If your organisation relies on criminal record checks as part of its recruitment, it is vital to understand that using this data raises important legal considerations and potential risks, particularly from a data protection law perspective. <\/p>\n\n\n\n
Criminal offence data has strict requirements under UK data protection law, and misunderstanding the rules can result in both compliance failures and unfair outcomes for individuals. <\/p>\n\n\n\n
This article explores: <\/p>\n\n\n\n
This article is a simplified guide to a complex topic and focuses solely on data protection issues. You should also consider any other legal or regulatory obligations that may apply and seek legal advice if you are unsure. <\/p>\n\n\n\n
This type of data can include information about an individual\u2019s criminal history, such as: <\/p>\n\n\n\n
Criminal offence data can even be information relating to criminal offences and convictions, even if no conviction is revealed. As criminal offence information is highly sensitive, the law gives it extra protection. <\/p>\n\n\n\n
Put simply, a business can only use this type of data if the processing is either carried out under the control of an official authority or is clearly authorised by data protection law rules.<\/a> It must be truly necessary for a specific purpose, and the business must show that there is no less intrusive way to achieve the same outcome.<\/p>\n\n\n\n Data protection law treats criminal record information as especially sensitive because its misuse can cause real harm to individuals. Therefore, it requires enhanced protection.<\/p>\n\n\n\n Using this information carelessly can: <\/p>\n\n\n\n People with criminal records may already face stigma, and unnecessary or poorly thought-out use of this data can make that worse. <\/p>\n\n\n\n In the workplace, this can lead to unfair or indirectly discriminatory decisions, especially where employers rely on assumptions instead of facts or apply blanket policies without proper justification. Therefore, employers should ensure that the decision to obtain or use this type of data is based on clear, job-related criteria rather than general concerns or assumptions. They must comply with strict data protection rules when processing criminal offence information about individuals. <\/p>\n\n\n\n The UK GDPR takes a cautious approach to this type of data. Guidance from the regulator stresses the need for: <\/p>\n\n\n\n Before collecting criminal offence data, such as for background checks, your organisation must be able to show that: <\/p>\n\n\n\n You must take into account whether a less intrusive approach could reasonably achieve the same aim. Employers should keep intrusion to a minimum and avoid asking for checks simply because they think they might be useful.<\/p>\n<\/div>\n\n\n\n\n\n Continue reading this article below the form\n <\/i>\n<\/a>\nHandling Criminal Record Information Responsibly<\/h2>\n\n\n\n
\n
\n
\n