{"id":3518,"date":"2020-02-27T06:59:40","date_gmt":"2020-02-27T06:59:40","guid":{"rendered":"https:\/\/crbdirect.org.uk\/?p=3518"},"modified":"2021-03-18T16:02:14","modified_gmt":"2021-03-18T16:02:14","slug":"gdpr-and-the-dbs-check-process","status":"publish","type":"post","link":"https:\/\/crbdirect.org.uk\/gdpr-and-the-dbs-check-process\/","title":{"rendered":"GDPR and The DBS Check Process"},"content":{"rendered":"<p>The General Data Protection Regulation, usually abbreviated to GDPR, was introduced across Europe in May 2018. Even though the UK had already voted to leave the EU at that point, the GDPR rules still apply. Most businesses are up to speed already with their GDPR responsibilities, but some are still lacking. However, ignoring GDPR legislation could result in huge fines, so it\u2019s a risky practice. Whether you\u2019re involved in <a href=\"https:\/\/crbdirect.org.uk\/crb-check-application\/\">DBS checks<\/a> as an applicant or as someone processing the checks, here\u2019s the basics of what you need to know.<\/p>\n<p>&nbsp;<\/p>\n<h2>GDPR Principles<\/h2>\n<p>There are core principles which underwrite GDPR legislation, whatever the type of data which is being processed. These are all about the way companies <a href=\"https:\/\/crbdirect.org.uk\/what-do-i-need-to-tell-my-employer-about-a-criminal-record\/\">obtain, store and dispose of your personal information<\/a>. When it comes to DBS checks, this can be broken down further into three stages.<\/p>\n<p>&nbsp;<\/p>\n<h2>Application<\/h2>\n<p>If you\u2019re applying for your DBS check online, then you will have to set up a secure username and password to access the site. This ensures that only you can access the form while you\u2019re completing it, and only you can log back into the site to see how the application is progressing. Another important part of the application stage is to <a href=\"https:\/\/crbdirect.org.uk\/dbs-required-documents\/\">verify your identity<\/a>, by taking original passports, driving licence or utility bills to your employer. They will return the <a href=\"https:\/\/crbdirect.org.uk\/original-documents-and-dbs-checks\/\">original documents<\/a> to you but may take copies.<\/p>\n<p>&nbsp;<\/p>\n<h2>Storing Information<\/h2>\n<p>The GDPR legislation is also clear about how important it is to store information properly and safely. This doesn\u2019t just include DBS check information, but also other data such as addresses, bank account details or employee sickness information. The GDPR doesn\u2019t define what secure means, however. A smaller company without computerised records might define secure as locked away in a filing cabinet in the boss\u2019s office. Other companies might scan everything into a computer system, so in these cases secure would mean password protecting areas of the system and putting controls in place to make sure unauthorised people can\u2019t get access to it.<\/p>\n<p>&nbsp;<\/p>\n<h2>Disposing<\/h2>\n<p>The GDPR rules also state that companies can\u2019t hold on to information about you for longer than is necessary. In terms of your <a href=\"https:\/\/crbdirect.org.uk\/what-is-revealed-on-a-dbs-certificate\/\">DBS check certificate<\/a>, this usually means that you will be allowed to keep the original, rather than handing it over to your employer. Most will have a process whereby they just tick to say they\u2019ve seen it, or some other way of recording what the certificate showed. If you leave your position, then the organisation has a responsibility to delete all of your personal information, or shred it, within a reasonable period of time, usually six months.<\/p>\n<p>&nbsp;<\/p>\n<h2>Penalties for Non-Compliance<\/h2>\n<p>If you\u2019re not happy with the way your employer is storing your data, then you have the tight to report them over it. However, this is probably not the best tactic should you wish to keep your job. Report in the first instance to whoever in the organisation has responsibility for GDPR and advise that you are aware of the need for secure storage. Fines under GDPR can be up to 10 million euros.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The General Data Protection Regulation, usually abbreviated to GDPR, was introduced across Europe in May 2018. Even though the UK had already voted to leave the EU at that point, the GDPR rules still apply. Most businesses are up to speed already with their GDPR responsibilities, but some are still lacking.<\/p>\n","protected":false},"author":1,"featured_media":3552,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[34],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v19.8 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>GDPR and The DBS Check Process<\/title>\n<meta name=\"description\" content=\"The General Data Protection Regulation, usually abbreviated to GDPR, was introduced across Europe in May 2018.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/crbdirect.org.uk\/gdpr-and-the-dbs-check-process\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"GDPR and The DBS Check Process\" \/>\n<meta property=\"og:description\" content=\"The General Data Protection Regulation, usually abbreviated to GDPR, was introduced across Europe in May 2018.