National Fraud Initiative (NFI)

Privacy Notice

National Fraud Initiative

This Privacy notice should be read in conjunction with Privacy notices for Employee and Suppliers https://www.fermanaghomagh.com/your-council/privacy-statement/corporate-services/

What information is being collected?
1. The National Fraud Initiative collects information that you provide when seeking payment of an invoice from the Council. This is referred to as trade creditor standing and payment history data. Data specifications setting out exactly what data we collect in the above areas can be accessed at: https://www.niauditoffice.gov.uk/national-fraud-initative

2. The National Fraud Initiative collects information that you provide when seeking payment for employment from the Council. This is referred to as payroll data. Data specifications setting out exactly what data we collect in the above areas can be accessed at: https://www.niauditoffice.gov.uk/national-fraud-initative

Who is collecting it?
The Comptroller and Auditor General is the Data Controller which means that the Comptroller and Auditor General determines how the information is collected, used, protected and shared where appropriate.

How is it collected?
1. Trade creditor standing and payment history data will have been provided by you within procurement documents that you have completed and submitted to Fermanagh and Omagh
District Council as part of you participating in a procurement opportunity and from information you have provided to the Council to enable payment to be made to you for goods, works and services that you have supplied the Council with.
2. Payroll data will have been initially collected from you at application stage using either a manual application or online application where information is gathered through our data processer. If deemed successful at interview an appointment letter will have been issued to you using the contact details provided at application stage. Amendments to your personal details are made by you.

Why is it being collected?
The legal basis for processing your personal data is that processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.

The National Fraud Initiative is conducted using the data matching powers bestowed on the
Comptroller and Auditor General by Article 4 of the Audit and Accountability (Northern Ireland) Order 2003.

How will it be used?
The purpose(s) for which we are processing your personal data is:
The Comptroller and Auditor General conducts data matching exercises to assist in the prevention and detection of fraud. This is one of the ways in which the Comptroller and Auditor General takes responsibility within government for public sector efficiency and reform.

Data matching involves comparing sets of data, such as the payroll or benefits records of a body, against other records held by the same or another body to see how far they match. The data is usually personal information. The data matching allows potentially fraudulent claims and payments to be identified. Where a match is found it may indicate that there is an inconsistency that requires further investigation. No assumption can be made as to whether there is fraud, error or other explanation until an investigation is carried out.

The processing of data by the Comptroller and Auditor General in a data matching exercise is carried out with statutory authority under its powers in Article 4 of the Audit and Accountability (Northern Ireland) Order 2003. It does not require the consent of the individuals concerned under data protection legislation or the GDPR.

All bodies participating in the Comptroller and Auditor General’s data matching exercises receive a report of matches that they should investigate, so as to detect instances of fraud, over- or underpayments and other errors, to take remedial action and update their records accordingly.

Who will it be shared with?
Your personal data will be shared by the National Fraud Initiative as necessary for the purposes of preventing and detecting fraud with:
• the Cabinet Office
• the Comptroller and Auditor General for Northern Ireland
• the Auditor General for Wales
• the Auditor General for Scotland
• the Accounts Commission for Scotland and Audit Scotland

It will also be shared with mandatory participants who include:
• district and county councils
• London and metropolitan boroughs
• unitary authorities
• combined authorities
• police authorities
• fire and rescue authorities
• pension authorities
• NHS Trusts
• Foundation Trusts
• Integrated Care Boards
• passenger transport authorities
• passenger transport executives
• waste authorities
• Greater London Authority and its functional bodies

In addition, the following bodies provide data to the NFI for matching on a voluntary basis:
• private sector pension schemes (various)
• Metropolitan Police – Operation Amberhill
• Special health authorities
• housing associations and other social housing providers
• probation authorities
• national park authorities
• central government pensions schemes
• Insurance Fraud Bureau
• central government departments
• Social Security Scotland
• Synectics Solutions Limited SIRA
• LexisNexis Risk Solutions Ltd
• AirBnB
• Tenancy Deposit Protection Scheme
• Credit reference agencies
• other private organisations/companies

Data matching services are then provided to the NFI by the Department for Work and Pensions, and the NFI IT Supplier.

How long will it be retained for?
The data will be retained by NFI as outlined in the following link:
NFI Privacy Notice 2022 | Northern Ireland Audit Office (niauditoffice.gov.uk)