The EU General Data Protection Regulation (GDPR) and the Data Protection Act 2018 became law on 25th May 2018. The revised legislation is designed to make data protection laws fit for the digital age and empower people to take control over their personal data.
The GDPR contains 6 Principles which organisations must adhere to when processing personal data. These Principles are summarised below and require that personal data is
1. Processed, fairly, lawfully and in a transparent manner;
2. Collected for specified, explicit and legitimate purposes;
3. Adequate, relevant and limited to what is necessary;
4. Accurate and, where necessary, kept up to date;
5. Kept for no longer than is necessary;
6. Kept secure.
How We Use Your Personal Information
The legislation provides individuals with a number of rights and information about these rights, which includes the right to be informed about how we use personal data, can be found in our Privacy Notice here
The Subject Access provisions of the GDPR give an individual the right to have a copy of any personal data held about them, subject to certain exemptions. This is known as a “Right of Subject Access”.
Should you wish to know what information (if any) Cumbria Office of the Police and Crime Commissioner holds about you, you should submit a request in writing to the address below. To facilitate a request and to ensure that you provide all the information the Office of the Police & Crime Commissioner may need to process your request, you may wish to submit your request on a Subject Access form – (please click here). Proof of identity and sufficient information to allow us to locate your personal data must accompany a completed application form/written request.
Application forms and further guidance are also available by post from:
Cumbria Office of the Police and Crime Commissioner, Police Headquarters, Carleton Hall, Penrith, Cumbria. CA10 2AU
Tel: 01768 217734
Once we have received your completed application, we will start to process your request. Depending on what information you have requested the process to provide you with your information can take up to one month. In limited circumstances this period can be extended up to two months, but we will inform you if this is likely to be the case.
When responding to Subject Access Requests the Office of the Police & Crime Commissioner will comply with the requirements of the GDPR and guidance published by the Information Commissioner, which can be found on the Information Commissioner’s Website. The ICO’s website also provides comprehensive information relating to your rights under the GDPR, and an explanation of the exemptions that may be used in certain cases.