A law enforcement authority includes organisations which have law enforcement or investigatory functions such as:
- the police;
- National Crime Agency
- Government departments;
- the courts;
- the Director of Public Prosecutions;
- The Crown Office and Procurator Service;
- The Public Prosecution Service NI;
- the Lord Advocate;
- UK Border Force;
- prisons;
- the Commissioners of HM Revenue and Customs;
- Parole Boards or Parole Commissioners for Northern Ireland;
- Police Ombudsman’s office for Northern Ireland;
- Police Investigations & Review Commissioner;
- HM Land Registry;
- Driver and Vehicle Agency Northern Ireland (DVANI);
- TV Licensing; and
- the Information Commissioner’s Office.
An organisation could also be a law enforcement authority if they have a legal power to process personal data for law enforcement purposes, for example:
- local authorities in Scotland and Northern Ireland when investigating trading standards offences; and
- the Environment Agency, The Northern Ireland Environment Agency and The Scottish Environmental Protection Agency when prosecuting environmental offences.
The list does not include intelligence services such as the Security Service or the Secret Intelligence Service.
Personal data is information that relates to an identified or identifiable individual. What identifies an individual could be as simple as:
- a name;
- an address; or
- CCTV images.
It could include other identifiers such as an IP address, an identification number or location data.
If it is possible to identify an individual directly or indirectly from the information you are processing, then it’s likely to be personal data.