PRACTICE NOTES
The handling of personal data for policing objectives is expressly and specifically governed by Part 3 of the Data Protection Act 2018 (DPA 2018) and operates as a separate and distinct regime from the general processing of personal data under the UK General Data Protection Regulation, Assimilated Regulation (EU) 2016/679 (UK GDPR). DPA 2018, Pt 3 applies to those competent authorities that process personal data for ‘law enforcement purposes’. It includes processing for preventing, investigating, detecting or prosecuting criminal offences, or carrying out criminal penalties, and encompasses safeguarding against, and preventing, threats to public security. DPA 2018, Pt 3 transposed the EU Law Enforcement Directive (EU) 2016/680 (EU LED) into UK law. The Information Commissioner’s Office (ICO) has issued guidance specifically on duties under DPA 2018, Pt 3, which is essential reading for advisers in this field. The ICO guidance, currently under review, can be
Corporate Crime