Data Protection Act 2018: Primary UK legislation governing how personal information can be collected, processed, and shared. Implements GDPR requirements in UK law and requires explicit consent for processing sensitive personal data.
UK General Data Protection Regulation (UK GDPR): Post-Brexit regulation that regulates data protection and privacy, sets specific conditions for consent, and establishes individual rights regarding personal data.
Police Act 1997: Particularly Part V, which established the Disclosure and Barring Service (DBS) and regulates criminal record checks.
Rehabilitation of Offenders Act 1974: Governs the disclosure of past convictions and determines which convictions are 'spent' and don't need to be disclosed.
Human Rights Act 1998: Includes Article 8 (Right to respect for private and family life) and ensures proportionality in data collection and sharing.
DBS Code of Practice: Guidelines and principles for handling criminal record checks and related information.
ICO Guidelines: Information Commissioner's Office guidelines for data protection and information handling.
Police and Criminal Evidence Act 1984: Legislation governing police powers and protections for citizens in relation to criminal investigations and evidence gathering.
