About this Notice
This Notice is provided to you on behalf of the individual Barristers who practise from 11KBW (“Barristers”). This Notice is also provided on behalf of 11KBW Limited (“the Company”), which carries out various functions in relation to Barristers and 11KBW, as explained below.
This Notice explains how Barristers and the Company process personal data – that is to say, the various ways in which they obtain, hold, use and disclose personal data. In some contexts, the data controller will be an individual Barrister. In other contexts, the data controller will be the Company. This Notice covers both situations.
This Notice also explains what your rights are in relation to any personal data about you that is processed by Barristers or the Company.
The way in which Barristers and the Company process personal data is governed by data protection law, which includes the General Data Protection Regulation 2016 (“GDPR”) and the Data Protection Act 2018 (“DPA 2018”).
Explanation of terms used in this Notice
The following terms are defined by the GDPR and DPA 2018. A short explanation is given below (though it is not intended to substitute for the definitions set out in the legislation).
By personal data, we mean information relating to an identified or identifiable person.
By special category personal data we mean:
- Personal data that reveals any of the following about an individual: racial or ethnic origin; political opinions; religious or philosophical beliefs; or trade union membership.
- Personal data that consists of: genetic data; biometric data used for the purpose of identifying an individual; data concerning health; or data concerning an individual’s sex life or sexual orientation
By criminal offence data we mean data about whether an individual has committed or has been convicted of a criminal offence.
By a data controller we mean the person or body which determines the purposes and means of the processing of personal data.
The following terms are also used in this Notice.
Professional clients are solicitors or other professionals who instruct a Barrister on behalf of another person.
Lay clients are individuals on whose behalf a Barrister is instructed by a solicitor or other professional. As used in this Notice, the term also includes individuals who instruct a Barrister on a direct access basis (i.e. without using a solicitor or another professional to instruct the Barrister on their behalf).
Processing of personal data by Barristers
Barristers process personal data for the purpose of conducting their individual professional practice, and for the purpose of providing legal services to professional and lay clients in the course of such practice.
Barristers are data controllers in respect of any electronic personal data which are processed by them directly for the purposes of their own individual professional practice. Hence Barristers are data controllers in respect of the electronic personal data which sits in their own email accounts (for example in their ‘inbox’ or ‘sent items’) or which is otherwise held on any electronic device which they use for work purposes. Barristers are also data controllers in respect of any personal data contained in their electronic professional diaries.
Where a case or matter has been allocated to a particular Barrister, the Barrister will be the data controller in respect of any hard copy papers relating to that case or matter (at least to the extent that those papers contain personal data falling within the scope of the GDPR).
The legal basis upon which Barristers process personal data as data controllers is as follows.
Where a professional or lay client has given consent to the processing of their personal data by a Barrister, then the processing of that personal data by the Barrister is based on consent.
Where consent has not been given for the processing of personal data by the Barrister, any such processing is based on the Barrister’s legitimate interests in conducting their professional practice and in providing legal services.
Where a Barrister processes special category personal data or criminal conviction data, this is on the basis that the processing that is necessary for the establishment, exercise or defence of legal claims. This would cover the processing of personal data both in connection with litigation and for the purpose of providing legal advice.
Processing of personal data by the Company
Processing of personal data to assist Barristers in conducting their practices
The Company employs staff members (including barristers’ clerks) to assist Barristers in conducting their practices, and to deal with the administration of 11KBW.
The Company is the data controller for electronic personal data held by staff members (e.g. in the staff member’s email accounts and on their work devices) for the purposes of helping Barristers run their practices.
The Company is also the data controller in respect of any electronic personal data processed in connection with any unallocated case (i.e. a case that has been sent to 11KBW but has not been allocated to a particular Barrister).
The Company is the data controller in respect of any hard copy files which fall within the scope of the GDPR and which relate to a case which is unallocated.
The legal basis upon which the Company processes personal data for the above purposes is as follows.
Where a professional or lay client has given consent to the processing of their personal data by a the Company, then the processing of that personal data by the Company is based on consent.
Where consent has not been given for such processing, any such processing is based on the Company’s legitimate interests in assisting Barristers in conducting their professional practice and providing legal services.
Where the Company processes special category personal data or criminal conviction data, this is on the basis that the processing that is necessary for the establishment, exercise or defence of legal claims. This would cover circumstances where the personal data was processed in connection with litigation, or for the purpose of providing legal advice.
Processing of personal data for the administration of 11KBW
The Company is the data controller for data that is processed for the purposes of administering 11KBW. This includes data that is processed for billing purposes and for marketing purposes. In relation to marketing data, Chambers will not send marketing emails except where permitted under the Privacy and Electronic Communications Regulations 2003 or any successor legislation.
The Company is the data controller in respect of all data relating: to staff employed by the Company, contract workers who provide services to 11KBW(e.g. cleaners and plumbers), and mini-pupils and pupils at 11KBW.
The basis on which the Company processes such personal data is as follows.
The processing of staff data and data relating to contract workers is necessary for the performance of employment or other contracts to which the Company and the relevant data subjects are parties.
The processing of special category personal data in connection with employment is conducted on the basis that the processing is for employment purposes, or for occupational health purposes.
Data relating mini-pupils and pupils is processed on the basis of the legitimate interest of 11KBW, Barristers, and the Company, in the recruitment and training of new barristers and of potential new members of 11KBW.
Marketing data is processed on the basis of the legitimate interests of 11KBW, Barrister and the Company in marketing the services of Barristers practising at 11KBW. The processing of personal data for direct marketing by email is carried out on the basis of consent.
Under the GDPR and DPA 2018, you have various rights in connection with any personal data about you that is processed by a Barrister or by the Company as data controller.
- You can ask the Barrister or the Company to give you access to personal data about yourself that is held by them.
- You can ask the Barrister or the Company to erase personal data about you that it held by them.
- You can ask the Barrister or the company to restrict their processing of personal data about you, so that the data will only be used for limited purposes (which are set out in the GDPR).
- You can object to the processing of your personal data by the Barrister or the Company.
- You can ask for personal data about yourself that you have provided to the Barrister or the Company to be provided to you in a structured, commonly used and machine-readable format, and you can transmit that data to another data controller.
All of these rights are set out in detail in the GDPR and DPA 2018, which explain the conditions for the exercise of these rights, and any limitations. Various exemptions may apply, including in relation to data that is protected by legal professional privilege.
If you wish to exercise any of these rights, please may it clear whether you are seeking to exercise your rights against, one or more Barristers (and if so, please identify them) and/or against the Company.
Consequences of failing to provide data
If you are a client of one or more Barristers, and you do not provide information to them, or if you withdraw any consent for the processing of personal data by them or the Company, or require them or the Company to cease processing your data or to erase your data, then the effect may be that: the Barrister(s) in question are unable to provide legal services to you; or the Barristers in question are unable to provide all of the legal services that you have asked for.
Right to lodge a complaint
You have the right to lodge a complaint to the Information Commissioner about the processing of your data by a Barrister or the Company.
Her contact details are:
Information Commissioner’s Office
Tel: 0303 123 1113
Her website is at: https://ico.org.uk
The data controller for your personal data may be an individual Barrister practising at 11KBW, or may be the Company. This Notice explains above which will be the data controller in relation to specific personal data.
Barristers, and the Company, can be contacted at:
11 King’s Bench Walk,
London EC4Y 7EQ.