Sharing Personal Data with the Police

by | Apr 23, 2025 | Uncategorized

Sharing Personal Data with the Police

One of the most common questions we get asked concerns sharing data with law enforcement offices. The UK GDPR does not prevent you sharing personal data with such bodies such as the police (known under data protection law as “competent authorities”) who are discharging their statutory law enforcement functions. The UK GDPR and the DPA 2018 allow for this type of data sharing where it is necessary and proportionate.

The police should however be asked to provide “212” form apart from emergency situations. (DPO for Education can provide a sample document on request). This is good practise, not only as it gives to accountability for your actions but it also proves that they have collected data in a way that could make it admissible in court.
When might you need to share?
  • Where you want to proactively share personal data; for example, you want to report a crime to the police and provide relevant personal data you hold;
  • Where you receive a request from a law enforcement authority for personal data you hold for a valid law enforcement purpose; for example, the police may request personal data from you to help them investigate a crime; or
  • Where a court order or another legal obligation compels you to share personal data with a law enforcement authority.
If you want to share personal data with the police you need a lawful basis under Article 6.
If you want to share criminal offence data you need both a lawful basis, and either ‘official authority’ or a separate condition for processing under Article 10. The DPA 2018 sets out specific conditions for this.
Schools have responsibility but not control over pupils’ data

Schools have responsibility but not control over pupils’ data

New report states “Schools have responsibility but not  control over pupils’ data”  A new report by the Digital Futures Commission recommends that the government ‘s Data Reform Bill should regulate data taken by educational technologies (EdTech) services widely used...

New school resources for teachers

New school resources for teachers

The ICO has produced a suite of school resources for teachers to use when discussing privacy issues and the value of personal data. The lesson plans cover what counts as personal data, why it’s valuable and how to keep it safe when using social media. The resources...

Are Educational Institutions at risk from a phishing attack?

Are Educational Institutions at risk from a phishing attack?

Absolutely they are!  The Cyber Breaches 2022 Survey Education Annex has some brilliant insights into what educational institutions are currently facing in terms of cybercrime and as in previous years, phishing is the top detected cyber-attack and it’s easy to see...