What is Assertion 10?

Assertion 10 is a new requirement in the 2025/26 Annual Governance and Accountability Return (AGAR) for English Parish and Town councils, focusing on digital and data compliance.

It requires Councils to prove they manage data legally, using secure IT systems (including gov.uk domains) and comply with General Data Protection Regulations (GDPR).

The Key Details of Assertion 10 are:-

Core Focus: To ensure councils properly manage data, maintain website accessibility, and implement thorough and robust IT policies.

Requirements: Councils must confirm they are acting as a proper data controller and processor using secure, ideally council owned email systems. Personal email accounts should not be used on security grounds.

Implementation: The National Association of Local Councils (NALC) has provided a resource hub, including a data protection roadmap and an IT policy template to assist councils to meet these standards

Timeline: Assertion 10 is a formal and mandatory part of the AGAR submission for the 2025/26 financial year 

​