Criminal record data (official or authority-certified data on criminal investigation, prosecution or punishment, final or not) may be collected for employment or fitness-for-position decisions, qualification checks for licences by authorities or those acting for them, and other qualification checks, with explicit consent or another legal basis. The data subject must be told from the recruitment stage that a check will be made and, where consent is sought, of the effect of refusing or withdrawing. After use the data may be kept for no more than six months unless a specific law, another section 26 basis or explicit consent allows longer; otherwise it is erased, destroyed or anonymised. Security must meet the section 37(1) minimum standard.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.