Legal
Sign-up
Three-week Trial, Enrolment and Cancellation
Enrolment and trial sign-up constitutes acceptance of these Terms and Conditions by such participant and/or participant’s parent or carer.
Parent or carer must complete the enrolment or trial sign-up form before participant is permitted to attend the classes or participant in performances and other activities if they are under the age of 18.
Once the three-week trial has ended and should the participant continue to attend the classes, parent or carer must complete an enrolment form if the participant is under the age of 18.
Participant, parent or carer may terminate enrolment or three-week trial at any time where the participant is under 18 years old.
Fees/Payments
Classes are payable 4 weeks in advance once a participant has attended three-week trial
During trial, all classes are payable one week in advance
No refunds will be given for any classes missed by participant for any reason – this includes if the participant has been suspended or expelled.
Company T-shirt is £12 (and other Merchandise and clothing is available for purchase) and must be purchased three weeks after trial has ended (unless no longer attending) or participating in the productions.
Membership is required for participants aged 18 and over who wish to participate in performances. However, first 12 months is free and thereafter it’s £20 per annual.
Membership is non-refundable.
Membership is payable before rehearsals commence and participation in any performances or other events, except auditions, classes and any other events agree by us.
See fees page for other costs.
Other Information
Youth aged 12 years old and over (within reason) can arrive and leave the premises and other events by themselves, but only with agreement with the principal/director and the youth’s parent or carer. However, all parents and carers have the right to not permit youth aged under 16 to arrive and leave the premises and other events by themselves.
All teachers and other staff (where applicable) must hold an Enhanced Disclosure certificate and be on the DBS Update Service.
All participants must follow the Code of Conduct while attending lessons or attending other events. Details of the Code of Conduct will be given to each participant.
The participant accepts no responsibility for any accidents or injuries which arise from participants misbehaving and/or not following these Terms and Conditions or the Code of Conduct. It is understood that in an emergency basic first aid may be administered by a trained member of staff.
The company reserves the right at any time to suspend or permanently remove a participant from the company for any reason and at its sole discretion, subject to reasonable reason, such as bad behaviour.
Subject to your consent, you hereby grant permission for the company to use any photographs or videos taken in or around classes/productions for the purposes of publicity. Photographs/videos taken during classes or in our shows remain the property of the company and may not be used without permission
You agree not to make copies or reproductions of any materials or scripts we lend or give to the participants unless agreed otherwise.
All such materials remain the property of the company.
We will never share your information with any third parties for any reason unless required to do so by law. All contact information is treated in the strictest confidence and in strict compliance with the latest Data Protection legislation.
Any waiver of any provision of these Terms and Conditions will be effective only if in writing and signed by the company. If Terms & Conditions is found to be unenforceable, wherever possible this will not affect any other clause, and each will remain in full force and effect.
A person who is not a party to these Terms and Conditions has no right under the Contracts (Rights of Third Parties) Act 1999 to rely upon or enforce any term of these Terms & Conditions.
These Terms & Conditions shall be governed by the laws of England and Wales and in the event of any dispute you agree to submit to the exclusive jurisdiction of the English courts.
Appropriate clothing must be worn every week.
No jewellery should be worn for safety reasons.
Code of Conduct
Integrity Character
To respect and adhere to the guidelines and policies of Blackpool Community Theatre CIC.
To be a person who represents high levels of personal integrity, always putting honour and morals ahead of personal success
To be a person who has the courage and willingness to face issues and concerns with maturity and dignity
To avoid gossip, criticism, or denigrating comments
Leadership
To guide, direct, and influence others to achieve their highest goals and ideals
To set an example though one’s actions and speech.
To inspire and serve the people of your class, team, community, etc.
To recognise oneself as a role model.
To be a person who interacts with others in a mature manner and questions authority with respect.
To speak of any issue or grievance to the person who is able to resolve the concern.
To be willing to receive coaching and direction when deemed appropriate
Anti-bullying
Blackpool Community Theatre CIC has a zero tolerance bullying policy. Please see our anti-bullying policy
Anti-bullying Policy
Definition of Bullying
Bullying is the use of aggression with the intention of hurting another person. Bullying results in pain and distress to the victim.
