Vetting

The Controller is:

Chief Constable of Kent Police
Kent Police Headquarters
Sutton Road
Maidstone
Kent  ME15 9BZ

Chief Constable of Essex Police
Essex Police Headquarters
PO Box 2
Chelmsford
CM2 6DA

DPA Article 13(1)(a) and Article 14(1)(a)

Data Protection Officer
Information Management
Kent Police
Coldharbour
London Road
Aylesford
ME20 7SL
Email: [email protected]

Data Protection Officer
Essex Police Headquarters
PO Box 2
Chelmsford
Essex
CM2 6DA
Email: [email protected]

DPA Article 13(1)(b)
Article 14(1)(b)

To enable vetting to assess your suitability to be employed within the forces.

DPA Article 13(1)(c)

Kent Police and Essex Police will collect and process the following personal data:

• your name
• address
• date and place of birth
• employment history
• your contact details
• personal details of family members
• co-residents
• any known criminal associates

In certain circumstances you may be required to provide financial information.

Special category data:

• race
• ethnic origin
• religion
• biometric data
• sexual orientation

The lawful basis for processing personal data is that it is necessary to comply with a legal obligation (Article 6(c) GDPR) and processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller (Article 6(e) GDPR).

The lawful basis for processing special category personal data is for the purpose of exercising a function conferred by an enactment and is necessary for reasons of substantial public interest (Article 9(2)(g) GDPR) (DPA 2018, Sch.1, Part 2, S.6).

The statutory basis for this is the College of Policing Vetting Code of Practice (issued October 2017). This was presented to Parliament pursuant to Section 39A (5) of the Police Act 1996, as amended by Section 124 of the Anti-Social Behaviour, Crime and Policing Act 2014.

DPA Article 13(1)(c) and Article 14(1)(c)

The information provided will be used as the basis for conducting background checks and enquires against police databases and information systems. Where applicable, it will also be checked against ‘open source’ internet, the records of credit reference agencies and other third-party records.

Where credit reference agency records are checked, this will be for the vetting subject only and not for any other individuals named on the form.

Any information which is revealed as a result of the vetting process is reviewed by a vetting practitioner. The personal data collected will continue to be held within the records created for that purpose.

Refer to the our overarching privacy notice – What types of personal data do we process.

DPA Article 14(1)(d)

The information may be shared with other police forces / agencies in the United Kingdom in respect of any recruitment applications you may make. Within the forces the information provided will not be shared with anyone outside the Professional Standards and HR departments, unless for a legitimate law enforcement purpose.

DPA Article 13(1)(e)

No, all personal data remains within the UK.

DPA Article 13(1)(f) and Article 14(1)(f)

Not applicable.

DPA Article 13(1)(f) and Article 14(1)(f)

We will only keep your information for as long as it is required to be retained. Information provided to facilitate vetting will be retained for the duration of the application or subsequent employment and beyond in accordance with the force retention schedule, after which it will be securely destroyed.

DPA Article 13(2)(a) and Article 14(2)(a)

You have the following rights under the GDPR:

• right to be informed
• right of access
• right of erasure
• right to restriction of processing
• right to data portability
• right to object
• right not to be subject of automated decision-making

Full details of those rights and how to exercise them can be found in Kent Police high-level privacy notice. It can also be obtained from:

Public Disclosure team
Kent Police
Coldharbour
London Road
Aylesford
ME20 7SL
Email: [email protected]

Information Rights team
Essex Police Headquarters
PO Box 2
Chelmsford
CM2 6DA
Email: [email protected]

DPA Article 13(2)(b) and Article 14(2)(c)

The lawful basis for the processing of personal data in this instance is based on ‘legal obligation’ and ‘public task’ not ‘consent’.

DPA Article 13(2)(c) and Article 14(2)(d)

You may lodge a complaint with the Information Commissioner’s Office. Their contact details are:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk

You may wish to initially raise any concerns with the data protection officer.

DPA Article 13(2)(d) and Article 14(2)(e)

Not applicable.

DPA Article 14(2)(f)

Whilst you can decline to provide some, or all, of the information required in the vetting forms, it will not be possible to conduct a meaningful risk assessment and clearance cannot be granted. As such you are unlikely to be employed by either force.

DPA Article 13(2)(e)

No.

DPA Article 13(2)(f) and Article 14(2)(g)

Not applicable.

DPA Article 13(2)(f) and Article 14(2)(g)