NI Water and its appointed service provider may process personal data where necessary and proportionate to investigate, prevent or respond to suspected standpipe misuse, unauthorised connections, unlawful water abstraction, damage to NI Water assets, enforcement action, legal claims or prosecution. This may include contact and account details, usage and location records, reports of suspected misuse, photographs or images, vehicle details, DVLA-derived information, suspected-offender information, witness or reporter details, correspondence, investigation records and evidential material. Where this information relates to alleged offending or enforcement action, NI Water will apply additional safeguards, including restricted access, secure handling, audit controls, case-specific review, defined retention periods and secure deletion when no longer required. Information may be shared with NI Water’s service provider, legal advisers, enforcement bodies, regulators, DVLA, courts, tribunals or other competent authorities where lawful, necessary and proportionate.