Clubs and syndicates – GDPR

‘Personal data’ means any information relating to an identified or identifiable natural person (‘data subject’) who can be directly or indirectly be identified by reference to an identifier such as name, identification number, location data or online identifier.  GDPR can apply to automated personal data and manual filing systems.

‘Processing’ means any operation or set of operations which is performed on the personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

‘Controllers’ determine the purposes and means of processing personal data.

Further information relating to whether you are a ‘Controller’ which includes a self-assessment questionnaire to establish whether or not you need to register, can be found on the Information Commissioner’s website.

‘Processors’ are responsible for processing ‘personal data’ on behalf of a ‘Controller’.  

What to do when processing:

When processing ‘personal data’ it should be:

1. Processed lawfully, fairly and in a transparent manner.
2. Collected for specified, explicit and legitimate purposes.
3. Adequate, relevant and limited to what is necessary.
4. Accurate and where necessary kept up to date.
5. Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which those data are processed.
6. Processed in a manner that ensures appropriate security of the personal data.

Overarching the above, Accountability is central to GDPR, data controllers are responsible for compliance with the principles and must be able to demonstrate this to data subjects and the regulator.

Data Protection Help Line

Telephone: 0303 123 1113 or 01625 545745

Request for information

Click here if you would like to request information held by the ICO in its capacity as a public authority or alternatively contact the Information Access Team at accessicoinformation@ico.org.uk

By Post

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Fax
01625 524510

Regional offices

In addition to the head office in Wilmslow, there are also offices in Scotland, Wales and Northern Ireland. Please send notification forms to the Wilmslow office, not the regional offices.