JEMR covers key statutory and discretionary duties including preparing for, responding to and recovering from emergencies. This is done as part of the Cumbria Local Resilience Forum, along with other agencies and Cumberland Council who also have this duty under the Civil Contingencies Act 2004.
What information we collect
We need some personal data from you. This includes:
- your address
- email address
- phone number
- current employment details if you are a member of another organisation or business
- contractual information if you are contracted to provide a service or assistance in an emergency
We need some special category data requirements from you, such as disabilities and medical conditions.
We do not need criminal and law enforcement data from you.
How we collect your data
We’ll collect your data by:
- a paper or online form
- telephone
- a member of our staff or one of our partners in person
Why we collect your data
We collect your data so we can:
- undertake emergency planning and response
- coordinating the countywide Emergency Response & Recovery to an incident in Cumbria with various external emergency roles/agencies
- create and maintain emergency plans alongside other agencies (such as Control of Major Accident Hazard Plans and Radiation (Emergency Preparedness and Public Information) Plans
- ensure business continuity
- maintain the continuity of our services
- deal with incidents which may impact business continuity
- undertake training and exercises
- create training and exercising emergency response plans and promoting resilience
- enable community resilience by undertaking community emergency planning
- support the use of Emergency Response and Recovery Plans during incidents, training and exercises
- provide training and exercising to our council and the members of the Cumbria Local Resilience Forum partnership
- train and exercise internal business continuity plans at the service, departmental and corporate level
Who we share your personal data with
Where there is a lawful reason to do so, we may share your data with:
- statutory bodies, such as the Environment Agency, police, and parish councils
- other local authorities
- elected members
- other emergency services, armed forces, organisations and businesses responding to a local or national incident or emergency
- volunteers responding to a local or national incident or emergency
Your personal information will also be given to third parties contracted by us to provide a service to us. These service providers are known as data processors and have a legal obligation under GDPR and to us to look after your personal information and only use it for providing that service. In particular, we have entered into a contract with Alert Cascade Ltd to manage its Public Telephone Warning System.
Legal basis
We process personal data by selecting at least one legal basis from:
- UKGDPR Article 6(1) (c) Legal Obligation
- UKGDPR Article 6(1) (e) Public Task/Public Interest/Official Authority
Where we’re relying on UKGDPR Article 6(1)(c), all relevant legislation is listed below.
We process special category personal data under the condition of UKGDPR Article 9(2) (g) Substantial public interest.
Relevant legislation
The relevant legislation includes:
- Civil Contingencies Act 2004 [CCA]
- Major Accident Control Regulations [MACR]
- Radiation (Emergency Preparedness and Public Information) Regulations 2019 [REPPIR]
- Control of Major Accident Hazards 2015 [COMAH]
- Pipelines Safety Regulations [PS]
- Military Aid to the Civil Authorities (MACA)
- Equality Act 2010