Bullying can be:
Emotional: Being unfriendly, excluding, tormenting (e.g. hiding possessions, using threatening gestures)Physical: Pushing, hitting, kicking or any use of violence. Racist racial taunts, graffiti, gestures
Sexual: Unwanted physical contact or sexually abusive comments
Homophobic: Because of or focusing on the issue of sexuality
Religious: Because of or focusing on the issue of faith.
Verbal: Name-calling, sarcasm, spreading rumours.
Cyber: All areas of internet, such as email and internet chat room misuse, mobile phone threats by text messaging and calls misuse of associated technology, i.e. camera and video facilities
Implementation
Blackpool Community Theatre CIC’s director oversees the implementation and review of the Anti-bullying Policy
Blackpool Community Theatre CIC is used as a forum to discuss the problem of bullying and to agree systems to tackle unacceptable behaviour with young people.
Outcome
The bully (bullies) may be asked to apologise genuinely and other consequences may take place.
In very serious cases, suspension or exclusion could be considered If possible, the participants will be reconciled.
Monitoring and Record Keeping
After the incident(s) have been investigated and dealt with, each case will be monitored in striving to ensure repeated bullying does not take place.
Evaluation
Records of incidents are kept and used to inform future practice
Spot checks and occasional surveys are also used
Evaluation and review will ensure that Blackpool Community Theatre CIC remains responsible to changing needs whilst striving to protect young people from bullying.
What We Intend To Achieve
The vigilance and responsiveness of staff and volunteers to bullying behaviour
Acknowledgement by young people that bullying will be tackled
Raised awareness about bullying and the forms it can take. greater proportion of young people informing an adult if they are being bullied.
The involvement of staff, volunteers, parents and young people in implementing the Anti-bullying Policy.
Blackpool Community Theatre CIC acknowledges that bullying behaviour is unacceptable and will not be tolerated.
We endeavour to ensure that a secure environment is provided for every young person who wishes to participate in the performing art
Child and Adult Safeguarding
Introduction
The Safeguarding Officer is David Baker. Telephone 0300 102 8815 . Email: sageguarding@bctcic.co.uk
Blackpool Community Theatre CIC fully committed to safeguarding the welfare of all children and adults by taking all reasonable steps to protect them from neglect, physical, sexual or emotional harm
Blackpool Community Theatre aims to keep safe all children and adults who uses its services as well as the paid staff and volunteers who work for Blackpool Community Theatre CIC.
Blackpool Community Theatre CIC aims to provide safe, positive and empowering environments for all children and adults who engage in projects, programmes and events organised directly by it, or in partnership with other or organisations.
Blackpool Community Theatre CIC works with children and adults aims to be fun and informative. This can only be achieved in an atmosphere of trust and respect.
Blackpool Community Theatre CIC recognises that there are a variety of approaches required to ensure an effective prevention of harm strategy. These include creating the right environment, developing practice standards, empowering young people, paid staff and volunteers, sharing information and developing a monitoring role.
Blackpool Community Theatre CIC recognises that there are a variety of activities.
Dissemination
Blackpool Community Theatre CIC recognises that there are a variety of approaches required to ensure an effective prevention of harm strategy. These include creating the right environment, developing practice standards, empowering young people, paid staff and volunteers, sharing information and developing a monitoring role.
Review Date
This Policy and Procedure will be reviewed very 2 years by the company director, to ensure that the operation of this procedure is satisfactory.
This document was created in February 2024. Blackpool Community Theatre CIC will review any incidents during the year and take the appropriate action to resolve them, adapting policies and procedures immediately if so required.
Designated Safeguarding Officer
Be specifically trained to carry out this role. Be familiar with and have an understanding of all legislation and guidance relating to safeguarding and child protection.
Receive information from paid staff, volunteers, children and young people, parents and carers about child protection concerns.
Assess this information promptly and take appropriate action
Maintain secure, confidential records of any child protection or other safeguarding concerns raised, action taken and follow-up required
Provide support during and after incidents involving child protection.
Know how to contact and establish links with the Local Safeguarding
Children Boards and the relevant departments within Local Authorities and police and be familiar with local referral procedures Assess the safeguarding and child protection learning and development needs of all staff and volunteers and coordinate the training
Promote safeguarding across the organisation and keep all staff and volunteers informed on good practice and new legislation and guidance
Monitor the overall trend of safeguarding concerns, keep records of their disposal and feed back to the organisation on the quality of their safeguarding work
It is not the responsibility or staff to decide whether a young person has been abused or is at significant risk.
