NALC launches groundbreaking data protection roadmap for parish and town councils

We have launched a major new resource to help parish and town councils build confidence in data protection and prepare for the introduction of Assertion 10 in the Annual Governance and Accountability Return (AGAR) from 2025/26. Designed to cut through complexity and empower parish and town councils of all sizes, the new Data Protection Roadmap marks a significant step in supporting the sector's governance, professionalism, and commitment to public trust.

Data protection can feel daunting for parish and town councils juggling multiple responsibilities, especially when the language is technical and the requirements are wide-ranging. Yet it remains a fundamental part of good governance and a vital safeguard for residents' rights. Our new roadmap tackles this challenge head-on by offering a clear, plain English guide that breaks data protection into manageable steps, helping councillors, clerks, and council staff understand what they need to do and why.

With the AGAR set to include a new requirement for smaller authorities to confirm they have appropriate data protection measures in place, parish and town councils are being encouraged to take a proactive approach. While the new Assertion 10 does not introduce additional legal duties, it highlights the importance of embedding strong, well-documented data protection practices. The roadmap supports councils in doing just that, providing a structured journey that takes them from mapping the data they hold to identifying lawful bases, assessing risks, and building everyday compliance into their operations.

The roadmap is packed with practical tools, including checklists, reflective questions, and real-world examples that help councils apply each stage to their own context. Every council is different, and this resource avoids a one-size-fits-all approach by giving councils the flexibility to make decisions that reflect their size, functions, and capacity. Where parish and town councils want to explore issues in more detail, the roadmap signposts authoritative guidance from the Information Commissioner's Office, helping them navigate more complex areas with confidence.

At its core, the roadmap reinforces a simple but important message that good data protection builds trust. It shows residents that parish and town councils handle personal information with care and transparency, reduces the risk of complaints, and gives councillors and staff clarity and reassurance in their work. By the end of the process, councils will have a clear picture of the data they process, their lawful bases, their risk decisions, and the policies and practices needed to make data protection part of everyday council business.

This new resource represents a landmark investment in strengthening governance across the community tier of local government. We encourage parish and town councils to explore the roadmap, work through the stages, and take advantage of the support available as they prepare for the new AGAR requirements. In doing so, parish and town councils can build confidence, reduce risk, and demonstrate their ongoing commitment to serving communities with professionalism and transparency.

We have developed the roadmap in partnership with Breakthrough Communications, our specialist provider for data protection and information compliance support. With extensive experience working with parish and town councils across England, Breakthrough Communications brings expert insight and practical guidance that has shaped the roadmap's straightforward, achievable approach.