Main issues in DPA Part 3

• What is a ‘competent authority’?
• Identifying law enforcement purposes
• Sensitive personal data
• Where GDPR and DPA diverge – justifying the use of personal data including policy documents for sensitive processing

Specific issues

• Justifying the use of personal data for law enforcement purposes
• Transparency – when it does and does not apply
• Identifying and recording the status of data subjects
• Specific logging and recording issues
• Individual rights, including subject access, the right to be forgotten, and rights of objection