Purpose of processing
Personal data is processed under both part 2 and part 3 of the Data Protection Act 2018 because sometimes the personal data is collected to resolve problems informally and enable us to deliver our work and sometimes it is collected for enforcement purposes. Where it is collected for law enforcement purposes then we are acting as a competent authority* and Part 3 applies.
*A competent authority means:
- a person specified in Schedule 7 of the DPA 2018; or
- any other person if, and to the extent that, they have statutory functions to exercise public authority or public powers for the law enforcement purposes.
By virtue of point ii, the council and its contractors are acting as a competent authority in processing the data.