Investigation of child abuse is a specialised professional task which should only be undertaken by the designated agencies, i.e. the Local Authority Children’s Services, police, Local Safeguarding Children’s Board or the NSPCC. However, they have a responsibility to act on any concerns and report them in accordance with the reporting procedure.
The one thing a staff member must not do is NOTHING!
Act immediately – do not delay Consider whether the child or young person is in immediate danger. If they are, contact the police, Local Authority, Local Safeguarding Children’s Board or parents or carers (if appropriate).
If allegations have been made about a member of staff or a volunteer, report the matter to someone higher within the organisation. The organisation’s disciplinary procedure should be followed.
If the child is not in immediate danger and you are with the child, listen to what they want to share with you about the incident. Do not ask leading or interrogating questions, just questions for clarification only.
Contact your local services team and discuss any future action with them, e.g. if an allegation against a member of staff or a volunteer contact the Local Safeguarding Children’s Board Local Authority Designated Officer, if regarding a child contact Children’s Services and if regarding a vulnerable adult contact Adult Services, etc.
Agree with the Local Safeguarding Children’s Board team ongoing support for the child. When considering and taking any action, the child or young person’s welfare must be paramount.
Record the Name, age, date of birth, home address and telephone number of the child
Whether or not the person making the report is expressing their own concerns or those of someone else.
The nature of the allegation. Include dates, times, any special factors and other relevant information
Make a clear distinction between what is fact, opinion or hearsay
A description of any visible bruising or other injuries. Also, any indirect signs, such as unusual or distinctive behaviour
Consent To Parent and Carers
Consent must be obtained from a child’s parent or carer for any Blackpool Community Theatre CIC activity involving a person under the age of 18 years. Blackpool Community Theatre CIC consent form will be used for this purpose.
Blackpool Community Theatre CIC may want to take photographs or record the activities undertaken by the children. Online classes will not be photographed or recorded.
Blackpool Community Theatre CIC commits to ensure that all publications and media represent participants appropriately and with due respect..
Individuals and organisations commissioned by us or working in partnership with us cannot use film and photography without the consent of the participating groups.
Where possible and appropriate the Blackpool Community Theatre CIC gets explicit consent when people register for an event directly.
Consent must be obtained from a child’s parent or carer for any Blackpool Community Theatre CIC’s activity involving a person under the age of 18 years.
Blackpool Community Theatre CIC consent form will be used for this purpose
During activities, copies of consent forms will be available to relevant staff present, in case of an emergency and the need to contact a parent or carers
Forms will be kept in a place which is only accessible to staff and the location f the forms must be known to all staff participating in the event
Blackpool Community Theatre CIC may want to take photographs or record the activities undertaken by the children.
Online classes will not be photographed or recorded unless agreed with parent or carer.
Personal information about the individual will not accompany the image
Blackpool Community Theatre CIC receives a blanket permission to record our events through film and photography. However, should a parent/carer/child not give consent then no filming or photos of them shall take place.
This permission restricts use for Blackpool Community Theatre CIC own promotional use, i.e website, social media.
Where a drama leader or teacher books for an event on behalf of a young people, the company gets the leader or teacher to sign to say they are responsible for getting explicit, individual consent.
Blackpool Community Theatre CIC states at events that they will be taking photographs and video shots of activities and performances for use within Blackpool Community Theatre CIC’s photographic library, printed company publications, publicity and on its website, to support and promote the work of Blackpool Community Theatre CIC
Confidentiality
While Blackpool Community Theatre CIC staff will ensure that young people’s rights to privacy and confidence is respected, there may be times when this confidence needs to be breached
If a child or adult discloses information about him/herself or another child/adult which raises safeguarding concerns about the safety of that child/adult or others, then these concerns will be reported to the Designated Safeguarding Officer in line with the company reporting concerns procedure which is included in this policy.
Blackpool Community Theatre CIC will ensure that the child or adult involved is consulted and kept informed about what action, if any, is to be taken and during each step of the reporting procedure.
Any personal information gathered about a child regarding a child or protection concern will be stored in a secured and confidential place. Only appropriate staff will have access to this information (e.g. paid staff member or volunteer involved.
It may be necessary to pass this information on to the relevant Local Authority and police.
