Automatic Number Plate Recognition System (ANPR)

Size: px
Start display at page:

Download "Automatic Number Plate Recognition System (ANPR)"

Transcription

1 Automatic Number Plate Recognition System (ANPR) Reference No. SA:010 Implementation Date 23/03/2018 Version Date 23/03/2018 Version Number 1.0 Freedom of Information Act Open Government Security Classifications OFFICIAL Open

2 Table of Contents 1. Policy Section 1.1 Vision of the Strategic Alliance 1.2 Statement of Intent Aim and Rationale 1.3 National Decision Model 1.4 Code of Ethics 1.5 Authorised Professional Practice 2. Standards 2.1 Accountability 2.2 Assessment Compliance 2.3 Monitoring 2.4 Feedback 3. Procedure Section 3.1 Director of Intelligence 3.2 Response 3.3 Criteria 3.4 Camera Locations 3.5 Authority Procedures 3.6 Data Protection 3.7 Information Exchange Protocols 4. Consultation and Authorisation 4.1 Consultation 4.2 Authorisation of this Version 5. Version Control 5.1 Review 5.2 Version History 5.3 Document History 2

3 1 Policy Section 1.1 Vision of the Strategic Alliance Working together as it can offer the best opportunity to: Develop service delivery to the public Ensure delivery against the Police and Crime Commissioners (PCCs ) Police and Crime Plans Retain a local policing identity Ensure resilience around our Strategic Policing Requirement Maximise value for money Maximise opportunities for the ongoing personal/professional development of our staff This approach also satisfies the set critical success factors as follows: Both forces mitigate/manage their greatest threat, harm and risks Both forces achieve their medium term financial strategies The strategic policing requirement continues to be met with reducing resources A transformational approach to service delivery Both forces adapt and respond to change in an agile/positive way Opportunities to invest in new capabilities to meet emerging threats and technology 1.2 Statement of Intent Aim and Rationale It is the policy of this Force to support the aims of the National Police Chiefs Council (NPCC) ANPR strategy to Target Criminals through their Use of the Roads The development and use of ANPR within the Alliance will be in accordance with the requirements of the National ANPR Standards for Policing (NASP) This policy applies to all Alliance ANPR systems The College of Policing offers an online service that provides access to a consolidated body of guidance for policing called Authorised Professional Practice (APP). APP enables officers and staff to access, or search for, the most up-to-date approved guidance, which replaces a number of previously published National Policing Improvement Agency (NPIA) and Association of Chief Police Officers (ACPO) documents More information on ANPR can be found on APP via the following pathways: APP > Road Policing > Disrupting criminality APP > Investigation > Investigative strategies > ANPR 1.3 National Decision Model The National Decision Model (NDM) is the primary decision-making model used in both Dorset Police and Devon and Cornwall Police. Where applied it ensures that ethical (see Code of Ethics), proportionate and defensible decisions can be made in relation to 3

4 operational and non-operational policing. The latest guidance can be found via this APP link. 1.4 Code of Ethics The Code of Ethics underpins every policy, procedure, decision and action in policing today and staff are reminded of the need to comply with the standards and principles of the Code of Ethics for policing. 1.5 Authorised Professional Practice The College of Policing offers an online service that provides access to a consolidated body of guidance for policing called Authorised Professional Practice (APP). This enables officers and staff to access and search for the most up to date approved guidance, replacing a number of previously published NPIA and ACPO documents. APP guidance on Armed Policing should be accessed in conjunction with this policy. 2 Standards 2.1 Accountability Assistant Chief Constable (ACC) Local Policing & Connectivity has overall responsibility within the Force for the provision of ANPR. This responsibility includes ensuring that staff are appropriately trained according to their needs, and of monitoring the system to ensure that it complies with NASP standards and that it is consistent with the forces strategic and tactical requirements as identified within the National Intelligence Model (NIM) These responsibilities are delegated to the Commander of the Alliance Operations Department, who will ensure compliance with national guidance, in addition to ensuring that the Alliance is in a position to respond to regional and Forcewide obligations While Commander Alliance Operations Department retains ownership of ANPR, accountability for compliance with this policy within LPAs rests with the respective Local Policing Area (LPA) commander who will ensure that the use of ANPR is embedded into LPA strategic and tactical processes. 2.2 Assessment Compliance This document has been drafted and audited to comply with the principles of the Human Rights Act. Internal and external Equality and diversity issues have also been considered to ensure compliance with Equality legislation and policies. In addition Data Protection, Freedom of Information, Management of Police Information and Health and Safety issues have been considered. Adherence to this document will therefore ensure compliance with all relevant legislation and internal policies. 2.3 Monitoring This working practice will be monitored by the Alliance Operations Department. 4

5 2.4 Feedback Feedback relating to this policy can be made in writing or by to: Force Policy and Procedures 3 Procedure Section 3.1 Director of Intelligence The Director of Intelligence will ensure that: the Force / Alliance has sufficient analyst and researcher capability to make the most effective use of ANPR information captured by Alliance cameras and the National ANPR Data Centre (NADC). investigative and intelligence staff are fully aware of the capability of ANPR and that they are able to achieve optimum benefit from ANPR capability and data in investigations and in support of intelligence led policing. 3.2 Response The Alarm Stack within Dorset will be monitored 24/7 by the FIB24 desk staff, and in Devon and Cornwall by the Call Management and Communications Unit (CMCU). They will prioritise from the following hotlists : Police National Computer (PNC) Action Markers 50 Devon and Cornwall PNC Lost/Stolen Markers 55 Dorset OTA (Operational Tasking) For further guidance, please refer to FIB24 / CMCU working practices If one of the above markers triggers the alarm stack the operator will allocate the appropriate resource. 3.3 Criteria Tasking of ANPR resources must be via the Force tasking process (NIM) The use of the Alliance ANPR system can only be undertaken by those that are authorised and have been suitably trained in the use of the system, and once the requisite authority has been obtained. The use of the force ANPR system without such authorisation is contrary to Force policy and may render any evidence obtained as inadmissible in future judicial procedures. 5

6 3.3.3 In order for such authority to be granted the deployment of the system must be for one of the following prioritised reasons: a) In support of a National Counter Terrorist operation or initiative b) In support of a local Counter Terrorist operation or initiative c) In support of the investigation of serious crime d) In support of a serious crime/roads policing initiative e) Prevention and detection of crime f) Gathering of evidence and intelligence Officers requiring deployments for more minor offences (e.g. persistent disqualified driving) should present authorising officers with a constructive plan for such a deployment prior to authorisation or consider passing allocation across to the No Excuse Team where appropriate Where there is a conflicting bid for the ANPR equipment or a more urgent requirement becomes apparent once deployment has taken place on another operation, then the Director of Intelligence will be the arbiter as to priorities or redeployment of the equipment based upon the Force Control Strategy Deployment in support of a major investigation will take precedence over established requests due to the immediacy of the demand Officers seeking deployment should explain the resource implications of the operation they are to conduct and authorising officers are to ensure that sufficient resources are available prior to authorising such operations. 3.4 Camera Locations The locations of fixed ANPR cameras are not to be made known in the public domain. This is to ensure that policing purposes are not compromised. Any queries regarding this are to be referred to the Alliance ANPR Manager In order to safeguard the national ANPR infrastructure, with the exception of data obtained from a Mobile ANPR system as defined by Para 8.5 NASP Part 2, the precise location for an ANPR read obtained will not be disclosed during an investigation, nor included in evidence unless the data controller with responsibility for the camera that recorded the data has been consulted and provided written consent for that disclosure or for evidence to be provided. The following principles apply: a) Evidence of an ANPR read will only be included where it is of specific relevance. b) Mapping or otherwise disclosing the precise location of the camera that recorded an ANPR read is not be permitted during any stage of an investigative or prosecution process, unless specifically authorised by the data controller for the force with responsibility for the camera that recorded that data, c) The location of a read will be described in the following decreasing order of preference: The general area of the location (e.g. Town, District, Metropolitan Borough) The postcode (following consultation with the data controller with responsibility for the Number plate Reading Device (NRD) that recorded the data, in circumstances where this will identify the precise location of the NRD) 6

7 The name of the road (following consultation with the data controller with responsibility for the NRD that recorded the data, in circumstances where this will identify the precise location of the NRD) The precise location (following consultation with the data controller with responsibility for the NRD that recorded the data) 3.5 Authority Procedures The Regulation of Investigatory Powers Act 2000 (RIPA) provides the legal framework for the authorisation to conduct operations involving Intrusive or Directed Surveillance If the deployment of ANPR is overt then RIPA will not apply. This applies to the majority of ANPR deployments as the use of ANPR does not result in the obtaining of private information. Registration plate detail is not in itself private information and is a deliberately overtly displayed marker, which can be seen, and is intended to be seen. Every person who drives a car accepts that they are likely to be capable of being linked to a particular vehicle by reference its registration plate in the context of other data, and that ANPR technology on the roads allows the Police to determine the presence of a vehicle at a location Road users have no reasonable expectation of privacy in relation to ANPR being able to determine their presence on the road, and at locations where no expectation of privacy can arise then surveillance at that location is not covert and no Directed Surveillance Authority (DSA) will be required for the deployment of ANPR Covert deployments against named targets may require a DSA. ANPR is unlikely to constitute intrusive surveillance unless the programme routinely captures the faces of front seat occupants The following scenarios provide examples of the appropriate use of ANPR in respect of RIPA. Scenario 1 Acting on intelligence that a known drug dealer will be travelling a particular route at a specified time. An ANPR vehicle is deployed at the roadside and the database is loaded with details of the vehicle, and any other vehicles that the suspected drug dealer has access to. If the intention is to stop the vehicle then no DSA is required. If the intention is to provide data on a target vehicle from the ANPR system in real time by means of a Hotlist, then that is capable of being considered as a covert intelligence gathering activity and may require a DSA. Scenario 2 Where an ANPR vehicle is deployed at the roadside for the purpose of general crime and databases on the ANPR vehicle include PNC and DVLA, no authority under RIPA is required because this would be an overt operation. Scenario 3 7

8 ANPR is deployed for the purpose of policing general crime, and during this time an armed robbery takes place in the area. Details of the vehicle that the offender was seen to be using during the commission of the robbery are put on ANPR database. If the original operation was covert and a judgement had been reached that personal information might be obtained, a directed surveillance authorisation would have already been in existence. If an authorisation had not previously been obtained, a directed surveillance authority may be necessary. Scenario 4 Where ANPR is deployed as in scenario 3, but the details put into the database are those of a vehicle used by a known criminal with a similar modus operandi (MO) as that used in the robbery, an authority should be considered. A verbal authority in the first instance may be appropriate. However the likelihood would be that details of the vehicle may already be loaded onto the ANPR databases prior to the deployment, in which case no authority is required The examining of historical recorded ANPR data does not amount to surveillance and a DSA is not required for this The circulation of a vehicle linked to a sexual or violent offender on PNC as a PNC ACTion report (ACT) with the intention that action of some kind is required, dependent upon the circumstances that the vehicle comes to notice is not directed surveillance and no authority is required Research and monitoring of ANPR, including the use of a hotlist, in support of the management of sexual offenders and violent offenders is not inherently different from that process for other offenders. Private information is not generally likely to be obtained by ANPR and a DSA is therefore not required for that activity but, the offender should be told that their movements will be monitored which will include the monitoring of the movements of any vehicle used by them Where such an authorisation is given technical equipment may be used under that same authority. Where ANPR is to be deployed in such operations no additional authority will therefore be required other than that given to conduct the surveillance. All Force procedures must be adhered to when making application for such authorities under RIPA Guidance is available in Devon and Cornwall Force Policy D124 - Surveillance In cases where the use of ANPR is to be routinely deployed other than for intrusive/directed surveillance, there is no legal requirement for such authorisation. Deployment of the equipment must still, however, minimise the risk of compromise and the potential for collateral intrusion. 8

