Anonymised information
Information from which no individual can be identified.
Data Controller
A person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal data are, or are to be, processed.
Data/information sharing
Disclosure of data from one or more organisations to a third party organisation or organisations, or the sharing of data between different parts of an organisation. Can take the form of systematic, routine data sharing where the same data sets are shared between the same organisations for an established purpose; and exceptional, one off decisions to share data for any of a range of purposes.
DPO
Data Protection Officer.
Data Protection Policy
Policy Framework and all Barnardo’s policies listed in the structure section above, including as amended from time to time.
DPA18
Data Protection Act 2018.
Data sharing agreements /protocols
Set out a common set of rules to be adopted by the various organisations involved in a data sharing operation.
Data subject
An individual who is the subject of personal data.
GDPR
General Data Protection Regulation.
ICO
Information Commissioner or Information Commissioner’s Office.
Informed consent
means the subject of the data has the capacity and competence to give consent (and consent must be given voluntarily) and sufficient information to fully understand what they are giving consent to.
Personal data
Data relating to a living individual who can be identified from that data (or from that data and other information in Barnardo’s possession).
Personal data breach
Unauthorised or accidental disclosure of, access to, loss, theft, alteration, destruction of or damage to personal data.
Process/Processing/Processed
Obtaining, accessing, viewing, recording, holding, disclosing, using or otherwise carrying out any operation on personal data.
Sensitive personal data
Personal data relating to:
- racial or ethnic origin;
- political opinions;
- religious beliefs or other beliefs of a similar nature;
- trade union membership;
- physical or mental health or condition;
- sex life;
- children
- the commission or alleged commission of any offence; or,
- any proceedings for any offence committed or alleged to have been committed by the data subject, the disposal of such proceedings or the sentence of any court in such proceedings.
Service User
means any individual who receives services of any kind from Barnardo’s.
Subject access request
A written request from an individual, or on behalf of an individual, requesting access to the individual’s personal data held by Barnardo’s.