Hackney carriage and private hire policy - Appendix V – Use of the NR3 Database

When an application for a new Drivers’ Licence, or renewal of an existing Drivers’ Licence is received, the Council will carry out a search NR3. The search will only be made by an officer who has been trained in the use of the NR3. If details are found that appear to relate to the applicant, a request will be made to the authority that entered that information for further details.

Any information that is received from any other authority in relation to an application will only be used in relation to that application, and the determination of it, and will not be used for any other purpose.

Any data that is received will only be kept for as long as is necessary in relation to the determination of that application. This will include the period of time processing that application, making a decision, notifying the applicant of the outcome of that decision, and the appeal processes. Any such data will be kept for a period of no more than 35 days from the date of the service of the written notification of the determination of the application.

Where an appeal to the magistrates’ court is made by an individual who objects to their information being added to the NR3 register, the appeal needs to be made within 28 days of receiving notification of the council’s intention to add details to NR3 register. The data will be retained until that appeal is determined or abandoned. Where the appeal is determined by the magistrates’ court, there is a further right of appeal to the Crown Court. In these circumstances, the data will be retained for a period of no more than 35 days from the date of the decision of the magistrates’ court. If an appeal is made to the Crown Court, the data will be retained longer than 35 days until that appeal is determined or abandoned. Where the appeal is determined by the magistrates’ court or the Crown Court, it is possible to appeal the decision by way of case stated. Accordingly, the data will be retained for a period of no more than 35 days from the date of the decision of the Crown Court (if the decision was made by the magistrates’ court, the retention period has already been addressed). If an appeal by way of case stated is made, the data will be retained until all court proceedings relating to that appeal by way of case stated (which will include potential appeals to the Court of Appeal and Supreme Court) have been determined.

All data will be held securely in accordance with the Council’s general policy on the secure retention of personal data. At the end of the retention period, the data will be erased and/or destroyed in accordance with the Councils Data Protection Policy.

Where an application for a licence is refused, or an existing licence is revoked, the Council will record this decision on NR3. The information recorded on NR3 will be limited to an individual’s:

  • Name
  • date of birth
  • address and contact details
  • national insurance details
  • driving licence number
  • decision taken
  • date of decision
  • date decision effective

Data is held on the NR3 register for a period of 25 years, in line with the national NR3 guidance.

When an application is made to the Council for the grant of a new, or renewal of, a taxi driver’s licence, the Council will carry out a search on the NR3 register.

The Council will then retain a clear written record of every search that is made of the register. This will detail:

  • the date of the search
  • the name or names searched
  • the reason for the search (new application or renewal)
  • the results of the search
  • the use made of the results of the search (this information will be entered to the register at a later date)

This record will not be combined with any other records (i.e. combined with a register of licences granted) and will be retained for the retention period of 25 years.

The Council discovers any match (i.e. there is an entry in the register for the same name and identifying details) a request will be made to the authority that entered those details (the first authority) for further information about that entry. That request will also include details of the Council’s data protection policy in relation to the use of any data that is obtained as a result of this process.

This request will be made in writing. It will be posted or emailed to the contact address of the authority that entered those details on to NR3, which will be detailed in the register.

When the Council receives a request for further information from another authority a clear written record will be made of the request having been received. This record will not be combined with any other records (i.e. combined with a register of licences granted) and will be retained for the retention period of 25 years.

The Council will then determine how to respond to the request. The council will not simply provide information as an automatic response to every request. The Council will conduct a Data Protection Impact Assessment. This will consider how the other authority will use the data, how it will store that data to prevent unauthorised disclosure, the retention period for that data, and the mechanism for erasure or destruction of the data at the end of that period. It is expected that if the second authority has adopted a policy similar to this, that should be a reasonably straightforward process. If The Council is satisfied that the other authority’s data protection procedures are satisfactory, consideration will then be given as to what information will be disclosed. This will be determined by an officer who has been trained to discharge this function. Any disclosure must be considered and proportionate, taking into account the data subject’s rights and the position and responsibilities of a taxi driver. Data is held on the NR3 register for a period of 25 years, but the Council will not disclose information relating to every entry. Each application will be considered on its own merits.

The Council will disclose information relating to a revocation or refusal to grant a Driver’s Licence in accordance with the timescales contained within the Councils Data Protection policy. Where the reason for refusal to grant or revocation relates to a conviction which is within the timescales determined in the council’s Convictions or Suitability policy, the information will be disclosed. Where the reason for refusal to grant or revocation relates to a conviction which is outside the timescales determined in the Convictions or Suitability policy, the information will not usually be disclosed. However, in every case, consideration will be given to the full circumstances of the decision, and there may be occasions where information is provided other than in accordance with this policy.

Any information about convictions will be shared in accordance with this policy under schedule 1, part 2, paragraphs 11 and 12 of the Data Protection Act (DPA) 2018; that is:

Protecting the public against dishonesty etc

  1. This condition is met if the processing
    • is necessary for the exercise of a protective function,
    • must be carried out without the consent of the data subject so as not to prejudice the exercise of that function, and
    • is necessary for reasons of substantial public interest.
  1. In this paragraph, “protective function” means a function which is intended to protect members of the public against
    • dishonesty, malpractice or other seriously improper conduct,
    • unfitness or incompetence,
    • mismanagement in the administration of a body or association, or
    • failures in services provided by a body or association.

Regulatory requirements relating to unlawful acts and dishonesty etc

  1. This condition is met if
    • the processing is necessary for the purposes of complying with, or assisting other persons to comply with, a regulatory requirement which involves a person taking steps to establish whether another person has
      • committed an unlawful act, or
      • been involved in dishonesty, malpractice or other seriously improper conduct,
    • in the circumstances, the controller cannot reasonably be expected to obtain the consent of the data subject to the processing, and
    • the processing is necessary for reasons of substantial public interest.
  1. In this paragraph “act” includes a failure to act; “regulatory requirement” mean
    • a requirement imposed by legislation or by a person in exercise of a function conferred by legislation, or
    • a requirement forming part of generally accepted principles of good practice relating to a type of body or an activity.

The officer will record what action was taken and why the Council will make and then retain a clear written record of every decision that is made as a result of a request from another authority. This will detail:

  • the date the request was received
  • how the data protection impact assessment was conducted and its conclusions
  • the name or names searched
  • whether any information was provided
  • if information was provided, why it was provided (and details of any further advice obtained before the decision was made)
  • if information was not provided, why it was not provided (and details of any further advice obtained before the decision was made)
  • how and when the decision (and any information) was communicated to the requesting authority

This record will not be combined with any other records and will be retained for the retention period of 25 years.

When the Council receives information as a result of a request that has been made to another authority, it will take that information into account when determining the application for the grant or renewal of a taxi drivers’ licence. This will be in accordance with the usual process for determining applications.

The Council will make and then retain a clear written record of the use that is made of the results of the search (this information will be added to the register detailed above). Information that is received may warrant significant weight being attached to it, but it will not be the sole basis for any decision that the Council will make in relation to the application.

 

 


Last Updated on Thursday, January 4, 2024