Which legal framework will my organisation be processing under?
-
1. Which legal framework will my organisation be processing under?
Not sure
2. Are you a competent authority, as defined under the Data Protection Act?
Section 30 of the DPA defines what a ‘competent authority’ is for the purposes of the Act. Schedule 7 of the Data Protection Act 2018 contains a list of competent authorities.
If you are not listed in Schedule 7, you may still be a competent authority if you have a legal power to process personal data for criminal law enforcement purposes. For example, local authorities who prosecute trading standards offences or the Environment Agency when prosecuting environmental offences.