Personal data collected for law enforcement purposes must be specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes.
We process personal data for all the law enforcement purposes listed in the sensitive processing section.
We may process personal data collected for one of these purposes providing the processing is necessary and proportionate to that purpose.
We will only use data collected for a law enforcement purpose for purposes other than law enforcement, where we are authorised by law to do so.
If we are sharing data with another controller, we will document that they are authorised by law to process the data for their purpose.