General data protection regulation (GDPR)

UK GDPR and Data Protection Act 2018


We will only process your information in accordance with the UK GDPR and Data Protection Act 2018 when we are confident that we have a lawful basis for doing so. This means that one of the following conditions from Article 6 of the UK GDPR must be met whenever we process your personal data:

  • it is necessary to perform our public tasks
  • it is required by law or we have a legal obligation to collect the information
  • it is necessary to protect someone in an emergency or to protect public health
  • you have entered into a contract with us
  • it is necessary for the purpose of pursuing a legitimate interest
  • you, or your legal representative, have given consent, and this consent has not been withdrawn. If you have provided us with your consent to use your personal information, you can withdraw your consent at any time by contacting us.

Where we use personal information for law enforcement purposes, we will do so in accordance with Part 3 of the Data Protection Act 2018. The term ‘law enforcement purposes’ relates to the prevention, investigation, detection or prosecution of criminal offences, or the execution of criminal penalties (including the safeguarding against, and the prevention of, threats to public security).

Sometimes we may need to collect and use special category information about you. We may do so where:

  • it is necessary to perform our public tasks (which are in the substantial public interest)
  • it is necessary to comply with employment, social security or social protection laws
  • it is necessary for legal claims
  • it is information which has already been made public by you
  • it is in the public interest for public health reasons
  • it is necessary for medical purposes
  • it is necessary for archiving, statistical and research purposes
  • the use of special category information about you is necessary to protect you or someone else in an emergency; or
  • we have your explicit consent to use the particular special category information about you

In some limited circumstances we may also need to collect and use criminal history information about you. We may do so where:

  • it is in the substantial public interest
  • it is necessary for any legal claims
  • it is necessary to protect you or someone else in an emergency
  • it is information which is already in the public domain, or
  • we have your explicit consent to use criminal history information about you

Where we use sensitive personal information for law enforcement purposes, we will only do this where it relates to a pressing social need, which cannot reasonably be achieved through less intrusive means. Such processing will only take place if either one of the law enforcement purposes set out in Part 3 of the Data Protection Act 2018 is satisfied, or you have given your consent.