Adult Privacy Notice

The Police Service of Northern Ireland gathers and holds personal information which it uses for policing purposes. The policing purposes are set out in Part 6 of the Police (Northern Ireland) Act 2000. It states that it shall be the general duty of police officers to protect life and property, preserve order and to prevent the commission of offences and, where an offence has been committed, to take measures to bring the offender to justice.  hey provide the legal basis for collecting, recording, evaluating, sharing and retaining police information.

The Police Service of Northern Ireland processes personal data for three broad purposes:

1. Policing;
2. Staff administration;
3. The provision of services to support the Policing Purpose.

The Police Service of Northern Ireland is also obliged to process information when required to do so by other legal obligations including enactments, court orders, or common law reasons and also for research and statistical purposes, including the production of official statistics. On the unique occasion where the Police Service of Northern Ireland relies solely on consent to process personal data, individuals should be aware that they have the right to withdraw this consent at any time. Where the Police Service of Northern Ireland have a legal basis to process information, consent will not be sought and will not be the basis relied upon to process that information.

The Police Service of Northern Ireland must ensure compliance with data protection principles; therefore, staff are directed by relevant policies and procedures in relation to data protection. In order to meet these standards the Police Service of Northern Ireland will ensure data is processed in a specified, legitimate, adequate, accurate, timely manner with stringent security controls. The Police Service of Northern Ireland maintains a record of processing activities throughout the organisation in order to retain these standards. We will only process personal data by lawful means and in line with processing conditions, for personal and Special Category Data[3] as dictated in legislation.

Sensitive Processing under Part 2 of DPA 2018

Sensitive Processing under Part 3 of DPA 2018

 

The Police Service of Northern Ireland holds information relating to a range of individuals including victims, witnesses, complainants, suspects and offenders, in connection with this policing purposes as well as details of others who work for or with the Police Service of Northern Ireland. The Police Service of Northern Ireland may process both personal information and special category information relating to or consisting of the following:

• Personal details such as name, date of birth, address and biographical details
• Physical identifiers including DNA, fingerprints and other genetic samples
• Family, lifestyle and social circumstances
• Criminal proceedings, outcomes and sentences
• Religious or other beliefs of a similar nature
• Physical or mental health or condition
• Education and training details
• Employment details
• Financial details
• Goods or services provided
• Racial or ethnic origin
• Political opinions
• Trade union or staff association membership
• Offences (including alleged offences)
• Sound and visual images
• Licenses or permits held
• Criminal intelligence
• Sexual life / sexual orientation
• References to manual records or files
• Complaint, incident and accident details

This information will be held both electronically and in hard copy. Electronic records include information stored on a computer and CCTV, while hard copy records include paper records i.e. in a file.

The Police Service of Northern Ireland may process personal data relating to a wide variety of individuals (data subject); this data can come from a wide variety of sources, these are noted below:

Data subject

Witnesses and victims	Correspondents, enquiries and complainants
Offenders and suspected offenders	Personnel including permanent police officers and police staff, volunteers, agents, temporary and casual workers
Relatives, guardians and associates of the individual concerned	Former and potential members o staff, pensioners and beneficiaries
Advisers, consultants and other professional experts	Suppliers

Data source

Individuals themselves including witnesses, victims, offenders, suspected offenders and persons making an enquiry or complaint	The Police Service of Northern Ireland may also obtain personal data from other sources such as its ow CCTV systems or correspondence
Relatives, guardians or other persons associated with the individual	Producers of statistics and research including surveys
Employees of the Police Service of Northern Ireland	Private sector organisations working with police in anti-crime strategies
Prisons	Auditors
HM Revenue and Customs and other law enforcement agencies	Currents, past or prospective employers of the individual
Courts, legal representatives, prosecuting authorities and defence solicitors	Healthcare, social and welfare advisors or practitioners
Her Majesty's Inspectorate of Constabulary	Education, training establishments and examining bodies
Central and local government - governmental agencies and departments	Business associates and other professional advisors
The media	Suppliers, providers of goods or services
Emergency services	Persons making an enquiry or complaint
Licensing authorities	Financial organisations and advisors
Security companies	Survey and research organisations
Partner agencies involved in crime and disorder strategies	Trade, employer associations and professional bodies
Voluntary and charitable organisations	Publicly accessible sources eg internet search
Staff associations

 

The Police Service of Northern Ireland retains information, including personal information, as long as the Service considers necessary for the purpose or purposes for which it was collected. The time periods are as detailed in the Service Review, Retention and Disposal Schedule. 

