{"id":190942,"date":"2024-10-25T18:19:01","date_gmt":"2024-10-25T17:19:01","guid":{"rendered":"https:\/\/legalvision.co.uk\/?p=190942"},"modified":"2025-03-20T10:37:39","modified_gmt":"2025-03-20T10:37:39","slug":"business-handle-criminal-offence-data","status":"publish","type":"post","link":"https:\/\/legalvision.co.uk\/data-privacy-it\/business-handle-criminal-offence-data\/","title":{"rendered":"Is My Business Allowed to Handle Criminal Offence Data?"},"content":{"rendered":"\n

If you are a business hiring staff, you may need to use criminal offence data for various reasons, such as to carry out important criminal records checks on potential applicants. However, processing criminal offence data is subject to strict legal requirements under the UK General Data Protection Regulation (UK GDPR<\/strong>) and the Data Protection Act 2018<\/em> (DPA 2018<\/strong>). Criminal offence data relates to personal information about criminal convictions, allegations, or related security measures. Due to the sensitive nature of this data, businesses must comply with specific data protection legal rules to avoid breaches and potential penalties. This article will explore key issues and rules from a data protection law perspective when processing criminal offence data in your business.<\/p>\n\n\n\n

What is Criminal Offence Data?<\/h2>\n\n\n\n

Criminal offence data<\/a> includes information about an individual’s criminal history, such as convictions, police cautions, or probation conditions. It also covers information about allegations, investigations, and even records showing the absence of criminal convictions, such as a clear Disclosure and Barring Service check.\u00a0<\/p>\n\n\n\n

Due to its sensitivity, processing this data requires extra protection under the law. Businesses can only handle this data if they have legal authority or meet specific legal requirements in the UK GDPR and DPA 2018<\/em>.<\/p>\n\n\n\n

Can My Business Process Criminal Offence Data?<\/h2>\n\n\n\n

Your business may process criminal offence data from a data protection law standpoint, but only if certain legal conditions are met. For privacy businesses, you should consider the following essential requirements: <\/p>\n\n\n\n

You Must Have a Lawful Basis and Meet a Schedule 1 Condition<\/h3>\n\n\n\n

Under Article 6 of the UK GDPR, you need a lawful reason for processing criminal offence data. For example, an employer may have a legitimate interest in processing data related to an applicant’s criminal record to assess their suitability for employment. <\/p>\n\n\n\n

Additionally, you must meet a condition listed in Schedule 1 of the DPA 2018<\/em> to justify processing this data.<\/p>\n\n\n\n

\n

Before processing criminal offence data, your business must identify and record the lawful basis and the appropriate Schedule 1 condition to ensure compliance with data protection law.<\/p>\n<\/div>\n\n\n\n

This documentation is critical to demonstrating that the processing is legal and protecting your business from potential penalties.<\/p>\n\n\n\n

You Cannot Maintain a Comprehensive Register of Convictions Without Official Authority<\/h3>\n\n\n\n

Businesses are not permitted to keep records of criminal convictions unless they have official authority to do so, such as public bodies tasked with specific legal duties.<\/p>\n\n\n\n\n\n Continue reading this article below the form\n <\/i>\n<\/a>\n

\n
\n Need legal advice?\n
\n \n Call 0808 196 8584<\/a> for urgent assistance.\n
\n Otherwise, complete this form, and we will contact you within one business day.\n <\/span>\n <\/div>\n\n \n\n
\n