Appropriate policy document

Some of Schedule 1's conditions for processing special category and criminal offence data require us to have an APD in place which sets out and explains the procedures for securing compliance with the principles in Article 5 of the UK General Data Protection Regulations (UK-GDPR) and policies regarding the retention and erasure of such personal data.

This information explains our processing and satisfies the requirements of Schedule 1, Part 4 of the DPA 2018.

In addition it provides some further information about our processing of special category and criminal offence data where a policy document isn’t a specific requirement. The information supplements our privacy notice and staff privacy notice.

Our processing of special category and criminal offence data for law enforcement purposes is not covered in this document. Processing for law enforcement purposes is carried out by us in our capacity as a competent authority and falls under Part 3 of the DPA 2018.

For further information see the safeguards policy for sensitive law enforcement processing.