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/crbdirect.org.uk\/gdpr-and-the-dbs-check-process\/\" \/>\n<meta property=\"og:site_name\" content=\"CRB Direct\" \/>\n<meta property=\"article:published_time\" content=\"2020-02-27T06:59:40+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-03-18T16:02:14+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/crbdirect.org.uk\/wp-content\/uploads\/2020\/02\/gdpr-and-the-disclosure-process.png\" \/>\n\t<meta property=\"og:image:width\" content=\"300\" \/>\n\t<meta property=\"og:image:height\" content=\"200\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"crb-admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"crb-admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/crbdirect.org.uk\/gdpr-and-the-dbs-check-process\/\",\"url\":\"https:\/\/crbdirect.org.uk\/gdpr-and-the-dbs-check-process\/\",\"name\":\"GDPR and The DBS Check Process\",\"isPartOf\":{\"@id\":\"https:\/\/crbdirect.org.uk\/#website\"},\"datePublished\":\"2020-02-27T06:59:40+00:00\",\"dateModified\":\"2021-03-18T16:02:14+00:00\",\"author\":{\"@id\":\"https:\/\/crbdirect.org.uk\/#\/schema\/person\/1b45c80f7d9781fe6a7e7148fad45e1f\"},\"description\":\"The General Data Protection Regulation, usually abbreviated to GDPR, was introduced across Europe in May 2018.\",\"breadcrumb\":{\"@id\":\"https:\/\/crbdirect.org.uk\/gdpr-and-the-dbs-check-process\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/crbdirect.org.uk\/gdpr-and-the-dbs-check-process\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/crbdirect.org.uk\/gdpr-and-the-dbs-check-process\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/crbdirect.org.uk\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"GDPR and The DBS Check Process\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/crbdirect.org.uk\/#website\",\"url\":\"https:\/\/crbdirect.org.uk\/\",\"name\":\"CRB Direct\",\"description\":\"\",\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/crbdirect.org.uk\/#\/schema\/person\/1b45c80f7d9781fe6a7e7148fad45e1f\",\"name\":\"crb-admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/crbdirect.org.uk\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/205f4a48ca8f9921f31527a74b849ba1?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/205f4a48ca8f9921f31527a74b849ba1?s=96&d=mm&r=g\",\"caption\":\"crb-admin\"},\"url\":\"https:\/\/crbdirect.org.uk\/author\/crb-admin\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"GDPR and The DBS Check Process","description":"The General Data Protection Regulation, usually abbreviated to GDPR, was introduced across Europe in May 2018.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/crbdirect.org.uk\/gdpr-and-the-dbs-check-process\/","og_locale":"en_US","og_type":"article","og_title":"GDPR and The DBS Check Process","og_description":"The General Data Protection Regulation, usually abbreviated to GDPR, was introduced across Europe in May 2018.","og_url":"https:\/\/crbdirect.org.uk\/gdpr-and-the-dbs-check-process\/","og_site_name":"CRB Direct","article_published_time":"2020-02-27T06:59:40+00:00","article_modified_time":"2021-03-18T16:02:14+00:00","og_image":[{"width":300,"height":200,"url":"https:\/\/crbdirect.org.uk\/wp-content\/uploads\/2020\/02\/gdpr-and-the-disclosure-process.png","type":"image\/png"}],"author":"crb-admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"crb-admin","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/crbdirect.org.uk\/gdpr-and-the-dbs-check-process\/","url":"https:\/\/crbdirect.org.uk\/gdpr-and-the-dbs-check-process\/","name":"GDPR and The DBS Check Process","isPartOf":{"@id":"https:\/\/crbdirect.org.uk\/#website"},"datePublished":"2020-02-27T06:59:40+00:00","dateModified":"2021-03-18T16:02:14+00:00","author":{"@id":"https:\/\/crbdirect.org.uk\/#\/schema\/person\/1b45c80f7d9781fe6a7e7148fad45e1f"},"description":"The General Data Protection Regulation, usually abbreviated to GDPR, was introduced across Europe in May 2018.","breadcrumb":{"@id":"https:\/\/crbdirect.org.uk\/gdpr-and-the-dbs-check-process\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/crbdirect.org.uk\/gdpr-and-the-dbs-check-process\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/crbdirect.org.uk\/gdpr-and-the-dbs-check-process\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/crbdirect.org.uk\/"},{"@type":"ListItem","position":2,"name":"GDPR and The DBS Check Process"}]},{"@type":"WebSite","@id":"https:\/\/crbdirect.org.uk\/#website","url":"https:\/\/crbdirect.org.uk\/","name":"CRB Direct","description":"","inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/crbdirect.org.uk\/#\/schema\/person\/1b45c80f7d9781fe6a7e7148fad45e1f","name":"crb-admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/crbdirect.org.uk\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/205f4a48ca8f9921f31527a74b849ba1?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/205f4a48ca8f9921f31527a74b849ba1?s=96&d=mm&r=g","caption":"crb-admin"},"url":"https:\/\/crbdirect.org.uk\/author\/crb-admin\/"}]}},"_links":{"self":[{"href":"https:\/\/crbdirect.org.uk\/wp-json\/wp\/v2\/posts\/3518"}],"collection":[{"href":"https:\/\/crbdirect.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crbdirect.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crbdirect.org.uk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/crbdirect.org.uk\/wp-json\/wp\/v2\/comments?post=3518"}],"version-history":[{"count":8,"href":"https:\/\/crbdirect.org.uk\/wp-json\/wp\/v2\/posts\/3518\/revisions"}],"predecessor-version":[{"id":6014,"href":"https:\/\/crbdirect.org.uk\/wp-json\/wp\/v2\/posts\/3518\/revisions\/6014"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/crbdirect.org.uk\/wp-json\/wp\/v2\/media\/3552"}],"wp:attachment":[{"href":"https:\/\/crbdirect.org.uk\/wp-json\/wp\/v2\/media?parent=3518"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crbdirect.org.uk\/wp-json\/wp\/v2\/categories?post=3518"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crbdirect.org.uk\/wp-json\/wp\/v2\/tags?post=3518"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}