Anonymising Foreign Conviction Certificates – UK GDPR-compliant anonymisation per UK GDPR Art. 10
A foreign criminal conviction certificate is an official record from an overseas jurisdiction confirming an individual's criminal history — required for UK vetting and carrying criminal-conviction data under UK GDPR Art. 10. The DBS issues over 6 million checks per year (DBS Annual Report 2023-24), with an increasing proportion involving applicants with overseas histories. anonym.legal pseudonymises the subject's personal identifiers across translated and original certificates to enable preliminary vetting review.
When this applies
This task applies when foreign criminal conviction certificates are reviewed by UK vetting officers, HR professionals, or legal advisers assessing the relevance of overseas criminal records for regulated employment under Police Act 1997 Part V or the Safeguarding Vulnerable Groups Act 2006, and those reviewers require the conviction details but not the subject's personal identifiers.
How anonym.legal handles it
- Upload the foreign conviction certificate and any certified translation together as a batch.
- The engine identifies the subject's name (in original and transliterated forms), date of birth, nationality, and certificate reference number.
- Personal identifiers are pseudonymised consistently across both the original and the translation.
- Offence descriptions, court names, conviction dates, and sentencing information are preserved in clear text.
- A reversible mapping table is produced with UK data residency.
- The pseudonymised certificate and translation are released for vetting review; originals are restored for any formal employment decision.
What you provide
- Foreign criminal conviction certificate (original language)
- Certified translation (if available)
- Issuing-country context notes (to assist offence-category assessment)
Limitations & cautions
- The legal equivalence of foreign offences to UK offences is a specialist legal question requiring expert advice — the tool pseudonymises personal data but does not assess offence equivalence or rehabilitation status under the ROA 1974.
- Some countries' criminal record certificates use national identification numbers as primary identifiers — these are detected and pseudonymised alongside the subject's name and date of birth.
- Unlawful processing of foreign conviction data in the UK risks enforcement action; UK GDPR fines reach up to £17.5 million or 4% of annual global turnover under DPA 2018 s.157.
FAQ
Does UK GDPR Art. 10 apply to foreign conviction data processed in the UK?
Yes. UK GDPR Art. 10 applies to criminal-conviction data regardless of the jurisdiction in which the offence was committed, provided the processing occurs in the UK or relates to persons in the UK. Breaches can attract fines of up to £17.5 million or 4% of annual global turnover under DPA 2018 s.157.
How does the tool handle certificates in non-Latin scripts?
The engine supports a wide range of scripts and character sets. Transliterated versions and certified translations are processed alongside originals; personal identifiers are detected and pseudonymised in all versions consistently.
Can a pseudonymised foreign conviction certificate be used for a DBS application?
DBS applications require the subject's real identity. The pseudonymised certificate is for the vetting officer's preliminary legal review only; re-identify using the mapping key before submitting any formal application.