Processing personal data by law enforcement and intelligence agencies—an introduction to the Data Protection and Law Enforcement Directive and Part 3 of the Data Protection Act 2018
Produced in partnership with Professor Dan Hyde of Harrison Clark Rickerbys
Processing personal data by law enforcement and intelligence agencies—an introduction to the Data Protection and Law Enforcement Directive and Part 3 of the Data Protection Act 2018

The following Corporate Crime practice note produced in partnership with Professor Dan Hyde of Harrison Clark Rickerbys provides comprehensive and up to date legal information covering:

  • Processing personal data by law enforcement and intelligence agencies—an introduction to the Data Protection and Law Enforcement Directive and Part 3 of the Data Protection Act 2018
  • Law enforcement—DPA 2018, Pt 3
  • Who are competent authorities?
  • What are the law enforcement purposes?
  • Data processing principles for law enforcement
  • Processing sensitive personal information
  • Rights of data subjects in relation to processing for law enforcement purposes
  • Right to be informed
  • Right of access
  • Right to rectification
  • More...

IP COMPLETION DAY: 11pm (GMT) on 31 December 2020 marks the end of the Brexit transition/implementation period entered into following the UK’s withdrawal from the EU. At this point in time (referred to in UK law as ‘IP completion day’), key transitional arrangements come to an end and significant changes begin to take effect across the UK’s legal regime. This document contains guidance on subjects impacted by these changes. Before continuing your research, see Practice Note: What does IP completion day mean for corporate crime?

The General Data Protection Regulation (EU) 2016/679 (GDPR), which came into force on 25 May 2018 was not a complete regulatory solution and left gaps and derogations for Member States to address. One key area the GDPR did not cover was processing personal data by law enforcement and intelligence agencies.

The EU Data Protection Directive 2016/680/EU (Law Enforcement Directive) complements the GDPR by setting out the requirements for the processing of personal data for criminal ‘law enforcement purposes’. It came into force on 5 May 2016 and EU Member States were compelled to transpose into their national law on 6 May 2018. In relation to international transfers of personal data, the Law Enforcement Directive also replaces the 2008 Council Framework Decision 2008/977/JHA on the protection of personal data processed in the framework of police and judicial co-operation in criminal matters.

The Law

Popular documents