Lancashire League Handbook 2023

GENERAL CONDUCT REGULATIONS FOR RECREATIONAL CRICKET 2023 You will probably be able to think of many more purposes for which you will process personal data. The important thing is that you have to set out all purposes in the privacy notice. GN7 (LEGAL BASIS) This point is a little more complicated to explain that the others so it is important that you read this Guidance Note very carefully. The law sets out the potential legal bases for processing personal data. The options differ depending on the nature of the personal data. Most personal data is ‘ordinary’ personal data but some categories are designated as ‘special category data’ or ‘sensitive personal data’. Special category data includes things like medical information, race or ethnicity, sexual orientation. You can find a list of special category data in Article 9 of the UK GDPR. There are many legal bases for processing personal data. Some examples that may be relevant are: FOR ORDINARY PERSONAL DATA • Consent of the individual • The processing is necessary for performing a contract to which the individual is subject • The processing is necessary for compliance with a legal obligation to which the organisation is subject • The processing is necessary for the purposes of the legitimate interests of the organisation (or someone else) and those interests are not overridden by the rights and freedoms of the individual (note if you rely on this legal basis – you must specify what your legitimate interest is) FOR SPECIAL CATEGORY DATA • Explicit consent of the individual • The processing is necessary to protect the vital interests of the individual • The processing relates to personal data that are manifestly made public by the individual • The processing is necessary for the establishment, exercise of defence of legal claims • The processing is necessary to comply with the law or is necessary for the purposes of equality of opportunity • The processing is necessary for the purposes of preventative or occupational medicine or the provision of health care • The processing is necessary for measures to protect the integrity of sport or a sporting event and must be carried out without consent of the individual There are many other legal bases and you should consult Articles 6 and 9 of the UK GDPR and Schedule 1 Part 2 of the Data Protection Act 2018 to see which ones apply. GN8 (WHO WE MAY DISCLOSE YOUR PERSONAL DATA TO) You will need to specify who you will share personal data with. Where you can provide a name you should do so (for example, you may state that your share particular categories with the ECB) but you could list categories of recipient (for example, with leagues in which the player participates).