[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-174798-105":53,"doc-detail-174798-en":127},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":120,"head_meta":122,"extra_data":124,"updated_unix":126},105,"en","data-protection-general-guidance-for-congregations","Data Protection General Guidance for Congregations","","Guidance outlines the main provisions of UK data protection laws for congregations following the GDPR and the UK Data Protection Act 2018. It explains key concepts including personal data, processing, controllers, and processors, clarifying what types of information can be personal data and how records may be held in both electronic and paper systems. It also addresses special category data and related handling, the data protection principles, data subject rights, breach response procedures, the role of Data Protection Officers, and registration with the UK Information Commissioner’s Office.",{"@graph":63,"@context":119},[64,80,102],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":41,"@type":70,"position":76},"https://docshare.wps.com/template/letters/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/data-protection-general-guidance-for-congregations/174798/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/data-protection-general-guidance-for-congregations/174798.png","ImageObject",442,249,{"name":88,"@type":89},"Aditya","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/vnd.openxmlformats-officedocument.wordprocessingml.document","2026-10-19","2026-09-02",true,{"@type":98,"interactionType":99,"userInteractionCount":101},"InteractionCounter",{"@type":100},"ViewAction",9,{"@type":103,"mainEntity":104},"FAQPage",[105,111,115],{"name":106,"@type":107,"acceptedAnswer":108},"What laws does this guidance focus on for congregations?","Question",{"text":109,"@type":110},"It covers the EU General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018 (DPA), explaining the UK’s approach to maintaining equivalent privacy standards under the revised UK GDPR.","Answer",{"name":112,"@type":107,"acceptedAnswer":113},"What counts as personal data in this guidance?",{"text":114,"@type":110},"Personal data is any information relating to an identified or identifiable natural person, including data that can identify someone directly or indirectly. It includes identifiers such as names, identification numbers, location data, online identifiers (e.g., IP addresses), and certain physical, biometric, or genetic data, as well as clear digital photographs and videos.",{"name":116,"@type":107,"acceptedAnswer":117},"What do congregations need to know about data subject rights?",{"text":118,"@type":110},"The guidance lists key rights such as the right to be informed, access, rectification, erasure (“right to be forgotten”), restriction, data portability, and the right to object. It also includes rights related to automated individual decision-making, including profiling.","https://schema.org",{"og:url":78,"og:type":121,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":123,"canonical":78},"index,follow",{"doc_id":125,"site_id":56},174798,1788316555,{"code":4,"msg":5,"data":128},{"doc_id":125,"user_id":129,"nickname":88,"user_avatar":130,"doc_module":9,"category_id":40,"category_name":41,"doc_title":59,"doc_description":61,"doc_content":131,"file_id":132,"file_url":133,"file_type":134,"file_size":135,"view_count":101,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":40,"language":136,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":137,"faqs":138,"seo_title":139,"seo_description":61,"update_tm":126,"read_time":140},962085564549,"https://ap-avatar.wpscdn.com/davatar_085a072bc5b1113ac321206ff7593b45","Data Protection General Guidance for Congregations\n\u0003Contents\n\u0013 TOC \\o \"1-3\" \\h \\z \\u \u0014\u0013 HYPERLINK \\l \"_Toc144717584\" \u0014Data Protection General Guidance for Congregations\t\u0013 PAGEREF _Toc144717584 \\h \u00141\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc144717585\" \u00141.\tIntroduction\t\u0013 PAGEREF _Toc144717585 \\h \u00142\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc144717586\" \u00142.\tThe Key Definitions\t\u0013 PAGEREF _Toc144717586 \\h \u00142\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc144717587\" \u00143.\tSpecial category data\t\u0013 PAGEREF _Toc144717587 \\h \u00143\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc144717591\" \u00143.1.\tHow should special category data be handled?\t\u0013 PAGEREF _Toc144717591 \\h \u00144\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc144717596\" \u00143.2.\tHow should data be handled for the purpose of the inspection of records?\t\u0013 PAGEREF _Toc144717596 \\h \u00145\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc144717597\" \u00144.\tThe Data Protection Principles\t\u0013 PAGEREF _Toc144717597 \\h \u00145\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc144717598\" \u0014Principle 1 - Lawfulness, fairness and transparency\t\u0013 PAGEREF _Toc144717598 \\h \u00146\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc144717599\" \u0014Principle 2 - Purpose limitation\t\u0013 PAGEREF _Toc144717599 \\h \u00148\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc144717600\" \u0014Principle 3 – Data minimisation\t\u0013 PAGEREF _Toc144717600 \\h \u00148\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc144717601\" \u0014Principle 4 – Accuracy\t\u0013 PAGEREF _Toc144717601 \\h \u00149\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc144717602\" \u0014Principle 5 – Storage limitation\t\u0013 PAGEREF _Toc144717602 \\h \u00149\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc144717603\" \u0014Principle 6 – Integrity and confidentiality\t\u0013 PAGEREF _Toc144717603 \\h \u001410\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc144717604\" \u0014Principle 7 – Accountability\t\u0013 PAGEREF _Toc144717604 \\h \u001411\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc144717605\" \u00145.