Live Facial Recognition

Revised 8 August 2024
Version 1.2

Specific Privacy Notice

Introduction

This Specific Privacy Notice has been created to make it easier for you to understand what personal data Essex Police processes about you, how and why it will be used in connection with live facial recognition. It is a requirement of the General Data Protection Regulation (GDPR).

It is subordinate to, and should be read in conjunction with, the force’s high-level Privacy Notice.

The high-level Privacy Notice provides you with complete details of the rights you have relating to the personal data we hold about you now and any personal data we might collect about you in the future.

If you require this Specific Privacy Notice in Braille or in another language please contact the Force’s Data Protection Officer (contact details below).

Privacy Information

Who is the Controller (the person who determines the purpose and means by which your personal data is processed) and what are their contact details?

The Controller is:

Chief Constable of Essex Police
Essex Police HQ
PO Box 2
Chelmsford
CM2 6DA

Section 44(1)(a)

 

What are the contact details of Essex Police’s Data Protection Officer?

Data Protection Officer
Essex Police HQ,
PO Box 2
Chelmsford
CM2 6DA
Email: [email protected]

Section 44(1)(a)

 

For what purpose(s) is my personal data intended to be processed by Essex Police?

For law enforcement purposes – defined as the prevention, investigation, detection or prosecution of criminal offences, the execution of criminal penalties, including the safeguarding against and the prevention of threats to public security, or the policing purpose.

For general purposes - processing that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

More specifically, the purposes is to identify possible biometric template matches for relevant data subjects for the following purposes:

1. wanted by the courts and/or
2. suspected of having committed an offence, or where there are reasonable grounds to suspect an individual depicted to be committing and offence; and/or
3. missing persons deemed at increased risk
4. presenting a risk of harm to themselves or others

Section 44(1)(a)

 

What are my rights under the DPA?

You have the following rights under the DPA:

• Right of access to your personal data
• Right of rectification of your personal data
• Right of erasure of your personal data or the restriction of its processing
• Right to lodge a complaint with the Information Commissioner

Full details of those rights and how to exercise them can be found in the force’s high-level Privacy Notice.

Section 44(1)(d)(i)
Section 45
Section 44(1)(d)(ii)
Section 46
Section 44(1)(d)(iii)
Section 47
Section 44(1)(e)
Section 51

 

Is there any other information that is necessary to enable me to exercise any rights listed above?

Non identified.

Section 44(2)(d)
Section 44(3)(a)

 

What is Essex Police's legal basis for processing my personal data?

Essex Police’s legal basis for processing your personal data is based on its Common Law Policing Purpose of protecting life and property, preserving order, preventing the commission of offences, bringing offenders to justice, and any duty or responsibility of the police arising from common or statute law.

Specifically, where Essex Police is processing data for law enforcement purposes, then the legal basis for processing is provided in section 35(2),(3),(5) and schedule 8(1),(3),(4) of the Data Protction Act 2018.

Where Essex Police is processing data for a generate purpose then the legal basis is provided in Article 6(1)(e), Article 9(20)(g) or the UK-GDPR and s. 18 of Schedule 1 of the Data Protection Act 2018.

Section 44(2)(a)
Section 35(2)

 

How long will my personal data be retained by Essex Police?

Images within our source systems will be retained in line with Management of Police Information (MoPI) guidance and our organisation retention schedule.

LFR watchlists will be retained only for the duration of the deployment and for an appropriate time prior to and following deployment and only to facilitate the need.

Specific timescales will be outlined in the deployment documentation but where possible watchlists should not be older than 24 hours at the point deployment starts and should not be retained for longer than 24 hours following conclusion of the deployment.

CCTV footage recorded throughout deployment will be retained for 31 days and disposed of
in line with force policy unless retention is required to meet the needs of further
investigation for example.

Section 44(2)(b)

 

Who could Essex Police disclose my personal data to?

Essex Police will not routinely share your Live Facial Recognition personal data except where we are required to do so to meet the needs of the purposes laid out.

Section 44(2)(c)