 you need to consider Part 3 of the Data Protection Act 2018. Part 3, Chapter 2 of the Data 27 data sharing code of practice 28 data sharing information hub 29 The principles | ICO 30 Scope and key definitions | ICO 22 Protection Act 2018 sets out six key principles which are your main responsibilities when processing personal information for the law enforcement purposes. The principles are broadly the same as those in the UK GDPR and are compatible. The rights of individuals You should always check your local data protection policies and procedures or contact your Data Protection lead if an individual has asked you to delete their data. The UK GDPR gives individuals specific rights over their personal data (or information). In summary an individual’s rights are: • the right to access personal data held about them (the right of subject access) • the right to be informed about how and why their data is used – a Privacy Notice details privacy information • the right to have data rectified, erased or restricted • the right to object • the right to portability of data; and • the right not to be subject to a decision based solely on automated processing Further information can be found on the ICO’s website31 and you should seek legal advice when these rights may or may not apply to your particular case. 31 A guide to individual rights | ICOhttps://ico.org.uk/for-organisations/guide-to-data- protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/ 23 Data protection definitions Consent Consent is one of the lawful bases for processing personal information under Article 6 and article 9 of the UK GDPR. Consent is not generally the most appropriate lawful basis to rely on when sharing information for safeguarding or child welfare purposes. The UK GDPR s