Why we process your personal information:

ACRO has been designated as the United Kingdom Central Authority for the Exchange of Criminal Conviction information with both EU and Non-EU countries. ACRO manages the United Kingdom's Criminal Record Information System (UK-CRIS), which exchanges conviction information with European Union (EU) Member States who operate the European Criminal Record Information System (ECRIS). This responsibility is designated by the Home Secretary to the Chief Constable of our host force, who delegates it to the Chief Executive Officer (CEO) of ACRO.
Outside the EU, we exchange criminal conviction information with non-EU Interpol countries via Interpol Channels and other intelligence systems used by specific countries.

What does this mean for you?

For UK Nationals:


Notifications In – EU Member states will notify ACRO, as the UK Central Authority, through UK-CRIS of criminal conviction information of when you have come to notice in their country and have been convicted of a criminal offence. For the Non-European countries Norway, Switzerland, USA, Bermuda and the British Caribbean Overseas Territories, they will exchange with ACRO, as the UK Central Authority,  through shared intelligence systems of criminal conviction information when you have come to notice in their country and have been convicted of a criminal offence. The conviction information will then be reviewed, if the foreign offence has an equivalent offence in England & Wales which is deemed “recordable”, ACRO will add the information from the notification to the Police National Computer (PNC).

Requests In – If you as a UK national come to notice in a foreign country, an EU Member states Central Authority or Interpol NCB or other judicial department will request your UK offending history to assist in criminal matters in that country. Checks will be made based on information provided by that country against UK Criminal Registers and any relevant information will be disclosed.
This is also applicable to requests for non-criminal proceedings and in other cases where permission has been granted by the subject of the request. The purpose for which the data is requested with affect the level of disclosure of conviction information stored on the Police National Computer.

Request Out – If you come to notice to UK Police Forces as a suspect, witness or victim, and the Force have reason to believe you may hold convictions in a foreign country, we will send a request to the country for your criminal conviction history as held on their national criminal database. This information will then be shared to the officer requesting the information.
Additionally, requests will also be sent for various purposes other than criminal proceedings including where the permission has been granted by the individual. This may return a limited conviction history based on the receiving countries’ national weeding and retention guidelines. The details contained in a response to a request can only be used for the purposes for which it was requested.

Notifications Out – If as a UK National you also hold nationality of another country and are convicted of a criminal offence in the UK, ACRO will process a criminal conviction notification and transmit this to countries for which you are held as a national in order for that information to be handled, stored and used in accordance with its national legislation.

For Foreign Nationals:

Requests Out – If you come to notice to UK Police Forces as a suspect, witness or victim, the Police Force will submit a criminal conviction request to your country of nationality for your criminal conviction history as held on their national criminal database. This information will then be shared to the officer requesting the information.
Additionally, requests will also be sent for various purposes other than criminal proceedings including where the permission has been granted by the individual. This may return a limited conviction history based on the receiving countries’ national weeding and retention guidelines. The details contained in a response to a request can only be used for the purposes for which it was requested.

Notifications Out – If you come to notice to UK Police Forces and are convicted in the UK of a criminal offence, ACRO will process a criminal conviction notification and transmit this to your country of nationality in order for that information to be handled, stored and used in accordance with its national legislation.

Requests In – There are occurrences whereby foreign EU Member states as well as Interpol Central Bureaus (NCB) or other judicial department will request criminal conviction information held in the UK for foreign nationals that have come to notice. Where applicable, we will disclose any UK offending history.

How we shared your data:
We recognise that some countries with which it is necessary to share information do not always have equivalent laws that protect individuals’ rights and freedoms as extensively as the United Kingdom and Europe. If we do transfer personal information to such countries, we seek to ensure that there are appropriate safeguards in place to make sure the data is adequately protected as required by our own legislation, and we actively risk assess each country and provide only the information necessary to meet the task. Information is further filtered or omitted if legal and cultural differences mean the data subject is at an unacceptable risk of a harm which would not be lawful in the UK (e.g. by discrimination). In special circumstances, a decision to transfer specific information for the law enforcement purpose may be made in the absence of appropriate safeguards.
The information we share with EU member states via UK-CRIS/ECRIS as well as Interpol and other shared intelligence systems are transmitted via secure channels. We will only provide necessary information in order to make a successful subject match. The personal date we will transmit will include:
 
  • Full name(s)
  • Date of birth
  • Place of birth
  • Nationality
  • Gender
  • Parents’ names
  • UK addresses
  • Foreign addresses
  • National identity numbers
  • Passport numbers
  • Other identity number (where applicable)
  • UK Policing database reference numbers
  • Alias names
  • Alias dates of birth
  • Alias places of birth
  • Conviction information (date of conviction, name of the court, date on which the decision became final)
  • Additional conviction information (date of the offence underlying the conviction and name or legal classification of the offence as well as reference to the applicable legal provisions, notably the sentence as well as any supplementary penalties, security measures and subsequent decisions modifying the enforcement of the sentence).
When required, we will also exchange fingerprints (sensitive data) and custody images stored on our national criminal register in order to confirm the identity of the subject. This is a limited process and we will only retain the fingerprints and images for as long a necessary and will be removed as required.

How we store your information:
Criminal convictions for UK Nationals that meet the criteria for creation of a record on the Police National Computer (PNC) are retained until the data subject is 100 years of age. 
Criminal convictions for foreign nationals are assessed against the Home Office Serious Offence List (HOSOL). These guidelines allow us to assess the serious and immediate risk a foreign national may pose to UK Police Forces and the UK public. Any qualifying offences will be added to the Police National Computer and retained in accordance with national guidelines.


Disputes:

If you believe that ACRO holds inaccurate or incorrect foreign conviction information about you then you can apply to have the information reviewed by the ACRO International Disputes Team. Any requests should be directed to the ACRO International Disputes team:
(acro.international.disputes@acro.pnn.police.uk).