Decision

To authorise entering into a Data Processing Agreement between Wiltshire Council and Ubico Limited relating to the mobilisation of Kerbside Waste and Recycling Collection Services

Reasons for the decision

Wiltshire Council has appointed Ubico Limited to provide Waste Collection Services from 1st August 2026. Prior to service delivery, Ubico Limited will be undertaking certain mobilisation activities, and during the course of the mobilisation period Ubico Limited will process personal data on behalf of the Council.

The Data Processing Agreement sets out the roles and obligations of the parties in relation to the processing of personal data and is required to ensure that such processing is carried out in accordance with UK General Data Protection Regulation and the Data Protection Act 2018 and all other data protection law.

I confirm that in making this decision I have considered the following in line with Wiltshire Council’s Constitution:

Key decision requirements: No

Views of relevant cabinet member(s), committee chairman, area board(s): NA

Consultation with cabinet member(s), the Leader and Scrutiny (for Executive decisions taken under Emergency Powers): NA

Consultation in accordance with the council’s consultation guidance and the views emanating from that process: NA

Implication of any council policy, initiative, strategy or procedure: Yes - complies with council policy

Staffing, financial and legal implications: Yes - complies with data protection legislation

The assessment of any associated risks in accordance with the Council’s risk management strategy: Yes – Data Protection Impact Assessment in progress

Involvement of appropriate statutory officers and/or corporate directors and directors: NA

Regional or national guidance from other bodies where relevant: Yes

The council’s constitution, including the Procurement and Contract Rules (Part 10) and the Financial Regulations and Procedure Rules (Part 9), all relevant guidance, legislation, codes of practice, and protocols: Yes

Alternative options considered

Not entering into a Data Processing Agreement would risk non-compliance with data protection legislation