Taxi Policy - Appendix B - Policy in respect of requests for information, disclosure of information and use of information as a result of an entry of NR3

Overarching Principals

This policy covers the use that Preston City Council will make of the ability to access and use information contained on the National Register of Taxi Licence Revocations and Refusals (NR3).

In this policy, the 'first authority' refers to a licensing authority which made a specific entry onto the National Register of Refusals and Revocations; the 'second authority' refers to a licensing authority which is seeking more detailed information about the entry.

The NR3 contains information relating to any refusal to grant, or revocation of, a taxi drivers' licence. This information is important in the context of a subsequent application to another Authority for a drivers' licence by a person who has had their licence refused or revoked in the past.

Preston City Council has signed up to the NR3.

What this means

This means that when an application for a taxi drivers' licence is refused, or when an existing taxi drivers' licence is revoked, that information will be placed upon the register.

When an application for a new drivers' licence, or renewal of an existing drivers' licence is received, we will make a search of the NR3. The search will only be made by an officer who has been trained in the use of the NR3 and who is acting in accordance with this policy. If details are found that appear to relate to the applicant, a request will be made to the authority that entered that information for further details. Any information that is received from any other authority in relation to an application will only be used in relation to that application, and the determination of it, and will not be used for any other purpose. Any data that is received will only be kept for as long as is necessary in relation to the determination of that application. This will include the period of processing that application, deciding, notifying the applicant of the outcome of that decision, and the appeal processes. For the avoidance of doubt, any such data will be kept for a period of no more than 35 days from the date of the service of the written notification of the determination of the application.

Where an appeal to the magistrates' court is made, the data will be retained until that appeal is determined or abandoned. Where the appeal is determined by the magistrates' court, there is a further right of appeal to the Crown Court. In these circumstances, the data will be retained for a period of no more than 35 days from the date of the decision of the magistrates' court. If an appeal is made to the Crown Court, the data will be retained until that appeal is determined or abandoned. Where the appeal is determined by the magistrates' court or the Crown Court, it is possible to appeal the decision by way of case stated. Accordingly, the data will be retained for a period of no more than 35 days from the date of the decision of the Crown Court (if the decision was made by the magistrates' court, the retention period has already been addressed). If an appeal by way of case stated is made, the data will be retained until all court proceedings relating to that appeal by way of case stated (which will include potential appeals to the Court of Appeal and Supreme Court) have been determined.

The data will be held securely in accordance with this Authority's general policy on the secure retention of personal data. At the end of the retention period, the data will be erased and/or destroyed in accordance with this Authority's general policy on the erasure and destruction of personal data.

Making a request for further information regarding an entry on NR3

When an application is made to Preston City Council for the grant of a new, or renewal of, a taxi driver's licence, this authority will check the NR3. We will make and then retain a clear written record of every search that is made of the register. This will detail:

the date of the search
the name or names searched
the reason for the search (new application or renewal)
the results of the search; and
the use made of the results of the search (this information will be entered to the register later)

This record will not be combined with any other records (i.e., combined with a register of licences granted) and will be retained for the retention period of 25 years.

If Preston City Council discovers any match (i.e. there is an entry in the register for the same name and identifying details) a request will be made to the authority that entered those details (the first authority) for further information about that entry. That request will also include details of this authority's data protection policy in relation to the use of any data that is obtained because of this process. This request will be made in writing. It will be posted or emailed to the contact address of the authority that entered those details (the first authority) which will be detailed in the register.

Responding to a request made for further information regarding an entry on NR3

When this Authority receives a request for further information from another authority a clear written record will be made of the request having been received. This record will not be combined with any other records (i.e. combined with a register of licences granted) and will be retained for the retention period of 25 years. We will then determine how to respond to the request. It is not lawful to simply provide information as a blanket response to every request.

The Authority will conduct a Data Protection Impact Assessment. This will consider how the other Authority (the second Authority) will use the data, how it will store that data to prevent unauthorised disclosure, the retention period for that data, and the mechanism for erasure or destruction of the data at the end of that period. It is expected that if the second Authority has adopted a policy like this, that should be a reasonably straightforward process. If Preston City Council is satisfied that the other Authority's (the 2nd Authority) data protection procedures are satisfactory, consideration will then be given as to what information will be disclosed. This will be determined by an officer who has been trained to discharge this function. Any disclosure must be considered and proportionate, considering the data subjects' rights and the position and responsibilities of a taxi driver.

Data is held on the NR3 register for a period of 25 years, but Preston City Council (the 1st Authority) will not disclose information relating to every entry. Each application will be considered on its own merits. This Authority will disclose information relating to a revocation or refusal to grant a drivers' licence in accordance with the timescales contained within its Guidance on Relevance of Convictions (Appendix A).

Where the reason for refusal to grant or revocation relates to a conviction (or similar as defined in Appendix A) which is within the timescales determined in those guidelines, the information will be disclosed. Where the reason for refusal to grant or revocation relates to a conviction (or similar as defined in Appendix A) outside the timescales determined in those guidelines, the information will not be disclosed. However, in every case, consideration will be given to the full circumstances of the decision and there may be occasions where information is provided other than in accordance with this policy.

Any information about convictions will be shared in accordance with this policy under part 2 of scheduled 1 to the Data Protection Act (DPA) 2018; that is, the processing is necessary for reasons of substantial public interest in connection with the exercise of a function conferred on the Authority by an enactment or rule of law.

The officer will record what action was taken and why. The Authority will make and then retain a clear written record of every decision that is made as a result of a request from another Authority.

This will detail:

the date the request was received
how the data protection impact assessment was conducted and its conclusions
the name or names searched
whether any information was provided
if information was provided, why it was provided (and details of any further advice obtained before the decision was made)
if information was not provided, why it was not provided (and details of any further advice obtained before the decision was made) and
how and when the decision (and any information) was communicated to the requesting authority

This record will not be combined with any other records (i.e. combined with a register of licences granted) and will be retained for the retention period of 25 years.

Using any information obtained as a result of a request to another Authority

When the Authority receives information as a result of a request that has been made to another Authority, it will take that information into account when determining the application for the grant or renewal of a taxi drivers' licence. This will be in accordance with the usual process for determining applications; assessment will take place against the Authority's definition of fit and proper person. This Authority will make and then retain a clear written record of the use that is made of the results of the search (this information will be added to the register detailed above). Information that is received may warrant significant weight being attached to it, but it will not be the sole basis for any decision that this Authority will make in relation to the application.