What gives us the right to use your personal and sensitive information?

The legal basis for processing your personal data, in accordance with the UK GDPR is:

• Article 6(c), ‘Legal Obligation,’ processing is necessary for compliance with a legal obligation, to which the controller is subject,
• Article 6(d), ‘Vital Interests’, processing is necessary in order to protect the vital interests of the data subject or of another natural person,
• Article 6(e), ‘Public Task,’ processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller,
• Article 6(f), ‘Legitimate Interests,’ processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party. 

The lawful basis for holding and processing these categories of personal data comes under:

• Section 163 of the Criminal Justice and Public Order Act 1994.
• Crime and Disorder Act 1998.
• Protection of Freedoms Act 2012.
• Health and Safety at Work Act 1974.
• In certain circumstances, the Regulation of Investigatory Powers Act 2000 (RIPA).

The legal basis for processing your special categories of personal data, in accordance with the UK GDPR is:

• Article 9(g), ‘processing is necessary for reasons of substantial public interest.' 

The substantial public interest condition falls under the Data Protection Act 2018 Part 2 (10), ‘preventing or detecting unlawful acts.’