Blackpool Community Theatre CIC staff will ensure that any information gained or given will be treated with the strictest of confidence
Children and adults will be consulted and involved in the decision-making.
Definition of Abuse
Neglect: the persistent or severe neglect and failure to meet the child’s or adult’s basic physical and or psychological needs, i.e food, warmth, shelter, clothing, care and protection
Physical : any form of non-accidental injury or failure to protect against injury to a child or young person. This may involve hitting, shaking, poisoning, throwing, suffocating, burning and scalding. Physical harm may also be caused when a parent or carer puts on the symptoms of, or deliberately causes, ill health to a child or adult under their care
Emotional : severe or persistent rejection or emotional ill treatment of the child or adult which would negatively affect the emotional or behavioural development of the child or adult.
Sexual: the actual, or likely, sexual exploitation of the child or adult by any person, whether or not that child or adult aware of what is happening. This would include physical contact and non-physical contact involving a child (looking at pornographic materials, watching sexual activities, or encouraging children or adults to behave in sexually inappropriate ways). It is also recognised that there are other sources of stress for children, adults and their families, for example social exclusion, domestic violence, mental illness or drug and alcohol misuse
Disclosure and Barring Service
Children’s and adult’s well-being is paramount and therefore all our staff (where applicable such as teachers are Disclosure and Barring Service checked and on the Update Service.
When our staff’s Enhanced Disclosure certificate is added to the Update Service, the DBS will keep their certificate up-to-date by performing a weekly search on the Police National Computer to see if any new information has come to light since its issue date.
If any new information is flagged when Disclosure and Barring Service carry out the checks, the outcome of a status check performed by us or parent/carer, will reveal that the certificate is no longer valid and a new DBS check would be necessary to find out what criminal or barring info is available on the Police National Computer.
Privacy
Introduction
This privacy policy explains in detail the types of personal data Blackpool Community Theatre CIC may collect about you when you interact with us. It also explains how we’ll store and handle that data and keep it safe.
Please read this privacy policy carefully.
By accessing or browsing this website, you confirm that you have read, understood and agree to this privacy policy in its entirety.
Blackpool Community Theatre CIC
The company registration and postal address is Blackpool Enterprise Centre, 291 – 305 Lytham Road, Blackpool, FY4 1EW. Our registration number is 15488440.
Explaining the legal bases we rely on
The law on data protection, based on the General Data Protection Regulation and formerly the Data Protection Act, sets out a number of different reasons for which a company may collect and process your personal data, including
Consent:
In specific situations, we can collect and process your data with your consent. This may be when you have ticked a box to receive regular communications from us in a paper or electronic document or on our website
When collecting your personal data, we’ll always make clear to you which data is necessary in connection with a particular service.
Contractual obligations:
In certain circumstances, we need your personal data to comply with our contractual obligations.
If you have made a booking inquiry then we will need your contact details for example.
When do we collect personal data
When you visit our website
When you engage with us on social media
When you contact us by any means to make enquiries or sign-up
When you comment on or review Blackpool Community Theatre CIC
What sort of personal data do we collect
Personal information including name, age, contact details and home address
Details of your interactions with us such as with our website, email and social media
Copies of documents you provide us or signed contracts
Payment information
Your comments and reviews
Your social media username, if you interact with us through those channels, to help us respond to your comments, questions or feedback.
How we’ll use your personal data and why
Of course, you are free to opt out of hearing from us by any of these channels at any time.
To send you relevant, personalised communications by post or email in relation to updates, offers and services.
To perform any contract, we’ve agreed with you. If we don’t collect your personal data during this process, we won’t be able to provide the required services and comply with our legal obligations.
To respond to your queries or complaints
Handling the information, you sent enables us to respond. We may also keep a record of these to inform any future communication with us and to demonstrate how we communicated with you throughout. We do this on the basis of our contractual obligations to you, our legal obligations and our legitimate interests in providing you with the best service and understanding how we can improve our service based on your experience
To protect our business from fraud and other illegal activities. We’ll do all of this as part of our legitimate interest.
Service messages will not include any promotional content and do not require prior consent when sent by email or text message. If we do not use your personal data for these purposes, we would be unable to comply with our legal obligations.
To send you survey and feedback requests to help improve our service
How we protect Your Personal Data
We know how much data security matters to all our clients. With this in mind we will treat your data with the utmost care and take all appropriate steps to protect it. Our computers and mobile devices are all password protected.
