Commentary on Sections Functions Section 2: Functions
6.Section 2 provides for the Commissioner’s general function. The general function is to support and promote the adoption of lawful, effective and ethical practices in relation to the acquisition, retention, use and destruction of biometric data by Police Scotland, the SPA and the PIRC. It also allows the Scottish Ministers to amend, by regulations, the list of persons subject to the Commissioner’s functions by adding, removing or varying a person or description of a person It should be noted that “person” is defined widely in schedule 1 of the Interpretation and Legislative Reform (Scotland) Act 2010 and includes bodies as well as individuals, whether or not incorporated. However, the Commissioner’s remit extends only to criminal justice and policing, so any person with a range of functions added to the list in section 2(1) would be subject to the Commissioner’s functions only in respect of the handling by that person of biometric data for criminal justice and police purposes.
7.This section goes on to specify that the Commissioner’s general function does not extend to biometric data in relation to which the Commissioner for the Retention and Use of Biometric Material (“CRUBM”) has a function under section 20 of the Protection of Freedoms Act 2012 – which provides that the CRUBM must keep under review national security determinations, including determinations made under section 18G of the Criminal Procedure (Scotland) Act 1995. A national security determination is made if the chief constable determines that it is necessary for biometric data to be retained for the purposes of national security. The CRUBM must keep under review the uses to which the biometric data retained pursuant to a national security determination is being put. As regards Scotland, the CRUBM has a general function of keeping under review the retention and use of biometric data not subject to a national security determination where the data is collected using powers in the Terrorism Act 2000 or the Terrorism Prevention and Investigation Measures Act 2011.
8.Section 2 requires that in exercising the Commissioner’s general function, the Commissioner is to keep under review the law, policy and practice relating to the acquisition, retention, use and destruction of biometric data by Police Scotland, the SPA and the PIRC. The Commissioner is to promote public awareness and understanding of the powers and duties of those bodies in relation to biometric data, how those powers and duties are exercised and how those powers and duties may be monitored or challenged. In exercising those functions, the Commissioner is to have regard to technologies used or capable of being used for the purpose of acquiring, retaining, using or destroying biometric data. The Commissioner must also promote, and monitor the impact of, a code of practice.
9.The Commissioner’s powers relate to biometric data which is acquired, retained, used or destroyed for criminal justice or police purposes. Although the terms “criminal justice purposes” and “police purposes” are not defined, the latter would include any activities which the police legitimately undertake. This goes beyond just the prevention and detection of crime. It would therefore also cover, for example, work the police do to help identify a dead body (even where the death has not been categorised as suspicious). It would also cover work the police do to investigate an act carried out by a child who is below the age of criminal responsibility.
10.Under subsection (5), the Commissioner may carry out, commission or support any research the Commissioner considers appropriate. The Commissioner may also make recommendations concerning any matter relevant to their general function.
11.In exercising the Commissioner’s general function, the Commissioner is to have regard to the interests of particular groups – these are children and young people (those aged under 18 years) and vulnerable persons. Vulnerable persons are those who may have difficulty understanding why and how their biometric data is being processed by the police, the SPA or the PIRC.