What gives us the right to use your sensitive information?

In order to collect and use special category or criminal conviction data, we also have to meet other conditions. Please see our Special Category Data Policy and Criminal Convictions Data Policy on our Data Protection Policies page for more details.

Under the UK General Data Protection Regulation (GDPR) and Data Protection Act 2018, the lawful bases we rely on for processing your personal information are: 

• GDPR Article 6 (1) (c) Legal Obligation – we collect and lawfully process your personal data under the Equalities Act 2010 and the subsequent Public Sector Equality Duty 2011.
• GDPR Article 6 (1) (e) Public Task – we collect and lawfully process your personal data as it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us 

For special category data:

• 9(2)b. Obligations and specific rights of the controller in the field of employment, social security and social protection law 
• 9(2)g. Substantial public interest, based on law 
• 9(2)h. Health and social care or treatment or the management of health or social care systems and services 
• 9(2)i. Public health