We regularly monitor our systems for possible vulnerabilities and constantly
review our security
How long will we keep your personal data
Whenever we collect or process your personal data, we’ll only keep it for as long as is necessary for the purpose for which it was collected.
At the end of that retention period, your data will either be deleted completely or anonymised, for example by aggregation with other data so that it can be used in a non-identifiable way for statistical analysis and business planning.
Her Majesty’s Revenue and Customs (HMRC) requires us to keep records of contracts, payments and invoices for 7 years. We will therefore normally hold information of any contracts for this long.
Who do we share your personal data with
Anyone required to do so by law such as the police.
Should that be necessary
We provide only the information they need to perform their specific services.
They may only use your data for the exact purposes we specify in our contract with them.
We work closely with them to ensure that your privacy is respected and protected at all times
Where your personal data may be processed
our data may be processed anywhere in the world including while using website features such as Google Fonts.
Our website is hosted in the United Kingdom
You have the right to request
Access to the personal data we hold about you, free of charge in most cases
The correction of your personal data when incorrect, out of date or incomplete.
The right to deletion, for example when you withdraw consent, or object and we have no legitimate overriding interest, or once the purpose for which we hold the data has come to an end (such as the end of a warranty).
That we stop using your personal data for direct marketing (either through specific channels, or all channels).
That we stop any consent-based processing of your personal data after you withdraw that consent
You have the right to request a copy of any information about you that we hold at any time, and also to have that information corrected if it is inaccurate
To ask for your information, please contact us on supply contact details) If we decide not to action your request we will explain to you the reasons for our refusal
Your right to withdraw consent
Whenever you have given us your consent to use your personal data, you have the right to change your mind at any time and withdraw that consent.
Where we rely on our legitimate interest.
In cases where we are processing your personal data on the basis of our legitimate interest, you can ask us to stop for reasons connected to your individual situation. We must then do so unless we believe we have a legitimate overriding reason to continue processing your personal data
Direct marketing
You have the right to stop the use of your personal data for direct marketing activity through all channels, or selected channels. We must always comply with your request
Contacting The Regulator
If you feel that your data has not been handled correctly, or you are unhappy with our response to any requests you have made to us regarding the use of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO). You can contact them by calling 0303 123 1113 or go online to www.ico.org.uk/concerns
If you live outside the UK
By using our services or providing your personal data to us, you expressly consent to the processing of your personal data by us or on our behalf. Of course, you still have the right to ask us not to process your data in certain ways, and if you do so, we will respect your wishes
Sometimes we’ll need to transfer your personal data between countries to enable us to supply the goods or services you’ve requested. In the ordinary course of business, we may transfer your personal data from your country of residence to ourselves and to third parties located in other countries.
By dealing with us, you are giving your consent to this overseas use, transfer and disclosure of your personal data outside your country of residence for our ordinary business purposes. This may occur because our information technology storage facilities and servers are located outside your country of residence, and could include storage of your personal data on servers in the United States
We’ll ensure that reasonable steps are taken to prevent third parties outside your country of residence using your personal data in any way that’s not set out in this Privacy Notice. We’ll also make sure we adequately protect the confidentiality and privacy of your personal data
Cookie Policy
This website uses cookies to collect information about you
Cookies are small data files which are placed on your computer by this website and which collect certain personal data about you. This enables us to tailor our service offering (including the website) to provide you with products and services which are more relevant to your individual tastes
However, you may change your website browser settings to reject cookies, although please note that if you do this it may impair the functionality of the Services. As each website browser is different, please visit your browser’s Help” menu to learn how to change your cookie preference.
Confidentiality Policy
General principles
Blackpool Community Theatre CIC recognises that colleagues (employees, volunteers and students) gain information about individuals and organisations during the course of their work or activities. In most cases such information will not be stated as confidential and colleagues must exercise common sense and discretion in identifying whether this information should be communicated to others. Information given in confidence must not be disclosed without consent unless there is a justifiable reason e.g. a requirement of law or there is an overriding public interest to do so.
