2021/24761 - Data Protection agreement

REQUEST

Please can you provide me with:

1. Copies of any Data Protection agreement(s) that police constables or police staff (‘police employee’) sign or agree when they join the force, and before they handle (or have access to) the personal data of the public, personal data acquired while in their role as police employees (‘personal data’).

2. Any internal police guidance, procedures or policies for police employees that mishandle or allegedly mishandle personal data. (‘data breach’) that was acquired while in the role of a police employee.

3. Please include for a data breach while on duty, off duty or after the cessation of employment, by any means.

4. Please indicate who is responsible for investigating and/or taking appropriate action against any police employee (ex-employee) for such mishandling of personal data? Please include the same for on-duty, off duty or after employment cases.

5. Who is responsible for a said data breach? Again, this is for police employees on-duty, off-duty and after employment.

6. Who is accountable for a said data breach? Again, this is for police employees on-duty, off-duty and after employment.

7. Who is responsible for holding the police employee under any of these circumstances.

CLARIFICATION

Who is responsible is as it says, who is responsible for the data breach if it was committed by (i) an on duty officer (ii) off duty officer (iii) retired officer.  I presume (i) and (ii) is the data controller (the chief constable),  but in the case of (iii), does the responsibility fall on the ex-employee for the data they breach which was acquired as a police officer or is it still the CC?

The other should say

Who is responsible for holding the police employee to account under any of these circumstances

RESPONSE