Logistics companies will require new permission to check on their lorry drivers when GDPR comes into force later this month
More than two million drivers in the UK will be required to give their fleet operators permission to use driving licence data as part of the new General Data Protection Regulation (GDPR).
The new rules must be complied with for fleet drivers to be properly checked.
GDPR will be effective from 25 May, but the Driver and Vehicle Licensing Agency (DVLA) is giving drivers up to three months before the regulation comes into full force.
The regulation applies to every organisation processing personal data and receiving driver information from the DVLA.
The company responsible for facilitating online licence data checking, Associations for Driving Licence Verification (ADLV), will be in charge of advising its customers ahead of the data protection laws coming into force.
They will help ensure drivers comply with the new DVLA’s requirements.
Kevin Curtis, technical director of the ADLV, said: “This is a huge shift for the DVLA and indeed the driving licence checking industry as a whole.
“From a technical and compliance perspective, all employers and third parties who are responsible for licence checking will need to be able to demonstrate that the new fair processing declaration has been signed by the driver.”
He reassured drivers that their data will be secure and the regulation will raise the bar for data processing within the industry.
“Any companies that were not data-secure will now have to adhere to these new standards which are good for data protection and the licence checking industry as a whole,” he added.
ADLV chairman Malcolm Maycock said: “The security of data and compliance in accordance with legislation, whether it is Data Protection regulations or current work-related road safety legislation, is a core business function of ADLV members.
“While this is a mammoth task in a short time-frame, our members are committed to ensure that all processing is correct and complies fully with the new GDPR legislation.
“The good news is that the new data processing declarations will continue to remain valid for 3 years from the date permission is granted.”
Read more like this: