To provide school safeguarding leads with information relating to children that have been involved in, or witnessed, a domestic abuse incident. The provision of this information is to ensure that the appropriate care and welfare is in place for the child whilst they are at school.
This specific privacy notice has been created to make it easier for you to understand what personal data Kent Police processes about you, how and why it will be used in connection with Operation Encompass. It is a requirement of the General Data Protection Regulation (GDPR).
It is subordinate to, and should be read in conjunction with, the force's high-level privacy notice.
The high-level privacy notice provides you with complete details of the rights you have relating to the personal data we hold about you now and any personal data we might collect about you in the future.
If you require this specific privacy notice in Braille or in another language please contact the force’s data protection officer.
Who is the Controller (the person who determines the purpose and means by which your personal data is processed) and what are their contact details?
The Controller is:
Chief Constable of Kent Police Kent Police Headquarters Sutton Road Maidstone Kent ME15 9BZ
DPA Article 13(1)(a) and Article 14(1)(a)
What are the contact details of Kent Police’s Data Protection Officer?
Data Protection Officer Information Management Kent Police Coldharbour London Road Aylesford ME20 7SL Email: [email protected]
DPA Article 13(1)(b) and Article 14(1)(b)
For what purpose(s) is my personal data intended to be processed by Kent Police?
To provide school safeguarding leads (‘key adults’) with information relating to children that have been involved in, or witnessed, a domestic abuse incident. The provision of this information is to ensure that the appropriate care and welfare is in place for the child whilst they are at school.
DPA Article 13(1)(c)
What personal data of mine will be processed by Kent Police?
Kent Police will collect and process the following personal data:
Operation Encompass referral
Kent Police attended a domestic abuse incident, in which a pupil of your school was:
usually resides at the premises Yes/No
resides with one of the involved parties Yes/No
time/date of incident
time date of police attendance
Kent Police reference
childs name and date of birth
relationship between child and involved parties
did the child witness the incident Yes/No
did police talk to the child Yes/No
How will my personal data be processed by Kent Police?
Kent Police will process your personal data in the following ways:
referral form is sent via secure (workaround exists where secure email is not available) email to child’s school
copy of referral form held on Kent Police systems (Athena in accordance with relevant policies and procedures)
copy of referral form is held by school (in accordance with their policies and procedures)
What is Kent Police’s legal basis for processing my personal data?
The lawful basis for sharing is that it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority (Article 6(e) GDPR). The processing is strictly necessary and applies to safeguarding children and individuals at risk and is in the substantial public interest for the purpose of safeguarding children (DPA 2018, Sch.1, Part 2, S.18).
DPA Article 13(1)(c) and Article 14(1)(c)
If my personal data is obtained by Kent Police from someone else what are the categories of personal data collected?
Refer to the our overarching privacy notice – What types of personal data do we process.
DPA Article 14(1)(d)
Who will my personal data be disclosed to by Kent Police?
Relevant school, within the pan-Kent local authorities (Kent County Council, Medway Council).
DPA Article 13(1)(e)
Does Kent Police intend to transfer my personal data out of the UK or to an international organisation?
DPA Article 13(1)(f) and Article 14(1)(f)
If Kent Police intends to transfer my personal data out of the UK or to an international organisation what safeguards are there to protect my personal data?
DPA Article 13(1)(f) and Article 14(1)(f)
How long will my personal data be retained by Kent Police?
The referral form, and source personal data, will be held in accordance with Kent Police policies and procedures.
Records arising from the investigation of domestic abuse incidents and the management of initiatives aimed at assisting victims and reducing instances of domestic abuse are retained for a minimum of date of creation plus ten years. (Reference to: Criminal Procedure and Investigations Act 1986).
DPA Article 13(2)(a) and Article 14(2)(a)
What are my rights under the GDPR?
You have the following rights under the GDPR:
right to be informed
right of access
right of erasure
right to restriction of processing
right to data portability
right to object
right not to be subject of automated decision-making
Full details of those rights and how to exercise them can be found in Kent Police’s high-level privacy notice. It can also be obtained from:
Public Disclosure Team Kent Police Coldharbour London Road Aylesford ME20 7SL Email: [email protected]
DPA Article 13(2)(b) and Article 14(2)(c)
If Kent Police relies on my consent to be the legal basis for processing my personal data can I withdraw that consent?
Not applicable – the lawful basis for the processing of personal data in this instance is based on ‘public task’ not ‘consent’.
DPA Article 13(2)(c) and Article 14(2)(d)
Who can I lodge a complaint with if I am unhappy about the way my personal data is processed by Kent Police?
You may lodge a complaint with the Information Commissioner’s Office. Their contact details are:
Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF Telephone: 0303 123 1113 Website: www.ico.org.uk
You may wish to initially raise any concerns with the Data Protection Officer.
DPA Article 13(2)(d) and Article 14(2)(e)
If my personal data was obtained by Kent Police from someone else from who or where was it obtained by Kent Police?
DPA Article 14(2)(f)
Am I required to provide my personal data under a statutory or contractual requirement, or a requirement necessary to enter into a contract, or am I obliged to provide it?
The personal data would have been collected for law enforcement purposes, as part of the domestic abuse incident.
DPA Article 13(2)(e)
Will my personal data be used for automated decision-making, including profiling?
DPA Article 13(2)(f) and Article 14(2)(g)
If my personal data will used for automated decision-making, including profiling what logic will be involved and what significance and consequences will there be for me from the automated decision-making?