This Notice explains how the GDC processes personal data – that is to say, the various ways in which the GDC obtains, holds, uses and discloses personal data. The Notice does this by referencing the main purposes for which the GDC processes personal data.
This Notice also explains what your rights are in relation to personal data processed by the GDC.
This notice will be formally reviewed and updated annually at the start of each year. It will also be updated and amended during the year as needed.
The way in which the GDC processes personal data is governed by data protection law, which includes the General Data Protection Regulation 2016 (“GDPR”) and the Data Protection Act 2018 (“DPA 2018”).
The following terms are defined by the GDPR and DPA 2018. A short explanation is given below (though it is not intended to substitute for the legal definitions).
By personal data, we mean information relating to a living identified or identifiable person.
By special category personal data we mean:
Personal data that reveals any of the following about an individual: racial or ethnic origin; political opinions; religious or philosophical beliefs; or trade union membership.
Personal data that consists of: genetic data; biometric data used for the purpose of identifying an individual; data concerning health; or data concerning an individual’s sex life or sexual orientation.
By criminal offence data we mean data about whether an individual has committed or has been convicted of a criminal offence.