The Coronavirus (Retention of Fingerprints and DNA Profiles in the Interests of National Security) Regulations 2020

• Citation: S.I. 2020/391
• Sections: 5

Section 1 Citation and commencement

These Regulations may be cited as the Coronavirus (Retention of Fingerprints and DNA Profiles in the Interests of National Security) Regulations 2020 and come into force on the day after the date on which they are made.

Section 2 Extension of the effect of a national security determination

(1) Paragraph (3) applies in respect of fingerprints or DNA profiles that satisfy the condition in paragraph (2).

(2) The condition is that the fingerprints or DNA profiles are retained in accordance with a national security determination that will (ignoring the effect of these Regulations) cease to have effect during the period of 6 months starting with the date on which these Regulations come into force.

(3) The retention of the fingerprints or DNA profiles under the national security determination may continue for a further period of 6 months starting with the date on which the national security determination would otherwise have ceased to have effect.

Section 3 Extension of a current statutory retention period

(1) Paragraph (4) applies in respect of fingerprints or DNA profiles that satisfy the conditions in paragraphs (2) and (3).

(2) The first condition is that the fingerprints or DNA profiles are retained—

(a) under any of the following provisions—

(i) paragraph 20B(3) or paragraph 20C(3) of Schedule 8 to the Terrorism Act 2000 (retention of paragraph 20A material) ;

(ii) section 18A(1) of the Counter-Terrorism Act 2008 (retention of section 18 material) ;

(iii) paragraph 8(2) of Schedule 6 to the Terrorism Prevention and Investigation Measures Act 2011 (retention of paragraph 6 material) , or

(b) under section 63F(3) of the Police and Criminal Evidence Act 1984 (retention of section 63D material) if the fingerprints or DNA profiles satisfy the national security retention condition (see regulation 5).

(3) The second condition is that the final day of the period for which the fingerprints or DNA profiles may be retained (“the retention period”) will (ignoring the effect of these Regulations) fall on a date during the period of 6 months starting with the date on which these Regulations come into force.

(4) The retention of the fingerprints or DNA profiles may continue for a further period of 6 months starting with the date on which the final day of the retention period would otherwise have fallen.

Section 4 Retention in advance of a requirement to destroy

(1) Paragraph (4) applies in respect of fingerprints or DNA profiles that satisfy the conditions in paragraphs (2) and (3).

(2) The first condition is that the fingerprints or DNA profiles satisfy the national security retention condition (see regulation 5).

(3) The second condition is that the fingerprints or DNA profiles must (ignoring the effect of these Regulations) be destroyed under any of the following provisions during the period of 6 months starting with the date on which these Regulations come into force—

(a) section 18(3) of the Criminal Procedure (Scotland) Act 1995 (destruction of relevant physical data) ;

(b) Article 64(3), 64ZB(2), 64ZC(3), 64ZD(3), 64ZE(3), 64ZF(3), 64ZG(3) or 64ZH(3) of the Police and Criminal Evidence (Northern Ireland) Order 1989 (destruction of fingerprints and samples) .

(4) The fingerprints or DNA profiles may be retained for a further period of 6 months starting with the date on which the requirement to destroy the fingerprints or DNA profiles would otherwise have arisen.

Section 5 National security retention condition

(1) For the purposes of regulations 3 and 4, fingerprints or DNA profiles satisfy the national security retention condition if, prior to these Regulations coming into force, the controller of the fingerprints or DNA profiles has been notified by a constable or a member of the civilian staff of a police force that the fingerprints or DNA profiles may be relevant to the interests of national security.

(2) For the purposes of paragraph (1) notification may be given in any form.

(3) In this regulation—

(a) “controller” is to be construed in accordance with Part 3 of the Data Protection Act 2018 ; and

(b) “police force” means a police force in England & Wales, the Police Service of Scotland or the Police Service of Northern Ireland.