Staff Handbook - Policies and Procedures

Page 16

• whether circumstances have changed since the offending took place.

Data handling policy

Data Protection Policy 24-06-24 Registered Office: Unit 2A Longrock Industrial Estate, Penzance, Cornwall. TR20 8HX Company Reg. No. 04124350 VAT Reg. No. 684598666 UTR No. 24386 09541 All information must be reviewed before destruction to determine whether there are special factors that mean destruction should be delayed, such as potential litigation, complaints or grievances. Hard copy and electronically held documents and information must be deleted at the end of the retention period. Hard copy and electronically held documents and information will be disposed of securely. Hard copy and electronically held documents and information will be retained for at least the period specified in our records retention schedule. This policy supplements our data protection policy (employment). It sets out how long employment-related information will normally be held by us and when that information will be confidentially destroyed. The person responsible for implementing and monitoring compliance with this policy Lynn Way Company Secretary. We will review this policy annually to check that it is effective. Processes We will ensure that DBS certificate information is kept securely, in lockable, non-portable, storage containers with access strictly controlled and limited to those who are entitled to see it as part of their duties. In accordance with section 124 of the Police Act 1997, we will ensure that certificate information is only passed to those who are authorised to receive it in the course of their duties. We keep a record of all those to whom certificates or certificate information has been revealed. It is a criminal offence to pass this information to anyone who is not entitled to receive it. Once the DBS certificate has been inspected, it will be destroyed in accordance with the code of practice. Certificate information must only be used for the specific purpose for which it was requested and for which the applicant’s full consent has been given. Once a recruitment (or other relevant) decision has been made, we will not keep certificate information for any longer than is necessary. This is generally for a period of up to six months, to allow for the consideration and resolution of any disputes or complaints. If, in very exceptional circumstances, it is considered necessary to keep certificate information for longer than six months, we will consult the DBS about this and will give full consideration to the data protection and human rights of the individual before doing so. Once the retention period has elapsed, we will ensure that any DBS certificate information is immediately destroyed by secure means. DATA PROTECTION POLICY (DATA RETENTION - EMPLOYMENT)