The Police Service of Northern Ireland takes the security of all personal information under our control very seriously; we have a number of policies in place which provide detailed procedures on specific information security controls, countermeasures and practices which must be adhered to. We will comply with the relevant parts of the legislation relating to security. We will ensure that appropriate policy, training, technical and procedural measures are in place, including audit and inspection, to protect our manual and electronic information systems from data loss and misuse, and only permit access to them when there is a legitimate reason to do so, and then under strict guidelines as to what use may be made of any personal data contained within them. These procedures are continuously managed and enhanced to ensure up-to-date security.

In order to carry out the purposes described under paragraph 1 above the Police Service of Northern Ireland may disclose personal data to a wide variety of recipients. This will include, but not be limited to disclosures to those listed as “data sources” in section 4 including, law enforcement agencies, partners in criminal justice, and to bodies or individuals working on our behalf such as contractors or survey organisations for example within the Criminal Justice System as part of the pre-charge and post charge processes, i.e. prosecuting someone through the Court. We may also disclose to other bodies or individuals where necessary to prevent harm to individuals. Disclosures of personal data will be made on a case-by-case basis, using the personal data appropriate to a specific purpose and circumstance, and with necessary controls in place.

Some of the bodies or individuals to which we may disclose personal data are situated outside of the European Union - some of which do not have laws that protect data protection rights as extensively as in the European Union. If we do transfer personal data to such territories, we will take proper steps to ensure adequate safeguards are in place as required by the Data Protection legislation and policing guidelines.

The Police Service of Northern Ireland will also disclose personal data to other bodies or individuals when required to do so by, or under, any act of legislation, by any rule of law, and by court order such as to other professional or regulatory bodies the Police Service of Northern Ireland may also disclose personal data on a discretionary basis where it is necessary for the purpose of, and in connection with, any legal proceedings or for obtaining legal advice. Any disclosure of personal information is carefully considered in accordance with legislation, policy, and/or information sharing agreements governing that sharing.

Individuals have various rights enshrined in the Data Protection legislation, these are detailed below. Further detail on these rights can be accessed within Articles 15 – 23 of the GDPR and Part 3 of the Data Protection Bill. The Police Service of Northern Ireland are permitted to ask data subjects to provide proof of their identity before giving effect to their rights. This ensures the security of your personal information. Requested information or responses to individuals requesting their rights are enacted should be provided, subject to exemptions[5], to the individual without undue delay and in any event within one month of receipt of the request and free of charge. Where a controller receives large numbers of requests from individuals, or they are especially complex, the time limit may be extended by a maximum of two further months. Requests deemed excessive or manifestly unfounded will not be processed. Individuals will be made aware of this extension and the reasons for delay explained. The Police Service of Northern Ireland will process any requests from individuals in relation to these rights; however, where the Police Service of Northern Ireland have a legitimate business purpose for processing this data, or an exemption applies, the Police Service of Northern Ireland does not have to give effect to the right. We will communicate this to you and highlight our reliance on the Data Protection legislation for this. By requesting your rights are enacted, the Police Service of Northern Ireland will be required to further process your personal information in order to keep a record of what amendments, if any, have been made and the justification for any decisions made. Where the Police Service of Northern Ireland need to enact the rights of rectification, erasure and restriction, we will do so as far as is reasonably practicable.

The Right to Access

Subject Access is the most commonly exercised right. Individuals can request a copy of their personal data and other information about how the Police Service of Northern Ireland processes your information. Where the Police Service of Northern Ireland withholds some or all of the requested information we will provide details, where possible, around the decision in line with Data Protection legislation.

The right to rectification

Individuals are entitled to have personal data rectified if it is inaccurate or incomplete. If the Police Service of Northern Ireland has disclosed the personal data in question to third parties; we must inform them of the rectification where possible. We will also inform the individuals about the third parties to whom the data has been disclosed, where appropriate. Where the Police Service of Northern Ireland is not taking action in response to a request for rectification, we will provide details around the decision.

