What's included in The Local Council Data Protection Compliance Toolkit service?
Every council will have to declare its compliance with UK GDPR and the Data Protection Act.
With summer looming, now is the time to act.
Starting from the 2025/26 AGAR, every parish and town council will have to confirm that they are compliant with their legal obligations under UK GDPR and The Data Protection Act.
​
The new Annual Governance Statement (AGS) Assertion 10 requirements will focuse on local council digital governance, UK GDPR compliance, and website/email standards.
​
Assertion 10 not only mandates that councils use a council-owned email domain and maintain an accessible website in accordance with legal requirements, but it also explicitly requires parish and town councils to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Councils must ensure that personal data is processed lawfully, fairly, and in line with UK GDPR principles, while also recognising their responsibilities in acting as both a Data Controller and a Data Processor.
What local councils need to know
.png)
Why this matters:
From the 2025/26 AGAR, parish and town councils will be required to complete a new Assertion 10 as part of its Annual Governance Statement. This new requirement goes beyond the previous expectations bundled together under Assertion 3.
From the 2025/2026 financial year, parish and town councils will have to confirm their compliance with UK GDPR, the Data Protection Act, and other digital governance obligations as part of their Annual Governance and Accountability Return (AGAR)
​
That is why Breakthrough Communications is announcing a new support package for local councils, called The Local Council Data Protection Compliance Toolkit.
​​
What the Data Protection Compliance Toolkit delivers:
We offer on-demand, bitesize training modules tailored for clerks and council officers, providing comprehensive guidance on achieving data protection compliance within councils.
The programme includes brand-new, customisable templates and resources that can be adapted to meet your council’s specific needs. A UK GDPR and Data Protection Compliance Checklist is also provided to help track progress towards full compliance.
In addition, monthly Masterclasses deliver practical advice on key aspects of council data protection, such as the use of CCTV, handling photography and videography at events, managing councillors’ use of personal data, personal devices, email lists, subject access requests (SARs), and other UK GDPR-related processes, as well as FOI and EIR management. Regular Zoom drop-in clinics are also available to provide real-time troubleshooting and support.
Why it’s worth it:
It’s designed to take the pressure off. Giving your council a clear, supported pathway to information compliance, with relevant tools and templates, step-by-step guidance, council-specific training, and year-round support through live clinics and events.
​
Investing time now into building compliant processes and developing specific policies in line with the new requirements set out in the new Practitioners' Guide Assertion 10 requirements, will save you time and reduce your stress later.