information for
  • Your rights under the UK General Data Protection Regulation (the GDPR) and
  • How to exercise them 

You can also ask us for a copy of this information.

What we use your information for

We may use the information about you to:

  • Assess and manage applications
  • Deal with Flood and water management (including investigations and to implement changes)
  • Communicate with you about highway repairs
  • Respond to any enquiries which you submit to us
  • Manage our network (e.g. traffic management)
  • Bus Lane and Moving Traffic Enforcement
  • Recovering damages to NCC property (e.g. street furniture)
  • Responding to and investigating health and safety issues on the highway network
  • Investigating reports of faulty street lighting

We also use this information to assess the quality of our services and evaluate and improve our policies and procedures.

We may also use information in other ways compatible with the above.

What personal data we collect and use about you

We may collect and use:

  • Name
  • Contact details (address, telephone number, email address)
  • Payment details (if you have paid for an application or service)
  • Date of birth
  • CCTV Footage (traffic management on roads)
  • Vehicle Registration Number (via ANPR used for traffic enforcement)
  • Bank details (where payments are made by you to us, or by us to you)
     

Who provides this information

We receive most of this information from you, but we may also obtain some of this data from:

  • Other Government Agencies
  • Site Owners and Operators
  • Emergency Services
  • Schools, Academies, and Colleges
  • Recorded images from CCTV Cameras (including ANPR cameras)
  • Local and district authorities
  • Service providers such as: Amey (maintain street lighting), Swarco (maintain traffic signals) and Norse (maintain CCTV)

Who we share your information with

We may need to share your information with:

  • Other Norfolk County Council Departments
  • Local Planning Authorities
  • City, District or Borough Councils
  • Emergency Services
  • Utilities (e.g Anglian Water)
  • Government Agencies

Any information which is shared will only be shared on a need to know basis, with appropriate individuals. Only the minimum information for the purpose will be shared.

Your personal information may also be given to third parties contracted by the County Council to provide a service to the County Council. These service providers are known as data processors and have a legal obligation under GDPR and to the County Council to look after your personal information and only use it for providing that service. In particular, the County Council has entered into a contract with:

  • Amey (Street lighting)
  • Norse Highways (Highway Works and CCTV)
  • Tarmac (Highway Works)
  • WSP (Highways Design and Schemes)
  • nGenius (Traffic information)
  • Swarco (Maintain traffic signals)

How the law protects you and the legal basis for processing your information

We have legal grounds under the GDPR to process this information because it is necessary:

For the performance of a task carried out in the public interest and the task or function has a clear basis in law

These statutory powers and duties are:

  • Highways Act 1980
  • Town and Country Planning (Development Management Procedure) (England) Order 2015
  • Flood and Water Management Act 2010
  • Land Drainage Act 1991
  • Traffic Management Act 2004
  • Wildlife and Countryside Act 1981
  • Commons Act 2006
  • Commons Registration Act 1965
  • Road Traffic Act 1988
  • Road Traffic Regulation Act 1984
  • Health and Safety at Work Act 1974

How long will we keep your personal information for

When the information is no longer needed for the above purposes, it will be securely deleted.

If we need to use your information for research or reports, your information will be anonymised and any information taken from notes (handwritten or typed) during any consultation sessions will be securely destroyed. The information will continue to be used in a summarised and anonymised form in any research reports or papers that are published. The anonymised information in the papers may be of historic interest and may be held in public archives indefinitely.

How we keep your information

The information is stored electronically, on the County Council's network including records management systems and in hard copy media (including paper files).

We do not process your information outside of the European Economic Area.

Automated decision making

We do not make automated decisions about you and your family.

Changes to this notice

We may amend this privacy notice at any time so please review it frequently. The date below will be amended each time this notice is updated.

This notice was updated in May 2023.