The right to erasure

The right to erasure does not provide an absolute ‘right to be forgotten’. Individuals have a right to have personal data erased and to prevent processing in specific circumstances including, if consent is withdrawn, the data was processed unlawfully, compliance with legal obligation, and where processing if no longer necessary for the purpose it was originally collected.  

There are some specific circumstances where the right to erasure does not apply and the Police Service of Northern Ireland can refuse to deal with a request including, if it is necessary to meet a legal obligation or defend a legal claim.

The right to restrict processing

In certain conditions individuals have a right to request the Police Service of Northern Ireland ‘block’ or suppress/restrict processing of personal data such as where individuals dispute the accuracy of their information or the processing is no longer needed.

Once processing is restricted, the Police Service of Northern Ireland is permitted to store the personal data, but not process it further except on limited grounds such as with individual’s consent or in relation to legal claims. If the Police Service of Northern Ireland has disclosed the personal data in question to third parties, we must inform them about the restriction on the processing of the personal data, unless it is impossible or involves disproportionate effort to do so.

The Police Service of Northern Ireland must inform individuals before any restriction is lifted.

 As above, the Police Service of Northern Ireland may be required to restrict processing when an individual has contested the accuracy of data or has objected to the processing and these issues are being investigated. Or when the data subject has opposed erasure or requires the data to be retained in order to progress a legal claim.

The right to data portability

The right to data portability allows individuals to obtain and reuse their personal data for their own purposes across different services, this includes individuals being provided with their data in a commonly used electronic format in order that it can then be easily transferred or ‘ported’ to another data controller as and when required (either by the individual themselves, or the Police Service of Northern Ireland). This right only applies to personal data which an individual has provided to the Police Service of Northern Ireland which is processed by automated means; by virtue of the individual’s consent or for the performance of a contract. The right to data portability does not extend to processing of personal information for law-enforcement processing.

The right to object

Individuals have the right to object to processing unless the Police Service of Northern Ireland can demonstrate explicitly how it is linked to the purposes described under paragraph 1 or the processing is for the establishment, exercise or defence of legal claims. Individuals have the right to object to processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiling), and processing for purposes of scientific/historical research and statistics. The right to object does not extend to processing of personal information for law-enforcement processing.

Rights in relation to automated decision making and profiling

Although the Police Service of Northern Ireland is unlikely to carry out any automated decision-taking or automated profiling that does not involve some human element, an individual has the right to require that PSNI ensures that no decision that would significantly affect them is taken by the Police Service of Northern Irelandor on its behalf purely using automated decision making software.

Further details on all of the rights within Data Protection legislation can be found on the Information Commissioner’s Office website at www.ico.org.uk.

The Police Service of Northern Ireland may monitor or record and retain telephone calls, texts, emails and other electronic communications to and from the Service in order to deter, prevent and detect inappropriate or criminal activity, to ensure security, and to assist the purposes described under section 1 above. The Police Service of Northern Ireland does not place a pre-recorded ‘fair processing notice’ on telephone lines that may receive emergency calls (including misdirected ones) because of the associated risk of harm that may be caused through the delay in response to the call.

The Police Service of Northern Ireland will utilise CCTV within their establishments for the security and protection of the police estate.

If you would like to exercise any of the rights discussed in this document, you can do so by contacting the following department:

Corporate Information
Police Service of Northern Ireland
Police Headquarters
65 Knock Road
Belfast
BT6 5LE
Telephone: 028 9070 0164
Email: [email protected]

The Police Service of Northern Ireland has a designated Data Protection Officer (DPO). The DPO is an independent advisor to the Police Service of Northern Ireland and is responsible for ensuring that the Police Service of Northern Ireland are processing personal data in line with the legislation. Any individual with concerns over the way we handle their personal data may contact our Data Protection Officer at the address above or email [email protected]

If you remain unhappy about how your request has been handled you have the right to apply directly to the information Commissioner. The Information Commissioner is the independent regulator responsible for enforcing the legislation and can provide useful information about the legislation’s requirements. Our local Information Commissioner’s address is:

Information Commissioner’s Office
3rd Floor                                   
14 Cromac Place                    
Belfast, BT7 2JB
Email: [email protected]
Tel: 028 9027 8757