In this episode of InfoSec Insider – Talk DP, Martin Brazier, Senior Data Protection Consultant at URM, breaks down the General Data Protection Regulation’s (GDPR’s) requirements for organisations that need to share personal data with the police in order to report a crime, or following a request for data to assist with an investigation.  Martin leverages his 20+ years of experience in information management and data protection compliance to discuss:  

• The legislative framework governing police access to personal data, including Part 3 of the Data Protection Act 2018


• The lawful bases under the UK GDPR for sharing personal data with the police, and when each may apply


• Considerations for compliance with the purpose limitation and data minimisation principles when providing the police with personal data


• What to consider when sharing special category and criminal offence data with the police, including applicable conditions under the DPA 2018


• Whether individuals need to be informed of any data sharing


• Practical guidance on how to ensure any data shared is lawful, proportionate, and compliant with the data protection principles.

Learn more about this topic: https://www.urmconsulting.com/blog/sharing-personal-data-with-the-police 

If you enjoyed this episode of InfoSec Insider, you can leave us a rating and review here:    https://ratethispodcast.com/infosecinsider  

You can find more episodes of InfoSec Insider here:   

https://urmconsulting.com/podcasts  

Brought to you by URM, the UK’s leading information and cyber security specialists.