9 3.6 Data Protection All information obtained by the use of ANPR is classed as personal data and therefore subject to the Data Protection Act 1998 and the Human Rights Act 1998 ANPR data is police information within the meaning of The Code of Practice on the Management of Police Information 2005 (MoPI) made under the Police Act 1996 and Police Act 1997, and may be shared between Law Enforcement Agencies (LEAs) in accordance with the provisions of that Code or any other document which applies similar standards in its place including the National Crime Agency s (NCA) Statement of Information Management Practice (SIMP) Retention of data will also be carried out in accordance further to the Code and guidance for MoPI. Please refer to APP > Information management > Management of police information, and NASP V Access to and the retention and management of ANPR data obtained by LEAs must be compatible and consistent with obligations that arise under: i. The Data Protection Act 1998 (DPA) and, as and to the extent to which they apply, with the data protection principles contained within Part 1 of Schedule 1 to the Act; ii. The Human Rights Act 1998, and in particular Article 8 of the European Convention on Human Rights, namely the right to respect for family and private life; iii. The Surveillance Camera Code of Practice issued under provisions of the Protection of Freedoms Act 2012 (PFA); iv. Conducting privacy impact assessments code of practice Information Commissioner 2014; v. Criminal Procedure and Investigations Act 1996 and Code of Practice issued under Part II of that Act (CPIA); vi. College of Policing Approved Professional Practice Information Management. (MOPI) Where downloaded extracts from the PNC or any other collection of data are to be used as part of a specific operation the extract file must be appropriate (i.e. adequate, relevant and not excessive) to the purpose of this operation When ANPR is used to trigger other activities i.e. officers to stop the vehicle, the operator must confirm whenever practicable, the reading from a visual image of the Vehicle Registration Mark (VRM) prior to such activity In line with national policy, ANPR in data either in force or at the national database (NADC / NAS), will only retain data for up to one year from the 1 April Reads Text Data Plate patch image Overview image Hits Text Data Plate patch image Overview image As per NASP 1 Year 1 Year 1 Year As per NASP 1 Year 1 Year 1 Year 9

10 (A hit being a read against a set database (hotlist)) General authorised user access is given for data up to 90 days old, from 91 days to one year access is restricted to specific types of crime and requires authorisation. Full details are contained within NASP V3 and guidance can be obtained from Alliance ANPR Support Staff Details of specific retention periods which relate to crime intelligence data, major incident records and national security deployments may be obtained from the Alliance Data Protection Office All subject access requested from individuals for copies of ANPR data will be referred to the Alliance ANPR Manager All information obtained by the use of ANPR will be held securely and treated as confidential. ANPR data is not to be disclosed to any third party, including staff from an organisation that is not shown as an Approved LEA in NASP, or the data subject, except through or with the express written authority of the data controller with responsibility for the camera that recorded that data. Requests for disclosure to a third party must be compatible with the policing purpose and must be considered on a case by case basis with referral to the Alliance Data Protection Officer and Alliance ANPR Manager for consideration No data shall be transferred outside the European Economic area without referral to the NPCC Data Protection Working Group Data transferred on USB memory sticks is sensitive and must be treated as such. Only Force authorised USB memory devices are to be used. Any loss of such a USB must be immediately reported to a supervisor. Further guidance can be obtained from Devon and Cornwall working practice DF96 - USB Memory Devices Use in relation to ANPR and Digital Video Recording 3.7 Information Exchange Protocols Due to the nature of ANPR, it is necessary to utilise information from various other external organisations to compile the data bases that are downloaded onto the ANPR system. The Exchange of Information Protocols currently in place are as follows: Forces and organisations listed as Approved Law Enforcement Agencies (LEAs) within NASP V3 which provides the standards required for ANPR data access, and guidance for access to data held within the National ANPR Infrastructure Partnership data is held by the Alliance ANPR Manager. Memorandums of understanding exist with some partners. These are to be contacted if there is a need for further information. i) Department Work and Pensions (DWP) Exchange of Information - D292. ii) Ministry of Defence Police Concordat DW82 iii) Cornwall Council ANPR Camera DATA sharing. (Devon and Cornwall only) 10

11 4 Consultation and Authorisation 4.1 Consultation Version No: 1.0 Name Signature Date Police & Crime Commissioner Police Federation Superintendents Association GMB / UNISON / Unite Other Relevant Partners (if applicable) Dorset (Alliance) ANPR 15/12/17 Devon and Cornwall (Alliance) Roads Policing 05/01/ Authorisation of this Version Version No: 1.0 Name Signature Date Prepared: Operational Policy Officer 15/12/17 Authorised: Approved: Ch/Supt, Head of Alliance Operations Dept. Ch/Insp, Head of Alliance Roads Policing 22/01/18 05/01/18 5 Version Control 5.1 Review Date of next scheduled review Date: 22/03/ Version History Version Date Reason for Change Created / Amended by /03/2018 Initial Document Operational Policy Officer 11

12 5.3 Document History Present Portfolio Holder ACC Local Policing & Connectivity Present Document Owner Alliance Operations Department Present Owning Department Alliance Operations Department Details only required for version 1.0 and any major amendment i.e. 2.0 or 3.0: Name of Board: Date Approved: Chief Officer Approving: 12

Privacy Impact Assessment

Privacy Impact Assessment Automatic Number Plate Recognition (ANPR) Deployments Review Of ANPR infrastructure February 2018 Contents 1. Overview.. 3 2. Identifying the need for a (PIA).. 3 3. Screening Questions.. 4 4. Provisions

More information

Automatic Number Plate Recognition (ANPR) ANPR Strategy Infrastructure Development

Automatic Number Plate Recognition (ANPR) ANPR Strategy Infrastructure Development Automatic Number Plate Recognition (ANPR) ANPR Strategy 2016-2020 Infrastructure Development Version 1 July 2017 Document Control Change Control Version Date Change Author 0.1 1 June 2016 Initial draft

More information

Cardiff University Security & Portering Services (SECTY) CCTV Code of Practice

Cardiff University Security & Portering Services (SECTY) CCTV Code of Practice Cardiff University Security & Portering Services (SECTY) CCTV Code of Practice Document history Author(s) Date S Gamlin 23/05/2018 Revision / Number Date Amendment Name Approved by BI annual revision Date

More information

Policy Title; Business Continuity Management Policy. Date Published/Reviewed; February 2018

Policy Title; Business Continuity Management Policy. Date Published/Reviewed; February 2018 Policy Title; Business Continuity Management Policy Date Published/Reviewed; February 2018 Business Lead; Head of Strategic Governance CCMT sponsor; Deputy Chief Constable Thames Valley Police ensures

More information

The University of Sheffield CCTV and Body worn cameras (BWC) Privacy Impact Assessment

The University of Sheffield CCTV and Body worn cameras (BWC) Privacy Impact Assessment The University of Sheffield CCTV and Body worn cameras (BWC) Privacy Impact Assessment 1. INTRODUCTION 1.1 This Privacy Impact Assessment (PIA) CCTV and BWC is recommended in The Surveillance Camera Code

