Home > Access to information > Data protection

Data protection

On the 25 May 2018 the UK produced its third generation of data protection law, it replaces the Data Protection Act of 1998. This is the same date as the General Data Protection Regulation (GDPR) was launched throughout the European Union, EU.

The new law has several elements to it, these are:

  • General data processing – implements the GDPR standards across all general data processing.
  • Law Enforcement Processing – implements standards for the processing of law enforcement data.
  • Regulation and enforcement – implements additional powers for the Information Commissioner who will continue to regulate and enforce data protection law.

Anyone processing personal data must continue to comply with the principles of data protection law these are that data must be:

  • Processed lawfully, fairly and in a transparent manner.
  • Collected for a specified, explicit and legitimate purpose.
  • Adequate, relevant and limited to what is necessary.
  • Accurate and where necessary kept up to date.
  • Kept in a form which permits identification of data subjects, and for no longer than is necessary.
  • Processed in a manner that ensures appropriate security of the personal data

How we use your information

Information Rights

A key area of change in the new Data Protection Act relates to individuals rights. If you wish to know about your rights, including what information North Yorkshire Police hold on you, please click here.

If you would like to make an Information Rights request, please click here.

Should you have any queries surrounding the use of data about you please contact the Civil Disclosure Unit at: