{
    "document_id": 12487,
    "page": 4,
    "width_pt": 595.32,
    "height_pt": 841.92,
    "rotation": 0,
    "pipeline_version": "paddleocr-vl-1.6+paul-48",
    "engine": "paddleocr_vl",
    "source_run_id": 12598,
    "item_count": 27,
    "counts_by_type": {
        "footer": 1,
        "header": 2,
        "heading": 5,
        "list": 3,
        "list_item": 9,
        "text": 7
    },
    "build_ms": 2,
    "items": [
        {
            "id": "p4.1",
            "order": 1,
            "type": "header",
            "bbox": {
                "l": 70.3058,
                "t": 805.2,
                "r": 195.3206,
                "b": 792.24
            },
            "text": "Newquay Town Council",
            "attrs": {
                "block_label": "header"
            },
            "level": 2
        },
        {
            "id": "p4.2",
            "order": 2,
            "type": "header",
            "bbox": {
                "l": 338.3318,
                "t": 805.2,
                "r": 524.7742,
                "b": 792.72
            },
            "text": "Data Governance – Core Document",
            "attrs": {
                "block_label": "header"
            },
            "level": 2
        },
        {
            "id": "p4.3",
            "order": 3,
            "type": "list",
            "bbox": {
                "l": 87.3424,
                "t": 769.8552,
                "r": 351.7691,
                "b": 738.96
            },
            "text": "",
            "attrs": {
                "item_count": 2
            },
            "children": [
                {
                    "id": "p4.3.1",
                    "order": 4,
                    "type": "list_item",
                    "bbox": {
                        "l": 87.5823,
                        "t": 769.8552,
                        "r": 246.6703,
                        "b": 755.52
                    },
                    "text": "Anti-malware protection;",
                    "marker": "-"
                },
                {
                    "id": "p4.3.2",
                    "order": 5,
                    "type": "list_item",
                    "bbox": {
                        "l": 87.3424,
                        "t": 754.25568,
                        "r": 351.7691,
                        "b": 738.96
                    },
                    "text": "Secure backup and recovery arrangements.",
                    "marker": "•"
                }
            ]
        },
        {
            "id": "p4.4",
            "order": 6,
            "type": "text",
            "bbox": {
                "l": 69.346,
                "t": 731.04,
                "r": 480.3832,
                "b": 699.6
            },
            "text": "Use of personal devices is governed by the Council's BYOD Policy and is permitted only where authorised by the IT Service."
        },
        {
            "id": "p4.5",
            "order": 7,
            "type": "heading",
            "bbox": {
                "l": 69.586,
                "t": 665.28,
                "r": 315.2964,
                "b": 648.72
            },
            "text": "9. Data handling and classification",
            "attrs": {
                "block_label": "paragraph_title"
            },
            "level": 3
        },
        {
            "id": "p4.6",
            "order": 8,
            "type": "text",
            "bbox": {
                "l": 69.586,
                "t": 642.24,
                "r": 494.0604,
                "b": 627.36
            },
            "text": "Information must be handled in accordance with its sensitivity and purpose."
        },
        {
            "id": "p4.7",
            "order": 9,
            "type": "heading",
            "bbox": {
                "l": 70.0659,
                "t": 619.2,
                "r": 140.6117,
                "b": 605.04
            },
            "text": "Users must:",
            "level": 3
        },
        {
            "id": "p4.8",
            "order": 10,
            "type": "list",
            "bbox": {
                "l": 108.01248,
                "t": 596.1297599999999,
                "r": 502.898928,
                "b": 534.74736
            },
            "text": "",
            "attrs": {
                "item_count": 4
            },
            "children": [
                {
                    "id": "p4.8.1",
                    "order": 11,
                    "type": "list_item",
                    "bbox": {
                        "l": 108.01248,
                        "t": 596.1297599999999,
                        "r": 259.77384,
                        "b": 581.1815999999999
                    },
                    "text": "Store information securely;",
                    "marker": "•"
                },
                {
                    "id": "p4.8.2",
                    "order": 12,
                    "type": "list_item",
                    "bbox": {
                        "l": 108.02352,
                        "t": 580.6516799999999,
                        "r": 397.057344,
                        "b": 565.70352
                    },
                    "text": "Share information only where lawful and necessary;",
                    "marker": "-"
                },
                {
                    "id": "p4.8.3",
                    "order": 13,
                    "type": "list_item",
                    "bbox": {
                        "l": 108.03456,
                        "t": 565.05216,
                        "r": 484.646496,
                        "b": 550.104
                    },
                    "text": "Dispose of information securely in line with the Retention Schedule;",
                    "marker": "•"
                },
                {
                    "id": "p4.8.4",
                    "order": 14,
                    "type": "list_item",
                    "bbox": {
                        "l": 108.0456,
                        "t": 549.69552,
                        "r": 502.898928,
                        "b": 534.74736
                    },
                    "text": "Avoid unnecessary duplication or local storage of sensitive information.",
                    "marker": "-"
                }
            ]
        },
        {
            "id": "p4.9",
            "order": 15,
            "type": "heading",
            "bbox": {
                "l": 70.7857,
                "t": 498.96,
                "r": 340.0115,
                "b": 482.4
            },
            "text": "10. Incident and breach management",
            "attrs": {
                "block_label": "paragraph_title"
            },
            "level": 3
        },
        {
            "id": "p4.10",
            "order": 16,
            "type": "text",
            "bbox": {
                "l": 69.346,
                "t": 476.64,
                "r": 502.9386,
                "b": 446.16
            },
            "text": "All suspected or actual information security incidents must be reported to the DPO immediately."
