Information about the implementation of GDPR
Freedom of information request reference no: 01.FOI.21.022380
I note you seek access to the following information:
1) Does ukpoliceimageappeal.co.uk implement GDPR or CCPA? If not, could you please explain why? If you are uncertain about whether ukpoliceimageappeal.co.uk is required to implement these laws or answer questions like ours, we have included informative resources at the end of this email.
2) If you implement GDPR or CCPA, do you process data access requests from individuals who are not residents of the EU or UK (for GDPR) or who are not residents of California (for CCPA)?
3) If you implement GDPR or CCPA, do you process data access requests via email, a website, or telephone? If via a website, what is the URL?
4) If you implement GDPR or CCPA, what personal information must a user submit for you to verify and process a data access request?
5) If you implement GDPR or CCPA, what personal information do you provide in response to a data access request?
Decision
I have today decided to disclose the located information to you in full.
Please find below information pursuant to your request above.
Q1 - Does ukpoliceimageappeal.co.uk implement GDPR or CCPA? If not, could you please explain why? If you are uncertain about whether ukpoliceimageappeal.co.uk is required to implement these laws or answer questions like ours, we have included informative resources at the end of this email.
In regards to the use of ukpoliceimageappeal.co.uk, the MPS adheres to the GDPR.
Q2 - If you implement GDPR or CCPA, do you process data access requests from individuals who are not residents of the EU or UK (for GDPR) or who are not residents of California (for CCPA)?
The MPS does not implement CCPA. All data access requests are processed under the DPA 2018 or GDPR and residents from any country can make a data access request. However the MPS will only process data which is held by the force itself.
Q3 - If you implement GDPR or CCPA, do you process data access requests via email, a website, or telephone? If via a website, what is the URL?
As per the DPA 2018/GDPR, data access requests can be made in writing, verbally, via the MPS website/email, or on social media. However most of the data access requests that are received by the MPS are made in two formats:
- by post – the address for postal requests is Information Rights Unit, PO Box 313, Sidcup, DA15 0HH
- by email – the email address for all Data Office enquiries is [email protected].
All guidance for making a data access request can be found on the MPS website Request Information about yourself or someone else
Q4 - If you implement GDPR or CCPA, what personal information must a user submit for you to verify and process a data access request?
When processing any data access request, under DPA/GDPR we ask that all individuals provide a valid form of photo ID (passport/driving licence), matching signature and proof of address dated within the last six months. We also require letters of authority, if requesting the information of any third party individuals or if they are being represented by another party, such as a solicitor.
Q5 - If you implement GDPR or CCPA, what personal information do you provide in response to a data access request?
All such requests processed under DPA enable an individual have access to their own personal information under DPA 2018 Part 3, Chapter 3, Section 45(1)(a)(b) and GDPR Article 15. An individual is entitled to any personal information held about them, unless a lawful exemption can be applied.