More information

National ANPR Standards for Policing: Part 1 Data Standards

National ANPR Standards for Policing: Part 1 Data Standards National ANPR Standards for Policing: Part 1 Data Standards Version 3.1 October 2016 Change History Version Date Details of Changes included in Update Author No. 1.0 May Approved Version 1 Bill Mandeville

More information

PRIVACY IMPACT ASSESSMENT CONDUCTING A PRIVACY IMPACT ASSESSMENT ON SURVEILLANCE CAMERA SYSTEMS (CCTV)

PRIVACY IMPACT ASSESSMENT CONDUCTING A PRIVACY IMPACT ASSESSMENT ON SURVEILLANCE CAMERA SYSTEMS (CCTV) PRIVACY IMPACT ASSESSMENT CONDUCTING A PRIVACY IMPACT ASSESSMENT ON SURVEILLANCE CAMERA SYSTEMS (CCTV) 1 Principle 2 of the surveillance camera code of practice states that the use of a surveillance camera

More information

CCTV Privacy Impact Assessment

CCTV Privacy Impact Assessment CCTV Privacy Impact Assessment Camera No. DW_84 Date of Review: April 2019 Camera No.: DW_84 County: Powys Town: Welshpool Location: On the junction of Church Street and Severn Street Primary View Purpose:

More information

Commercial Vehicle Mobile ANPR Policy

Commercial Vehicle Mobile ANPR Policy Commercial Vehicle Mobile ANPR Policy Road Safety Authority May 2015 Mobile ANPR System Data Protection Policy This document sets out the policy of the Road Safety Authority (the Authority ) regarding

More information

The University of British Columbia Board of Governors

The University of British Columbia Board of Governors The University of British Columbia Board of Governors Policy No.: 118 Approval Date: February 15, 2016 Responsible Executive: University Counsel Title: Safety and Security Cameras Background and Purposes:

More information

Use of Personal Mobile Phone Whilst on Duty

Use of Personal Mobile Phone Whilst on Duty Use of Personal Mobile Phone Whilst on Duty (Incorporating Smartphones and Hand Held Devices) Standard Operating Procedure Notice: This document has been made available through the Police Service of Scotland

More information

This procedure sets out the usage of mobile CCTV units within Arhag.

This procedure sets out the usage of mobile CCTV units within Arhag. CCTV PROCEDURE Statement This procedure sets out the usage of mobile CCTV units within Arhag. Arhag is a registered charitable housing association and is not considered an appropriate authority with regards

More information

The University of Sheffield CCTV Privacy Impact Assessment

The University of Sheffield CCTV Privacy Impact Assessment Security Services. The University of Sheffield CCTV Privacy Impact Assessment Richard Yates Security Services Manager Arts Tower, Western Bank. Et : 29232 r.yates@sheffield.ac.uk March 2016 Version: 01

More information

PS Mailing Services Ltd Data Protection Policy May 2018

PS Mailing Services Ltd Data Protection Policy May 2018 PS Mailing Services Ltd Data Protection Policy May 2018 PS Mailing Services Limited is a registered data controller: ICO registration no. Z9106387 (www.ico.org.uk 1. Introduction 1.1. Background We collect

More information

The City of Mississauga may install Closed Circuit Television (CCTV) Traffic Monitoring System cameras within the Municipal Road Allowance.

The City of Mississauga may install Closed Circuit Television (CCTV) Traffic Monitoring System cameras within the Municipal Road Allowance. Policy Number: 10-09-02 Section: Roads and Traffic Subsection: Traffic Operations Effective Date: April 25, 2012 Last Review Date: Approved by: Council Owner Division/Contact: For information on the CCTV

More information

National Policing Community Security Policy

National Policing Community Security Policy Document Name File Name National Policing Community Security Policy Community_Security_Policy_FINAL v4_3.doc Authorisation Information Management Business Area Signed version held by National Police Information

More information

Access to personal accounts and lawful business monitoring

Access to personal  accounts and lawful business monitoring Access to personal email accounts and lawful business monitoring Contents Policy statement... 2 Access to personal emails... 2 Manager suspects misuse... 3 Lawful business monitoring... 4 Additional information...

More information

Sussex Police Business Crime Strategy

Sussex Police Business Crime Strategy Sussex Police Business Crime Strategy 2014-2016 Sussex Police Serving Sussex www.sussex.police.uk Foreword Sussex Police recognise that businesses are a vital part of our local communities and are essential

More information

Policing our Roads Together

Policing our Roads Together Policing our Roads Together A 3 year strategy 2018 2021 Our Vision Policing Together for, Secure and Efficient roads Our Objectives Working together to achieve: roads, free from harm Secure roads free

More information

Manchester Metropolitan University Information Security Strategy

Manchester Metropolitan University Information Security Strategy Manchester Metropolitan University Information Security Strategy 2017-2019 Document Information Document owner Tom Stoddart, Information Security Manager Version: 1.0 Release Date: 01/02/2017 Change History

More information

FIRE REDUCTION STRATEGY. Fire & Emergency Services Authority GOVERNMENT OF SAMOA April 2017

FIRE REDUCTION STRATEGY. Fire & Emergency Services Authority GOVERNMENT OF SAMOA April 2017 FIRE REDUCTION STRATEGY Fire & Emergency Services Authority GOVERNMENT OF SAMOA April 2017 FIRE REDUCTION STRATEGY Fire & Emergency Services Authority GOVERNMENT OF SAMOA April 2017 2 1. Introduction The

More information

NDIS Quality and Safeguards Commission. Incident Management System Guidance

NDIS Quality and Safeguards Commission. Incident Management System Guidance NDIS Quality and Safeguards Commission Incident Management System Guidance Version 1 - May 2018 Acknowledgment This guidance is published by the Australian Government, using resources developed by the

More information

PS 176 Removable Media Policy

PS 176 Removable Media Policy PS 176 Removable Media Policy December 2013 Version 2.0 Statement of legislative compliance This document has been drafted to comply with the general and specific duties in the Equality Act 2010; Data

More information

THE STRATEGIC POLICING REQUIREMENT. July 2012

THE STRATEGIC POLICING REQUIREMENT. July 2012 THE STRATEGIC POLICING REQUIREMENT July 2012 Contents Foreward by the Home Secretary...3 1. Introduction...5 2. National Threats...8 3. Capacity and contribution...9 4. Capability...11 5. Consistency...12

More information

UWC International Data Protection Policy

UWC International Data Protection Policy UWC International Data Protection Policy 1. Introduction This policy sets out UWC International s organisational approach to data protection. UWC International is committed to protecting the privacy of

More information

Cyber Security Strategy

Cyber Security Strategy Cyber Security Strategy Committee for Home Affairs Introduction Cyber security describes the technology, processes and safeguards that are used to protect our networks, computers, programs and data from

More information

Cellular Site Simulator Usage and Privacy

Cellular Site Simulator Usage and Privacy Policy 609 Cellular Site Simulator Usage and Privacy 609.1 PURPOSE AND SCOPE The purpose of this policy is to set guidelines and requirements pertaining to cellular site simulator technology usage and

More information

ACCOUNTING TECHNICIANS IRELAND DATA PROTECTION POLICY GENERAL DATA PROTECTION REGULATION

ACCOUNTING TECHNICIANS IRELAND DATA PROTECTION POLICY GENERAL DATA PROTECTION REGULATION ACCOUNTING TECHNICIANS IRELAND DATA PROTECTION POLICY GENERAL DATA PROTECTION REGULATION Document Control Owner: Distribution List: Data Protection Officer Relevant individuals who access, use, store or

More information

INFORMATION SECURITY AND RISK POLICY

INFORMATION SECURITY AND RISK POLICY INFORMATION SECURITY AND RISK POLICY 1 of 12 POLICY REFERENCE INFORMATION SHEET Document Title Document Reference Number Information Security and Risk Policy P/096/CO/03/11 Version Number V02.00 Status:

More information

The General Data Protection Regulation

The General Data Protection Regulation PRIVACY NOTICE INFORMATION FOR (a) APPLICANTS TO AND USERS OF CHS COMMUNITY SUPPORT SERVICES; (b) OTHER STAKEHOLDERS CHS is committed to protecting your personal data. This privacy notice sets out how

More information

Data Protection Policy

Data Protection Policy Data Protection Policy Data Protection Policy Version 3.00 May 2018 For more information, please contact: Technical Team T: 01903 228100 / 01903 550242 E: info@24x.com Page 1 The Data Protection Law...

More information

Information Security Strategy

Information Security Strategy Security Strategy Document Owner : Chief Officer Version : 1.1 Date : May 2011 We will on request produce this Strategy, or particular parts of it, in other languages and formats, in order that everyone

More information

Privacy Notice - General Data Protection Regulation ( GDPR )

Privacy Notice - General Data Protection Regulation ( GDPR ) THIS PRIVACY NOTICE APPLIES TO ANY PERSON WHO INSTRUCTS AN INDIVIDUAL BARRISTER AT 12 OLD SQUARE CHAMBERS EITHER DIRECTLY OR THROUGH A SOLICITOR OR WHO ASKS THE INDIVIDUAL BARRISTER FOR A REFERENCE Privacy

More information

INFORMATION SECURITY PRINCIPLES OF THE UNIVERSITY OF JYVÄSKYLÄ

INFORMATION SECURITY PRINCIPLES OF THE UNIVERSITY OF JYVÄSKYLÄ INFORMATION SECURITY PRINCIPLES OF THE UNIVERSITY OF JYVÄSKYLÄ JYVÄSKYLÄN YLIOPISTO Introduction With the principles described in this document, the management of the University of Jyväskylä further specifies

More information

Information Security Policy

Information Security Policy Information Security Policy Author: Responsible Lead Executive Director: Endorsing Body: Governance or Assurance Committee Alan Ashforth Colin Sloey Implementation Date: September 2010 Version Number:

More information

The British Museum. Data Protection Code of Practise. 1 Introduction

The British Museum. Data Protection Code of Practise. 1 Introduction The Data Protection Code of Practice 1 Introduction 1.1 The 1998 Data Protection Act is aimed at ensuring a balance between individuals rights to privacy and the lawful processing of personal data undertaken

More information

National ANPR Standards for Policing Part 2 Infrastructure Standards

National ANPR Standards for Policing Part 2 Infrastructure Standards National ANPR Standards for Policing Part 2 Infrastructure Standards Version 2.0 October 2014 Change History Version Date Details of Changes included in Update Author No. 1.0 May Approved Version 1 Bill

More information

University of Liverpool

University of Liverpool University of Liverpool Information Security Policy Reference Number Title CSD-003 Information Security Policy Version Number 3.0 Document Status Document Classification Active Open Effective Date 01 October

More information

Subject: Kier Group plc Data Protection Policy

Subject: Kier Group plc Data Protection Policy Kier Group plc Data Protection Policy Subject: Kier Group plc Data Protection Policy Author: Compliance Document type: Policy Authorised by: Kier General Counsel & Company Secretary Version 3 Effective

More information

Number: USF System Emergency Management Responsible Office: Administrative Services

Number: USF System Emergency Management Responsible Office: Administrative Services POLICY USF System USF USFSP USFSM Number: 6-010 Title: USF System Emergency Management Responsible Office: Administrative Services Date of Origin: 2-7-12 Date Last Amended: 8-24-16 (technical) Date Last

More information

Data Encryption Policy

Data Encryption Policy Data Encryption Policy Document Control Sheet Q Pulse Reference Number Version Number Document Author Lead Executive Director Sponsor Ratifying Committee POL-F-IMT-2 V02 Information Governance Manager

More information

1. To provide an update on the development of the SPA Assurance Map.

1. To provide an update on the development of the SPA Assurance Map. Meeting SPA Date and Time 9 June 2014 1015hrs Location Britannia Building, Room B024, Glasgow Caledonian University Title of Paper Assurance Map Item Number 8.2 Presented By Graham Stickle For Approval

More information

DATA PROTECTION POLICY

DATA PROTECTION POLICY DATA PROTECTION POLICY Introduction The purpose of this document is to provide a concise policy regarding the data protection obligations of Youth Work Ireland. Youth Work Ireland is a data controller

More information

STAFF REPORT. January 26, Audit Committee. Information Security Framework. Purpose:

STAFF REPORT. January 26, Audit Committee. Information Security Framework. Purpose: STAFF REPORT January 26, 2001 To: From: Subject: Audit Committee City Auditor Information Security Framework Purpose: To review the adequacy of the Information Security Framework governing the security

More information

This Policy has been prepared with due regard to the General Data Protection Regulation (EU Regulation 2016/679) ( GDPR ).

This Policy has been prepared with due regard to the General Data Protection Regulation (EU Regulation 2016/679) ( GDPR ). PRIVACY POLICY Data Protection Policy 1. Introduction This Data Protection Policy (this Policy ) sets out how Brital Foods Limited ( we, us, our ) handle the Personal Data we Process in the course of our

More information

Privacy Notice. General Information Protection Regulation ( GDPR )

Privacy Notice. General Information Protection Regulation ( GDPR ) Privacy Notice General Information Protection Regulation ( GDPR ) Please read the following information carefully. This privacy notice contains information about the information collected, stored and otherwise

More information

Privacy Policy GENERAL

Privacy Policy GENERAL Privacy Policy GENERAL This document sets out what information Springhill Care Group Ltd collects from visitors, how it uses the information, how it protects the information and your rights. Springhill

More information

Data Protection Privacy Notice

Data Protection Privacy Notice PETA Limited Page 1 of 7 Data Protection Privacy Notice PETA Limited provides a range of services to both members of the public and to those employed within business. To enable us to provide a service,

More information

Data Processing Agreement

Data Processing Agreement In accordance with the European Parliament- and Council s Directive (EU) 2016/679 of 27th April 2016 (hereinafter GDPR) on the protection of physical persons in connection with the processing of personal

More information

Xpress Super may collect and hold the following personal information about you: contact details including addresses and phone numbers;

Xpress Super may collect and hold the following personal information about you: contact details including addresses and phone numbers; 65 Gilbert Street, Adelaide SA 5000 Tel: 1300 216 890 Fax: 08 8221 6552 Australian Financial Services Licence: 430962 Privacy Policy This Privacy Policy was last updated on 27 February 2017. Our Commitment

More information

GDPR AMC SAAS AND HOSTED MODULES. UK version. AMC Consult A/S June 26, 2018 Version 1.10

GDPR AMC SAAS AND HOSTED MODULES. UK version. AMC Consult A/S June 26, 2018 Version 1.10 GDPR AMC SAAS AND HOSTED MODULES UK version AMC Consult A/S June 26, 2018 Version 1.10 INDEX 1 Signatures...3 2 General...4 3 Definitions...5 4 Scoping...6 4.1 In scope...6 5 Responsibilities of the data

More information

As set out in the Hong Kong ID card, or any relevant identification document referred to in 1(g) above.

As set out in the Hong Kong ID card, or any relevant identification document referred to in 1(g) above. As set out in the Hong Kong ID card, or any relevant identification document referred to in 1(g) above. B (1)B (2) * In the case of a non-hong Kong ID cardholder, state the passport number or any identification

More information

DATA PROTECTION POLICY THE HOLST GROUP

DATA PROTECTION POLICY THE HOLST GROUP DATA PROTECTION POLICY THE HOLST GROUP INTRODUCTION The purpose of this document is to provide a concise policy regarding the data protection obligations of The Holst Group. The Holst Group is a data controller

More information

Checklist: Credit Union Information Security and Privacy Policies

Checklist: Credit Union Information Security and Privacy Policies Checklist: Credit Union Information Security and Privacy Policies Acceptable Use Access Control and Password Management Background Check Backup and Recovery Bank Secrecy Act/Anti-Money Laundering/OFAC

More information

Procedures for responding to requests for personal data to support Data Protection Policy

Procedures for responding to requests for personal data to support Data Protection Policy Procedures for responding to requests for personal data to support Data Protection Policy Heriot-Watt Procedures for responding to requests for personal data; to support Data Protection Policy HERIOT-WATT

More information

Wesley House data protection statement and privacy notice (short-course delegates)

Wesley House data protection statement and privacy notice (short-course delegates) Wesley House data protection statement and privacy notice (short-course delegates) This statement explains how Wesley House handles and uses personal data we collect about delegates on short courses held

More information

Red ALERT Apparent Breach of an Unidentified Pharmacy Related Database

Red ALERT Apparent Breach of an Unidentified Pharmacy Related Database Red ALERT Apparent Breach of an Unidentified Pharmacy Related Database Making the UK more resilient against Cybercrime Date: August 2017 Reference: 0449-CYB This Red Alert is issued by the United Kingdom

More information

01.0 Policy Responsibilities and Oversight

01.0 Policy Responsibilities and Oversight Number 1.0 Policy Owner Information Security and Technology Policy Policy Responsibility & Oversight Effective 01/01/2014 Last Revision 12/30/2013 Department of Innovation and Technology 1. Policy Responsibilities

More information

Information Security Data Classification Procedure

Information Security Data Classification Procedure Information Security Data Classification Procedure A. Procedure 1. Audience 1.1 All University staff, vendors, students, volunteers, and members of advisory and governing bodies, in all campuses and locations

More information

DATA PROTECTION SELF-ASSESSMENT TOOL. Protecture:

DATA PROTECTION SELF-ASSESSMENT TOOL. Protecture: DATA PROTECTION SELF-ASSESSMENT TOOL Protecture: 0203 691 5731 Instructions for use touches many varied aspects of an organisation. Across six key areas, the self-assessment notes where a decision should

More information

Guardian Electrical Compliance Ltd DATA PROTECTION GDPR REGULATIONS POLICY

Guardian Electrical Compliance Ltd DATA PROTECTION GDPR REGULATIONS POLICY 1. Statement of Policy (Guardian) needs to collect and use certain types of information about the Individuals or Service Users with whom they come into contact in order to carry on our work. This personal

More information

Pathways CIC Privacy Policy. Date Issued: May Date to be Reviewed: May Issued by Yvonne Clarke

Pathways CIC Privacy Policy. Date Issued: May Date to be Reviewed: May Issued by Yvonne Clarke Prepared by: M Franklin Issued: May 2018 Pathways Community Interest Company Review due: May 2020 Pathways CIC Privacy Policy Version 0.3 Approved by: Yvonne Clarke Approval date: 21.05.2018 Pathways CIC

More information

This chapter should be read in conjuction with the Search and Surveilance Act 2012 and the Search chapters of the Police Manual.