        },
        {
            "id": "p4.11",
            "order": 17,
            "type": "text",
            "bbox": {
                "l": 68.8661,
                "t": 437.76,
                "r": 509.6573,
                "b": 390.72
            },
            "text": "Security incidents involving personal data are managed in accordance with the Council's Data Breach Procedure, including assessment, containment, notification and learning."
        },
        {
            "id": "p4.12",
            "order": 18,
            "type": "heading",
            "bbox": {
                "l": 70.3058,
                "t": 356.88,
                "r": 330.6533,
                "b": 339.36
            },
            "text": "11. Third-party and supplier security",
            "attrs": {
                "block_label": "paragraph_title"
            },
            "level": 3
        },
        {
            "id": "p4.13",
            "order": 19,
            "type": "text",
            "bbox": {
                "l": 69.8259,
                "t": 334.08,
                "r": 342.6509,
                "b": 318.96
            },
            "text": "Where third parties process Council information:"
        },
        {
            "id": "p4.14",
            "order": 20,
            "type": "list",
            "bbox": {
                "l": 86.3826,
                "t": 310.37712,
                "r": 430.4732,
                "b": 264.24
            },
            "text": "",
            "attrs": {
                "item_count": 3
            },
            "children": [
                {
                    "id": "p4.14.1",
                    "order": 21,
                    "type": "list_item",
                    "bbox": {
                        "l": 86.3826,
                        "t": 310.37712,
                        "r": 380.5633,
                        "b": 296.16
                    },
                    "text": "Appropriate contractual safeguards are required;",
                    "marker": "•"
                },
                {
                    "id": "p4.14.2",
                    "order": 22,
                    "type": "list_item",
                    "bbox": {
                        "l": 86.8625,
                        "t": 294.89904,
                        "r": 423.2747,
                        "b": 280.56
                    },
                    "text": "Suppliers must demonstrate suitable security measures;",
                    "marker": "•"
                },
                {
                    "id": "p4.14.3",
                    "order": 23,
                    "type": "list_item",
                    "bbox": {
                        "l": 86.8625,
                        "t": 279.4209599999999,
                        "r": 430.4732,
                        "b": 264.24
                    },
                    "text": "Access is limited to what is necessary for service delivery.",
                    "marker": "•"
                }
            ]
        },
        {
            "id": "p4.15",
            "order": 24,
            "type": "heading",
            "bbox": {
                "l": 70.5458,
                "t": 229.44,
                "r": 369.0456,
                "b": 212.88
            },
            "text": "12. Remote working and personal devices",
            "attrs": {
                "block_label": "paragraph_title"
            },
            "level": 3
        },
        {
            "id": "p4.16",
            "order": 25,
            "type": "text",
            "bbox": {
                "l": 69.8259,
                "t": 206.64,
                "r": 514.9362,
                "b": 191.52
            },
            "text": "Remote working and use of personal devices introduce additional security risks."
        },
        {
            "id": "p4.17",
            "order": 26,
            "type": "text",
            "bbox": {
                "l": 69.346,
                "t": 183.6,
                "r": 520.935,
                "b": 137.28
            },
            "text": "Such activity is permitted only in accordance with the Council's BYOD Policy and related guidance, which sets out security requirements, user responsibilities and permitted use."
        },
        {
            "id": "p4.18",
            "order": 27,
            "type": "footer",
            "bbox": {
                "l": 515.896,
                "t": 62.64,
                "r": 524.5343,
                "b": 52.32
            },
            "text": "4",
            "attrs": {
                "block_label": "number"
            }
        }
    ],
    "excluded_furniture": {
        "first": [],
        "last": []
    }
}