Everyone in the police service must maintain high ethical and professional standards and act with the utmost integrity. Where it is identified that individuals are behaving unprofessionally, unethically, or criminally, Kent Police has a duty to conduct internal investigations through the Professional Standards Department (PSD) and Counter Corruption activity. This will ensure that corruption, inappropriate and unethical behaviour and action will be addressed or rooted out. and public trust is maintained.
This specific privacy notice has been created to make it easier for you to understand what personal data Kent Police processes about you, how and why it will be used in connection with any internal investigation or Counter Corruption activity. It is a requirement of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA '18).
It is subordinate to, and should be read in conjunction with, the force's high-level privacy notice.
The high-level privacy notice provides you with complete details of the rights you have relating to the personal data we hold about you now and any personal data we might collect about you in the future.
If you require this specific privacy notice in Braille or in another language, please contact the [email protected].
Who is the Controller (the person who determines the purpose and means by which your personal data is processed) and what are their contact details?
The Controller is:
Chief Constable of Kent Police Kent Police Headquarters Sutton Road Maidstone Kent ME15 9BZ
What are the contact details of the data protection officers?
Data Protection Officer Information Management Kent Police Coldharbour London Road Aylesford ME20 7SL Email: [email protected]
For what purpose(s) is my personal data intended to be processed by Kent Police?
To enable any necessary internal investigations and Counter Corruption activity to identify wrongdoing, inappropriate or unethical behaviour, or criminality.
DPA Article 13(1)(c)
What personal data of mine will be processed by Kent Police?
Kent Police will collect and process the following personal data:
date and place of birth
your contact details
personal details of family members
any known criminal associates
Special category data:
What is Kent Police’s legal basis for processing my personal data?
The lawful basis for processing personal data is that it is necessary to comply with a legal obligation (Article 6(c) UK GDPR) and processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller (Article 6(e) UK GDPR).
The lawful basis for processing special category personal data is for the purpose of exercising a function conferred by an enactment and is necessary for reasons of substantial public interest (Article 9(2)(g) UK GDPR) (DPA 2018, Sch.1, Part 2, S.6, S.10, and S.11).
The statutory basis for this is the Police (Conduct) Regulations 2020 and The Police (Complaints and Misconduct) Regulations 2020 (issued February 2020).
DPA Article 13(1)(c) and Article 14(1)(c)
How will my personal data be processed?
The information provided will be used in respect of internal investigations and Counter Corruption activity. This will enable personal data such as contact details to be checked against information available to Kent Police through its vetting and law enforcement activities.
The personal data collected will continue to be held within the records created for that purpose.
If my personal data is obtained by Kent Police from someone else what are the categories of personal data collected?
Refer to our overarching privacy notice – What types of personal data do we process.
DPA Article 14(1)(d)
Who will my personal data be disclosed to by Kent Police?
The information may be shared with other police forces / agencies in the United Kingdom in respect of any internal investigation or Counter corruption activity. Within the force the information provided will not be shared with anyone outside the Professional Standards and HR departments, unless for a legitimate law enforcement purpose.
DPA Article 13(1)(e)
Does Kent Police intend to transfer my personal data out of the UK or to an international organisation?
No, all personal data remains within the UK.
DPA Article 13(1)(f) and Article 14(1)(f)
If Kent Police intends to transfer my personal data out of the UK or to an international organisation what safeguards are there to protect my personal data?
DPA Article 13(1)(f) and Article 14(1)(f)
How long will my personal data be retained by Kent Police?
We will only keep your information for as long as it is required to be retained. Information provided will be retained for the duration of the application or subsequent employment and beyond in accordance with the force retention schedule, after which it will be securely destroyed.
DPA Article 13(2)(a) and Article 14(2)(a)
What are my rights under the UK GDPR?
You have the following rights under the UK GDPR:
right to be informed
right of access
right of erasure
right to restriction of processing
right to data portability
right to object
right not to be subject of automated decision-making
Full details of those rights and how to exercise them can be found in Kent Police high-level privacy notice. It can also be obtained from:
Public Disclosure team Kent Police Coldharbour London Road Aylesford ME20 7SL Email: [email protected]
DPA Article 13(2)(b) and Article 14(2)(c)
If Kent Police relies on my consent to be the legal basis for processing my personal data can I withdraw that consent?
The lawful basis for the processing of personal data in this instance is based on ‘legal obligation’ and ‘public task’ not ‘consent’.
DPA Article 13(2)(c) and Article 14(2)(d)
Who can I lodge a complaint with if I am unhappy about the way my personal data is processed by Kent Police?
You may lodge a complaint with the Information Commissioner’s Office. Their contact details are:
Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF Telephone: 0303 123 1113 Website: www.ico.org.uk
You may wish to initially raise any concerns with the data protection officer.
DPA Article 13(2)(d) and Article 14(2)(e)
If my personal data was obtained by Kent Police from someone else from who or where was it obtained by Kent Police?
DPA Article 14(2)(f)
Will my personal data be used for automated decision-making, including profiling?
DPA Article 13(2)(f) and Article 14(2)(g)
If my personal data will used for automated decision-making, including profiling what logic will be involved and what significance and consequences will there be for me from the automated decision-making?