This chapter should be read in conjuction with the Search and Surveilance Act 2012 and the Search chapters of the Police Manual. events This chapter contains the following topics: Summary Recording equipment must be Police-issued and approved Benefits for Police of recording operations and events - Media filming of Police operations

More information

COMMENTARY. Federal Banking Agencies Propose Enhanced Cyber Risk Management Standards

COMMENTARY. Federal Banking Agencies Propose Enhanced Cyber Risk Management Standards November 2016 COMMENTARY Federal Banking Agencies Propose Enhanced Cyber Risk Management Standards The Board of Governors of the Federal Reserve System ( Federal Reserve Board ), the Federal Deposit Insurance

More information

Data Preservation Checklists

Data Preservation Checklists Data Preservation Checklists At the G8 meeting of Justice and Interior Ministers in Moscow in October 1999, the Ministers recognized that law enforcement authorities conducting criminal investigations

More information

POWER AND WATER CORPORATION POLICY MANAGEMENT OF EXTERNAL SERVICE PROVIDERS

POWER AND WATER CORPORATION POLICY MANAGEMENT OF EXTERNAL SERVICE PROVIDERS POWER AND WATER CORPORATION POLICY MANAGEMENT OF EXTERNAL SERVICE PROVIDERS Prepared by: Approved by: Chief Procurement Officer John Baskerville Chief Executive File number: D2015/65737 June 2015 MANAGEMENT

More information

Cognizant Careers Portal Terms of Use and Privacy Policy ( Policy )

Cognizant Careers Portal Terms of Use and Privacy Policy ( Policy ) Cognizant Careers Portal Terms of Use and Privacy Policy ( Policy ) Introduction This Policy applies to the Careers portal on the Cognizant website accessed via www.cognizant.com/careers ("Site"), which

More information

Policy on the Provision of Mobile Phones

Policy on the Provision of Mobile Phones Provision of Mobile Phones Policy on the Provision of Mobile Phones Originator name: Section / Dept: Implementation date: Date of next review: Related policies: Policy history: Roger Stickland Approval

More information

Internet of Things Toolkit for Small and Medium Businesses

Internet of Things Toolkit for Small and Medium Businesses Your Guide #IoTatWork to IoT Security #IoTatWork Internet of Things Toolkit for Small and Medium Businesses Table of Contents Introduction 1 The Internet of Things (IoT) 2 Presence of IoT in Business Sectors

More information

Governance and Compliance Learning from the Private Sector. David Coverdale

Governance and Compliance Learning from the Private Sector. David Coverdale Governance and Compliance Learning from the Private Sector David Coverdale Governance Challenges The Patient Journey CQC Business Continuity Policy QoF Data GDPR LHA2 GRC Training Risk IG BIA Resilience

More information

TransLink Video Surveillance & Audio Recording Privacy Statement

TransLink Video Surveillance & Audio Recording Privacy Statement TransLink Video Surveillance & Audio Recording Privacy Statement Last Update: August 4, 2015 Previous version: July 22, 2008 TransLink is committed to achieving a balance between an individual s right

More information

It applies to personal information for individuals that are external to us such as donors, clients and suppliers (you, your).

It applies to personal information for individuals that are external to us such as donors, clients and suppliers (you, your). Our Privacy Policy 1 Purpose Mission Australia is required by law to comply with the Privacy Act 1988 (Cth) (the Act), including the Australian Privacy Principles (APPs). We take our privacy obligations

More information

DATA PROTECTION IN RESEARCH

DATA PROTECTION IN RESEARCH DATA PROTECTION IN RESEARCH Document control Applicable to: All employees and research students Date first approved February 2006 Date first amended May 2015 Date last amended May 2015 Approved by Approval

More information

NWQ Capital Management Pty Ltd. Privacy Policy. March 2017 v2

NWQ Capital Management Pty Ltd. Privacy Policy. March 2017 v2 NWQ Capital Management Pty Ltd Privacy Policy March 2017 Page 1 of 8 Privacy and Spam Policy NWQ Capital Management Pty Ltd s Commitment NWQ Capital Management Pty Ltd (NWQ) is committed to providing you

More information

Motorola Mobility Binding Corporate Rules (BCRs)

Motorola Mobility Binding Corporate Rules (BCRs) Motorola Mobility Binding Corporate Rules (BCRs) Introduction These Binding Privacy Rules ( Rules ) explain how the Motorola Mobility group ( Motorola Mobility ) respects the privacy rights of its customers,

More information

IDENTITY ASSURANCE PRINCIPLES

IDENTITY ASSURANCE PRINCIPLES IDENTITY ASSURANCE PRINCIPLES PRIVACY AND CONSUMER ADVISORY GROUP (PCAG) V3.1 17 th July 2014 CONTENTS 1. Introduction 3 2. The Context of the Principles 4 3. Definitions 6 4. The Nine Identity Assurance

More information

Version 1/2018. GDPR Processor Security Controls

Version 1/2018. GDPR Processor Security Controls Version 1/2018 GDPR Processor Security Controls Guidance Purpose of this document This document describes the information security controls that are in place by an organisation acting as a processor in

More information

Information Security Controls Policy

Information Security Controls Policy Information Security Controls Policy Classification: Policy Version Number: 1-00 Status: Published Approved by (Board): University Leadership Team Approval Date: 30 January 2018 Effective from: 30 January

More information

Cyber Security Program

Cyber Security Program Cyber Security Program Cyber Security Program Goals and Objectives Goals Provide comprehensive Security Education and Awareness to the University community Build trust with the University community by

More information

Creative Funding Solutions Limited Data Protection Policy

Creative Funding Solutions Limited Data Protection Policy Creative Funding Solutions Limited Data Protection Policy CONTENTS Section Title 1 Introduction 2 Why this Policy Exists 3 Data Protection Law 4 Responsibilities 5 6 7 8 9 10 Data Protection Impact Assessments

More information

Privacy Policy Statement Last update 25 th May 2018.