\tData Subjects Rights Under Data Protection\t\u0013 PAGEREF _Toc144717605 \\h \u001412\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc144717611\" \u00145.1.\tThe right to be informed\t\u0013 PAGEREF _Toc144717611 \\h \u001412\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc144717612\" \u00145.1.\tThe right of access\t\u0013 PAGEREF _Toc144717612 \\h \u001414\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc144717613\" \u00145.2.\tThe right to rectification\t\u0013 PAGEREF _Toc144717613 \\h \u001414\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc144717615\" \u00145.3.\tThe right to erasure - “right to be forgotten”\t\u0013 PAGEREF _Toc144717615 \\h \u001414\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc144717616\" \u00145.4.\tThe right of restriction\t\u0013 PAGEREF _Toc144717616 \\h \u001415\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc144717617\" \u00145.5.\tRight to data portability\t\u0013 PAGEREF _Toc144717617 \\h \u001415\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc144717618\" \u00145.6.\tThe right to object\t\u0013 PAGEREF _Toc144717618 \\h \u001415\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc144717630\" \u00145.7.\tRight to be informed of automated individual decision making, including profiling\t\u0013 PAGEREF _Toc144717630 \\h \u001415\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc144717631\" \u00146.\tData Security Breach Procedure\t\u0013 PAGEREF _Toc144717631 \\h \u001416\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc144717632\" \u00147.\tData Protection Officers (DPO)\t\u0013 PAGEREF _Toc144717632 \\h \u001418\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc144717633\" \u00148.\tRegistration with the UK Information Commissioner’s Office (ICO)\t\u0013 PAGEREF _Toc144717633 \\h \u001418\u0015\u0015\n\u0015\u0004\n\u000f\nIntroduction\nThe right to privacy is a fundamental right, enshrined in the European Convention on Human Rights. There have been data protection laws in place for some time, the most recent change being the introduction of the EU General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018 (DPA). Even though the UK is no longer a member of the EU, the UK Government has legislated to ensure the DPA and the revised UK GDPR will maintain equivalent high standards of protecting individuals’ rights under privacy laws. This guidance provides congregations an overview of the main provisions of data protection laws. Further guidance, a set of FAQs and styles relating to specific areas where policies or procedures are required under law, are also available for use by congregations and Presbyteries.\nThe Key Definitions\nBefore looking at the key data protection principles which have underpinned data protection laws for a number of years, it is worth reviewing the key definitions in the law. These are:\n‘Personal data’\n‘Processing’\n‘Controller’\n‘Processor’\nPersonal data This is defined as: “any information relating to an identified or identifiable natural person (called a “data subject”); an ","cbCaij1hK8Z2ZwsS","https://ap.wps.com/l/cbCaij1hK8Z2ZwsS","docx",122162,"English","# Introduction\n# The Key Definitions\n## Personal data\n## Processing\n## Controller and Processor\n# Special category data\n## How special category data should be handled?\n## Data for inspection of records\n# The Data Protection Principles\n## Lawfulness, fairness and transparency\n## Purpose limitation\n## Data minimisation\n## Accuracy\n## Storage limitation\n## Integrity and confidentiality\n## Accountability\n# Data Subjects Rights Under Data Protection\n## Right to be informed\n## Right of access\n## Right to rectification\n## Right to erasure\n## Right to restriction\n## Right to data portability\n## Right to object\n## Automated decision making and profiling\n# Data Security Breach Procedure\n# Data Protection Officers (DPO)\n# Registration with the UK Information Commissioner’s Office (ICO)","[{\"question\":\"What laws does this guidance focus on for congregations?\",\"answer\":\"It covers the EU General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018 (DPA), explaining the UK’s approach to maintaining equivalent privacy standards under the revised UK GDPR.\"},{\"question\":\"What counts as personal data in this guidance?\",\"answer\":\"Personal data is any information relating to an identified or identifiable natural person, including data that can identify someone directly or indirectly. It includes identifiers such as names, identification numbers, location data, online identifiers (e.g., IP addresses), and certain physical, biometric, or genetic data, as well as clear digital photographs and videos.\"},{\"question\":\"What do congregations need to know about data subject rights?\",\"answer\":\"The guidance lists key rights such as the right to be informed, access, rectification, erasure (“right to be forgotten”), restriction, data portability, and the right to object. It also includes rights related to automated individual decision-making, including profiling.\"}]","Data Protection General Guidance for Congregations | DOCX",6]