I've been following with interest the threads on the PAS Interim draft guidance and also the lawful basis for publication of special category data. I'm after some advice in regards to information provided in relation to applications for Lawful Development Certificates. Evidence provided to us often contains personal data of third parties. The third party may not be aware that their information has been supplied and therefore we are processing the data without specific consent. The third party may be aware that their information has been passed onto us, but does this only give us implied consent to process which under the new Regulation is not acceptable?
