¶ 1
Leave a comment on paragraph 1 0
21.1 The Community shall comply with all applicable data protection legislation, including
the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and
any successor legislation, in relation to all personal data it holds about members, managers,
and officers.
¶ 2
Leave a comment on paragraph 2 0
21.2 The Executive shall designate a named officer — ordinarily the COO — as the Data
Protection Lead responsible for overseeing the Community’s compliance with data protection
obligations. The Data Protection Lead shall be identified in Appendix C and reported to
members at the AGM.
¶ 3
Leave a comment on paragraph 3 0
21.3 The Community shall maintain a Privacy Policy, published on its website, setting out
how personal data is collected, used, stored, and protected. The Privacy Policy shall be
reviewed at least annually and updated whenever there is a material change in the
Community’s data processing activities or applicable law.
¶ 4
Leave a comment on paragraph 4 0
21.4 Members’ personal data shall be used only for the purposes of administering their
membership and communicating with them about Community activities. Personal data shall
not be sold, rented, or otherwise disclosed to third parties without the member’s explicit
consent, except where required by law.
¶ 5
Leave a comment on paragraph 5 0
21.5 Members have the right to access the personal data held about them, to request
corrections, and (subject to legal obligations) to request deletion of their data, in accordance
with their rights under applicable data protection legislation. Such requests shall be directed
to the Data Protection Lead and responded to within the timeframes required by law.
¶ 6
Leave a comment on paragraph 6 0
21.6 In the event of a personal data breach, the Data Protection Lead shall assess the
breach, take appropriate remedial action, and notify affected members and the Information
Commissioner’s Office as required by law.
