Citation and commencement

1.  These Regulations may be cited as the Coronavirus (Retention of Fingerprints and DNA Profiles in the Interests of National Security) Regulations 2020 and come into force on the day after the date on which they are made.

Extension of the effect of a national security determination

2.—(1) Paragraph (3) applies in respect of fingerprints or DNA profiles that satisfy the condition in paragraph (2).

(2) The condition is that the fingerprints or DNA profiles are retained in accordance with a national security determination that will (ignoring the effect of these Regulations) cease to have effect during the period of 6 months starting with the date on which these Regulations come into force.

(3) The retention of the fingerprints or DNA profiles under the national security determination may continue for a further period of 6 months starting with the date on which the national security determination would otherwise have ceased to have effect.

Extension of a current statutory retention period

3.—(1) Paragraph (4) applies in respect of fingerprints or DNA profiles that satisfy the conditions in paragraphs (2) and (3).

(2) The first condition is that the fingerprints or DNA profiles are retained—

(a)under any of the following provisions—

(i)paragraph 20B(3) or paragraph 20C(3) of Schedule 8 to the Terrorism Act 2000 (retention of paragraph 20A material)(2);

(ii)section 18A(1) of the Counter-Terrorism Act 2008 (retention of section 18 material)(3);

(iii)paragraph 8(2) of Schedule 6 to the Terrorism Prevention and Investigation Measures Act 2011 (retention of paragraph 6 material)(4), or

(b)under section 63F(3) of the Police and Criminal Evidence Act 1984 (retention of section 63D material)(5) if the fingerprints or DNA profiles satisfy the national security retention condition (see regulation 5).

(3) The second condition is that the final day of the period for which the fingerprints or DNA profiles may be retained (“the retention period”) will (ignoring the effect of these Regulations) fall on a date during the period of 6 months starting with the date on which these Regulations come into force.

(4) The retention of the fingerprints or DNA profiles may continue for a further period of 6 months starting with the date on which the final day of the retention period would otherwise have fallen.

Retention in advance of a requirement to destroy

4.—(1) Paragraph (4) applies in respect of fingerprints or DNA profiles that satisfy the conditions in paragraphs (2) and (3).

(2) The first condition is that the fingerprints or DNA profiles satisfy the national security retention condition (see regulation 5).

(3) The second condition is that the fingerprints or DNA profiles must (ignoring the effect of these Regulations) be destroyed under any of the following provisions during the period of 6 months starting with the date on which these Regulations come into force—

(a)section 18(3) of the Criminal Procedure (Scotland) Act 1995 (destruction of relevant physical data)(6);

(b)Article 64(3), 64ZB(2), 64ZC(3), 64ZD(3), 64ZE(3), 64ZF(3), 64ZG(3) or 64ZH(3) of the Police and Criminal Evidence (Northern Ireland) Order 1989 (destruction of fingerprints and samples)(7).

(4) The fingerprints or DNA profiles may be retained for a further period of 6 months starting with the date on which the requirement to destroy the fingerprints or DNA profiles would otherwise have arisen.

National security retention condition

5.—(1) For the purposes of regulations 3 and 4, fingerprints or DNA profiles satisfy the national security retention condition if, prior to these Regulations coming into force, the controller of the fingerprints or DNA profiles has been notified by a constable or a member of the civilian staff of a police force that the fingerprints or DNA profiles may be relevant to the interests of national security.

(2) For the purposes of paragraph (1) notification may be given in any form.

(3) In this regulation—

(a)“controller” is to be construed in accordance with Part 3 of the Data Protection Act 2018(8); and

(b)“police force” means a police force in England & Wales, the Police Service of Scotland or the Police Service of Northern Ireland.

EXPLANATORY NOTE

(This note is not part of the Regulations)

These Regulations provide for extension of the time limits that apply to the retention of certain fingerprints or DNA profiles. The Regulations apply in respect of fingerprints or DNA profiles that are retained under certain counter-terrorism provisions, or that may otherwise be relevant to the interests of national security.

Regulation 2 makes provision in respect of fingerprints or DNA profiles that are retained in accordance with a national security determination, if that national security determination would otherwise cease to have effect within the period of 6 months from the date on which these Regulations come into force. Paragraph (3) provides for the continued retention of fingerprints or DNA profiles under the national security determination for a further period of 6 months.

Regulation 3 makes provision in respect of fingerprints or DNA profiles that are retained under a statutory retention period, if the final day of the retention period is due to fall within the period of 6 months from the date on which these Regulations come into force. Paragraph (4) provides that the fingerprints or DNA profiles may be retained under that retention period for a further period of 6 months.

Regulation 4 makes provision in respect of fingerprints or DNA profiles that are currently retained and in respect of which a requirement to destroy would arise under certain provisions, within the period of 6 months from the date on which these Regulations come into force. Paragraph (3) provides that the fingerprints or DNA profiles may be retained for a further period of 6 months.

Regulation 5 provides the meaning of the national security retention condition, which is used in regulations 3 and 4. It provides that fingerprints or DNA profiles are retained in the interests of national security if a constable or a civilian staff member of a police force has notified the controller of the fingerprints and DNA profiles that they may be relevant to the interests of national security. Such notification may be given in any form but must have been given prior to these Regulations coming into force. For the purposes of regulation 5 a controller has the meaning given by Part 3 of the Data Protection Act 2018.

A full impact assessment has not been produced for this instrument as no, or no significant, impact on the private, voluntary or public sector is foreseen.