National Fraud Initiative

Privacy Notices for Public Bodies (Level 2)

Midlothian Council is required by law to protect the public funds it administers. It may share information provided to it with other bodies responsible for auditing or administering public funds, in order to prevent and detect fraud. Auditor General for Scotland, Audit Scotland appoints the auditor to audit the accounts of this authority. It is also responsible for carrying out data matching exercises.

On behalf of the Auditor General for Scotland, Audit Scotland appoints the auditor to audit the accounts of this authority. It is also responsible for carrying out data matching exercises.

About data matching

Data matching involves comparing computer records held by one body against other computer records held by the same or another body to see how far they match. This is usually personal information. Computerised data matching allows potentially fraudulent claims and payments to be identified, but the inclusion of personal data within a data matching exercise does not mean that any specific individual is under suspicion.

Where a match is found it may indicate that there is an inconsistency which requires further investigation. No assumption can be made as to whether there is fraud, error or other explanation until an investigation is carried out. The exercise can also help bodies to ensure that their records are up to date.

Audit Scotland currently requires us to participate in a data matching exercise to assist in the prevention and detection of fraud. We are required to provide particular sets of data to Audit Scotland for matching for each exercise. These are set out in Audit Scotland's website:

The types of data that we match

The Council has participated in the National Fraud Initiative (NFI) for a number of years by supplying information in relation to:

• Housing Benefit and Council Tax Benefit claimants
• Housing Tenants /Right to Buy
• Staff payroll
• Blue Badge holders
• Private Care Home residents
• Electoral Register (full voters roll)
• Council Tax information (single persons discount)
• Insurance data

Data matching Code of Practice

The use of data by Audit Scotland in a data matching exercise is carried out with statutory authority, normally under its powers in Part 2A of the Public Finance and Accountability (Scotland) Act 2000. It does not require the consent of the individuals concerned under the Data Protection Act 1998.

Useful links 

Data matching by Audit Scotland is subject to a Code of Data Matching Practice.

• Audit Scotland - Code of data matching practice

Further information on Audit Scotland's legal powers and the reasons why it matches particular information.

• National Fraud Initiative (NFI) - Privacy notice

Alternatively, a hard copy of the fair processing statement can be made available on request.