As a data controller, The Policing Authority is subject to the (EU) General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (DPA) when processing personal data. As such, all personal data held by the Authority must be treated in compliance with the following eight rules.
- To obtain and process information fairly.
- To keep it for one or more specified, explicit and lawful purpose.
- To use and disclose it in ways compatible with these purposes.
- To keep it safe and secure.
- To keep it accurate, complete and up to date.
- To ensure that it is adequate, relevant and not excessive.
- To retain it no longer than is necessary.
- To give a copy of their personal information to that individual on request.
The Policing Authority's Data Protection Policy sets out how the Policing Authority secures and manages personal data in accordance with the Principles of GDPR. For further information, please read the Policing Authority's Data Protection Policy
Data Protection Rights
Under data protection law every individual has rights in relation to how their data is processed by The Policing Authority. Every individual has the right to request correction or erasure of their personal data if it is inaccurately recorded and to access any personal data relating to them held by The Policing Authority. To assist in your Subject Access Request (SAR) please complete the request form.
The Policing Authority will respond to your request within one month or in the circumstance where the request is complex or numerous this period may be extended by one further month as outlined in the terms of GDPR/Data Protection Act 2018. Where a request is clearly unfounded, excessive, of a repetitive nature or where more than one copy is sought, a fee may apply.
In the event that you wish to make a complaint about how your personal data is being processed by The Policing Authority or how your request has been handled, you have the right to lodge a complaint directly with the Data Protection Commission at firstname.lastname@example.org
The Policing Authority may be required to share information with other public bodies in certain circumstances. The Policing Authority shall be able to demonstrate that any sharing of personal information be justified and ensure that all parties involved in the processing do so in accordance with the data protection fair processing rules.
Data Protection Officer
The Data Protection Officer can be contacted in relation to any data protection concerns that you may have by email at email@example.com or by post at:
The Data Protection Officer
The Policing Authority
90 King Street North