Privacy Policy Statement Last update 25 th May 2018. Privacy Policy Statement Last update 25 th May 2018. Introduction We want our customers to receive a prompt, efficient and courteous service that is delivered in a positive and transparent manner. The

More information

INFORMATION TO BE GIVEN 2

INFORMATION TO BE GIVEN 2 (To be filled out in the EDPS' office) REGISTER NUMBER: 1423 (To be filled out in the EDPS' office) NOTIFICATION FOR PRIOR CHECKING DATE OF SUBMISSION: 03/01/2017 CASE NUMBER: 2017-0015 INSTITUTION: ESMA

More information

A Homeopath Registered Homeopath

A Homeopath Registered Homeopath A Homeopath Registered Homeopath DATA PROTECTION POLICY Scope of the policy This policy applies to the work of homeopath A Homeopath (hereafter referred to as AH ). The policy sets out the requirements

More information

ISAO SO Product Outline

ISAO SO Product Outline Draft Document Request For Comment ISAO SO 2016 v0.2 ISAO Standards Organization Dr. Greg White, Executive Director Rick Lipsey, Deputy Director May 2, 2016 Copyright 2016, ISAO SO (Information Sharing

More information

Privacy Policy... 1 EU-U.S. Privacy Shield Policy... 2

Privacy Policy... 1 EU-U.S. Privacy Shield Policy... 2 Privacy Policy... 1 EU-U.S. Privacy Shield Policy... 2 Privacy Policy knows that your privacy is important to you. Below is our privacy policy for collecting, using, securing, protecting and sharing your

More information

Q&A for Citco Fund Services clients The General Data Protection Regulation ( GDPR )

Q&A for Citco Fund Services clients The General Data Protection Regulation ( GDPR ) Q&A for Citco Fund Services clients The General Data Protection Regulation ( GDPR ) May 2018 Document Classification Public Q&A for Citco Fund Services clients in relation to The General Data Protection

More information

IQ Level 4 Award in Understanding the External Quality Assurance of Assessment Processes and Practice (QCF) Specification

IQ Level 4 Award in Understanding the External Quality Assurance of Assessment Processes and Practice (QCF) Specification IQ Level 4 Award in Understanding the External Quality Assurance of Assessment Processes and Practice (QCF) Specification Regulation No: 600/5528/5 Page 1 of 15 Contents Page Industry Qualifications...

More information

ΚΕΝΤΡΟ ΜΕΛΕΤΩΝ ΑΣΦΑΛΕΙΑΣ CENTER FOR SECURITY STUDIES

ΚΕΝΤΡΟ ΜΕΛΕΤΩΝ ΑΣΦΑΛΕΙΑΣ CENTER FOR SECURITY STUDIES ΚΕΝΤΡΟ ΜΕΛΕΤΩΝ ΑΣΦΑΛΕΙΑΣ CENTER FOR SECURITY STUDIES Under which conditions is an investigation authorised/permitted? Which are the legal boundaries and the applicable operational rules? Is the Data Protection

More information

GDPR: Get Prepared! A Checklist for Implementing a Security and Event Management Tool. Contact. Ashley House, Ashley Road London N17 9LZ

GDPR: Get Prepared! A Checklist for Implementing a Security and Event Management Tool. Contact. Ashley House, Ashley Road London N17 9LZ GDPR: Get Prepared! A Checklist for Implementing a Security and Event Management Tool Contact Ashley House, Ashley Road London N17 9LZ 0333 234 4288 info@networkiq.co.uk The General Data Privacy Regulation

More information

GENERAL PRIVACY POLICY

GENERAL PRIVACY POLICY GENERAL PRIVACY POLICY Introduction The Australian Association of Consultant Pharmacy Pty Ltd (ACN 057 706 064) (the AACP) is committed to protecting the privacy of your personal information. This privacy

More information

PROCEDURE POLICY DEFINITIONS AD DATA GOVERNANCE PROCEDURE. Administration (AD) APPROVED: President and CEO

PROCEDURE POLICY DEFINITIONS AD DATA GOVERNANCE PROCEDURE. Administration (AD) APPROVED: President and CEO Section: Subject: Administration (AD) Data Governance AD.3.3.1 DATA GOVERNANCE PROCEDURE Legislation: Alberta Evidence Act (RSA 2000 ca-18); Copyright Act, R.S.C., 1985, c.c-42; Electronic Transactions

More information

"PPS" is Private Practice Software as developed and produced by Rushcliff Ltd.

PPS is Private Practice Software as developed and produced by Rushcliff Ltd. Rushcliff Ltd Data Processing Agreement This Data Processing Agreement ( DPA ) forms part of the main terms of use of PPS, PPS Express, PPS Online booking, any other Rushcliff products or services and

More information

CYBER RESILIENCE & INCIDENT RESPONSE

CYBER RESILIENCE & INCIDENT RESPONSE CYBER RESILIENCE & INCIDENT RESPONSE www.nccgroup.trust Introduction The threat landscape has changed dramatically over the last decade. Once the biggest threats came from opportunist attacks and preventable

More information

Privacy Policy Wealth Elements Pty Ltd

Privacy Policy Wealth Elements Pty Ltd Page 1 of 6 Privacy Policy Wealth Elements Pty Ltd Our Commitment to you Wealth Elements Pty Ltd is committed to providing you with the highest levels of client service. We recognise that your privacy

More information

GDPR Processor Security Controls. GDPR Toolkit Version 1 Datagator Ltd

GDPR Processor Security Controls. GDPR Toolkit Version 1 Datagator Ltd GDPR Processor Security Controls GDPR Toolkit Version 1 Datagator Ltd Implementation Guidance (The header page and this section must be removed from final version of the document) Purpose of this document

More information

DEPARTMENT OF JUSTICE AND EQUALITY. Data Protection Policy

DEPARTMENT OF JUSTICE AND EQUALITY. Data Protection Policy DEPARTMENT OF JUSTICE AND EQUALITY Data Protection Policy May 2018 Contents Page 1. Introduction 3 2. Scope 3 3. Data Protection Principles 4 4. GDPR - Rights of data subjects 6 5. Responsibilities of

More information

Data Protection and GDPR

Data Protection and GDPR Data Protection and GDPR At DPDgroup UK Ltd (DPD & DPD Local) we take data protection seriously and have updated all our relevant policies and documents to ensure we meet the requirements of GDPR. We have

More information

Cognizant Careers Portal Privacy Policy ( Policy )

Cognizant Careers Portal Privacy Policy ( Policy ) Cognizant Careers Portal Privacy Policy ( Policy ) Date: 22 March 2017 Introduction This Careers Portal Privacy Policy ("Policy") applies to the Careers portal on the Cognizant website accessed via www.cognizant.com/careers

More information

LCU Privacy Breach Response Plan

LCU Privacy Breach Response Plan LCU Privacy Breach Response Plan Sept 2018 Prevention Communication & Notification Evaluation of Risks Breach Containment & Preliminary Assessment Introduction The Credit Union makes every effort to safeguard

More information

Castle View Primary School Data Protection Policy

Castle View Primary School Data Protection Policy Castle View Primary School Data Protection Policy Aims The Headteacher and Governors of the school intend to comply fully with the requirements and principles of the Data Protection Act 1998. All staff

More information