Data Matching Level 2 Notice

We are required by law to protect the public funds we administer.

We may share information provided with other bodies responsible for:

  • auditing
  • administering public funds
  • undertaking a public function

in order to prevent and detect fraud.

Data matching involves comparing computer records held by one body against other computer records held by the same or another body to see how far they match.

This data is usually personal information.

Computerised data matching allows potentially fraudulent claims and payments to be identified. Where a match is found it may indicate that there is an inconsistency which requires further investigation.

No assumption can be made as to whether there is fraud, error or other explanation until an investigation is carried out.

We participate in the Cabinet Office’s National Fraud Initiative: a data matching exercise to assist in the prevention and detection of fraud.

We are required to provide particular sets of data to the Minister for the Cabinet Office for matching for each exercise.

The use of data by the Cabinet Office in a data matching exercise is carried out with statutory authority under Part 6 of the Local Audit and Accountability Act 2014. It does not require the consent of the individuals concerned under the Data Protection Act 1998.

Data matching by the Cabinet Office is subject to a Code of Practice.

See the Level 3 Notice on the Cabinet Office website for further information.

We may also share information with other councils, government agencies and associated partners, in order to prevent and detect fraud.

In particular, we will share data with Surrey County Council, other councils and partner organisations as part of the Surrey Counter Fraud Partnership Data Hub project.

The use of data for this project is carried out under our legal obligations:

  • Section 151 of Local Government Act 1972 requires every authority to make arrangements for the proper administration of their financial affairs
  • The Accounts and Audit Regulations 2015 – Part 2 Internal Control:
    • ‘The financial control systems … must include … measures …to enable the prevention and the detection of inaccuracies and fraud…’.
    • Further, the project relates to data processing which is exempt from legislative privacy provisions:
  • a) Section 29 of the Data Protection Act 1998 – Crime and Taxation:

Personal data processed for any of the following purposes:

  • The prevention or detection of crime
  • The assessment or collection of any tax or duty or of any imposition of a similar nature,

are generally exempt from the first data protection principle.

For further information email