GENERAL DATA PROTECTION REGULATION
A current or past member or parent/guardian may ask for their data to be disclosed to them – this is a Subject Access Request SAR Please follow the link below and the Croydon data controller will compile the data we hold and return to you within 30 days.
PLEASE NOTE we are unable to return data regarding DBS, The Scout Association does not hold or process this data. A SAR must be submitted to the Atlantic DBS service.
It may occur that personal data is disclosed externally accidentally or removed from the Scout Group, District, County, Area, Region or Country via malicious means.
In the event of a breach, via malicious means or through accidental disclosure, you are obligated to do the following:
• report the breach to the DPO – Richard Goad.
• complete an ICO data protection breach notification form – Here