More information on how we do this can be found in the relevant DBS Privacy Policy
However, if you use another organisation to pass us your data, like a Registered Body (RB) or a potential or current employer, then until they pass the information to us, they are the data controller.
They are responsible for your data until it is passed to us, and they should issue their Privacy Policy to show you how they will be responsible for your data.
There are other organisations that DBS may choose to process data on our behalf, for example an organisation that provides our computer systems. These are known as data processors. We are still responsible for your data, while we use data processors so we will have checked that any data processors are providing the same level of protection to your data, as we do.
Any organisation that works on behalf of the DBS as a data processor are also accountable and bound by Data Protection legislation.