British Horseracing Authority

1st4sport Qualifications Position Statement

Data Protection and Record Retention

1st4sport Qualifications Position Statement 

Data Protection and Record Retention

Scope

This position statement will provide details of how 1st4sport Qualifications will protect the stakeholder’s personal details while retaining and maintaining records. It therefore applies to 1st4sport staff, development partners, external quality assurers, recognised centres, learners and relevant third parties.  

1st4sport Qualifications operates under the Coachwise Ltd overarching Data Protection Policy and the Group Privacy Position.

This Position Statement should be read in conjunction with the 1st4sport Qualifications Scope of Recognition Statement. 

Objective 

The objective of this position statement is to provide details of 1st4sport Qualification’s process for retaining personal records and how 1st4sport Qualifications protects such records. It covers the following areas: 

• Definitions of Data Protection and Record Retention

• 1st4sport Qualifications process for the management of data

• Data Protection Principles

Definition

Data protection is commonly defined as the law designed to protect personal information, which is collected, processed and stored by “automated” means or intended to be part of a filing system. The General Data Protection Regulation (GDPR) and Data Protection Act (2018) is used to control personal information and to protect people’s records from abuse.

Record Retention prescribes requirements for the length of time a personal record must be retained and the appropriate means of disposal at the end of its lifecycle. Retention of records requirements may be driven by legislation, regulation, policy, legal precedent, best practice, or agreement with a third party.

1st4sport Qualifications Process for the management of data

Below is the process which is followed by 1st4sport Qualifications, when processing stakeholder’s records. 

Data Protection Principles

1st4sport Qualifications adheres to the principles of data protection as stated in the GDPR and Data Protection Act (2018). In accordance with these principles, personal data shall be:

• used fairly and lawfully.

• processed for specified purpose only.

• used in a way that is adequate, relevant and not excessive.

• accurate and up to date.

• not kept longer than necessary.

• handled according to people’s data protection rights.

• kept safe and secure.

Version control