Confidential information includes anything that contains the means to identify a person, e.g. name, address, post code, date of birth, National Insurance Number, passport and bank details. It includes information about sexual life, beliefs, commission or alleged commission of offences and other sensitive personal information as defined by the Data Protection Act. It also includes information about organisations such as confidential business plans, financial information, contracts, trade secrets and procurement information
Colleagues should seek advice from their line manager about confidentiality and sharing information as necessary
Colleagues will avoid exchanging personal information or comments about individuals with whom they have a professional relationship.
Talking about the private life of a colleague is to be avoided at all times, unless the colleague in question has instigated the conversation.
Colleagues will avoid discussing confidential information about organisations or individuals in social settings.
Colleagues will not disclose to anyone, other than their line manager, any information considered sensitive, personal, financial or private without the knowledge or consent of the individual, or an officer, in the case of an organisation.
Where there is a statutory duty on Blackpool Community Theatre CIC to disclose information, the person or people involved will usually be informed that disclosure has or will be made unless this would put at risk the safety of any individual or jeopardise a potential criminal investigation. Details about disclosure of information and who has been informed will always be kept on record and stored securely with restricted access.
Confidential information will be stored securely. It will not le left on desks but locked away. On computer it will be stored in password protected folders.
Why information is held
Most information held by Blackpool Community Theatre CIC relates to individuals, voluntary and community organisations, self-help groups, volunteers, students, employees, trustees or services which support or fund them.
Information is kept to enable Blackpool Community Theatre CIC colleagues to understand the history and activities of individuals or organisations in order to deliver the most appropriate services.
Blackpool Community Theatre CIC has a role in putting people in touch with voluntary and community organisations and keeps contact details which are passed on to any enquirer, except where the group or organisation expressly requests that the details remain confidential.
Information about students is given to the training organisation and the college, but to no one else.
Information about protected equality characteristics of users is kept for the purposes of monitoring our equal opportunities policy and also for reporting back to funders.
Access to information
Information is confidential to Blackpool Community Theatre CIC as an organisation and may be passed to colleagues, line managers or trustees on a need to know basis to ensure the best quality service for users.
Where information is sensitive, i.e. it involves disputes or legal issues, it will be confidential to the employee dealing with the case and their line manager. Such information should be clearly labelled ‘Confidential’ and should state the names of the colleagues entitled to access the information and the name of any individual or group who may request access to the information.
Colleagues will not withhold information from their line manager unless it is purely personal.
Users may have sight of Blackpool Community Theatre CIC records held in their name or that of their organisation. The request must be in writing to the Chief Officer giving 14 days’ notice and be signed by the individual, or in the case of an organisation’s records, by the Chair or Executive Officer. Sensitive information as outlined in para 3.2 will only be made available to the person or organisation named on the file.
Employees may have sight of their personnel records by giving 14 days’ notice in writing to the Chief Officer.
When photocopying or working on confidential documents, colleagues should ensure people passing do not see them. This also applies to information on computer screens.
Storing information
General non-confidential information about organisations is kept in computer files and is only accessible to the company director or any other staff member approved by him.
Duty to disclose information
There is a legal duty to disclose some information including:
Child and vulnerable adult abuse will be reported to the relevant statutory services
Drug trafficking, money laundering or acts of terrorism will be disclosed to the police.
In addition colleagues believing an illegal act has taken place, or that a user is at risk of harming themselves or others, must report this to the Chief Officer who will report it to the appropriate authorities.
Users should be informed of this disclosure unless this would put at risk the safety of any individual or jeopardise a potential criminal investigation. Details about disclosure of information and who has been informed will always be kept on record and stored securely with restricted access
Disclosures
Blackpool Community Theatre CIC complies fully with the DBS Code of practice (E File) regarding the correct handling, use, storage, retention and disposal of Disclosures and Disclosure information.
It is a criminal offence to pass this information to anyone who is not entitled to receive it.
Documents will be kept for a year and then destroyed by secure means. Photocopies will not be kept. However, Blackpool Community Theatre CIC will keep a record of the date of issue of a Disclosure, the name of the subject, the type of Disclosure requested, the position for which the Disclosure was requested, the unique reference number of the Disclosure and the details of the recruitment decision taken.
Data Protection Act
Please see our privacy policy for details.
Breach of confidentiality
Misuse of personal data and security incidents must be reported to company director so that steps can be taken to rectify the problem and ensure that the same problem does not occur again. This includes unauthorised access to person-identifiable information where a member of staff, or third party, does not have a need to know. It also includes incidents of information lying around in a public area, theft and loss of information