Disclosure & Barring Service Logo

Who is responsible for my personal information?

When your data is passed to us then the DBS are the data controller for the information, we hold about you. That means we are responsible for your data, and we should ensure that we protect your data, only use your data for the purpose it is collected and we store your data for an appropriate and lawful amount of time.

More information on how we do this can be found in the relevant DBS Privacy Policy

However, if you use another organisation to pass us your data, like a Registered Body (RB) or a potential or current employer, then until they pass the information to us, they are the data controller.

They are responsible for your data until it is passed to us, and they should issue their Privacy Policy to show you how they will be responsible for your data.
There are other organisations that DBS may choose to process data on our behalf, for example an organisation that provides our computer systems. These are known as data processors. We are still responsible for your data, while we use data processors so we will have checked that any data processors are providing the same level of protection to your data, as we do.

Any organisation that works on behalf of the DBS as a data processor are also accountable and bound by Data Protection legislation.