Amendment of the 2008 Regulations10
For regulations 9 to 12 (use and retention of biometric information) substitute—
Use and retention of biometric information9
1
Biometric information provided in accordance with these Regulations may be retained only if the Secretary of State thinks that it is necessary to retain it for use in connection with—
a
the exercise of a function by virtue of the Immigration Acts; or
b
the exercise of a function in relation to nationality.
2
Biometric information retained by virtue of paragraph (1) may also be used—
a
in connection with the prevention, investigation or prosecution of an offence;
b
for a purpose which appears to the Secretary of State to be required in order to protect national security;
c
in connection with identifying persons who have died, or are suffering from illness or injury;
d
for the purpose of ascertaining whether a person has acted unlawfully, or has obtained or sought anything to which the person is not legally entitled; and
e
in connection with the exercise of a function concerning the entitlement of a person who is not a national of an EEA state or Switzerland to enter or remain in the United Kingdom by virtue of an enforceable EU right or of any provision made under section 2(2) of the European Communities Act 19724.
Destruction of biometric information10
1
The Secretary of State must take all reasonable steps to ensure that biometric information held by the Secretary of State by virtue of these Regulations, including any copies, is destroyed if the Secretary of State—
a
no longer thinks that it is necessary to retain the information for use as mentioned in regulation 9(1); or
b
subject to the exception in paragraph (2), is satisfied that the person to whom the information relates is a British citizen, or a Commonwealth citizen who has a right of abode in the United Kingdom as a result of section 2(1)(b) of the Immigration Act 1971.
2
The exception is that photographs of a person who is registered or naturalised as a British citizen may be retained until the person is issued with a United Kingdom passport describing the person as a British citizen.
Retention of fingerprints11
1
Save where regulation 10 applies and subject to paragraphs (2) and (3), the Secretary of State must take all reasonable steps to ensure that any record of a person’s fingerprints held by the Secretary of State by virtue of these Regulations, including any copies, is destroyed at the end of the period of ten years beginning with the date on which the fingerprints were provided.
2
But fingerprints can be held beyond that period if they are—
a
the fingerprints of a person who is, or at any time has been, subject to a deportation order, exclusion order or decision to exclude;
b
the fingerprints of a person who can be, or at any time could have been, refused entry clearance or leave to enter for a period specified in the immigration rules because of a previous breach of the United Kingdom’s immigration laws;
c
fingerprints that the Secretary of State deems it necessary for national security reasons to retain for use in connection with one of the functions specified in regulation 9(1);
d
the fingerprints of a person with indefinite leave to enter or remain in the United Kingdom;
e
the fingerprints of a person whose indefinite leave to enter or remain in the United Kingdom lapses, is revoked or is cancelled, in which case they must be destroyed by the Secretary of State at the end of ten years beginning with the date of the lapse, revocation or cancellation (as the case may be); or
f
the fingerprints of a person who—
i
is not a national of an EEA state or Switzerland; and
ii
is the holder of a document which recognises the right of permanent residence in the United Kingdom by virtue of an enforceable EU right or any provision made under section 2(2) of the European Communities Act 1972,
in which case they must be destroyed by the Secretary of State at the end of ten years beginning with the date on which the holder ceased to enjoy the right of permanent residence.
3
The Secretary of State is only required to take steps to destroy, pursuant to paragraph (2)(e) or (f), the fingerprints of a person whose leave has lapsed or who no longer enjoys the right of permanent residence on the application, supported by evidence to the satisfaction of the Secretary of State, of that person.
4
In paragraphs (2)(f)(ii) and (3), “the right of permanent residence” has the same meaning as in Article 16 of Council Directive 2004/38/EC5.
Destruction etc. of electronic data12
1
The Secretary of State must take all reasonable steps to ensure—
a
that data held in electronic form which relates to biometric information which has to be destroyed by virtue of these Regulations is destroyed or erased; or
b
that access to such data is blocked.
2
A person whose biometric information has to be destroyed by virtue of these Regulations is entitled, on written request, to a certificate issued by the Secretary of State to the effect that the Secretary of State has taken the steps required by paragraph (1).
3
A certificate issued under paragraph (2) must be issued within the period of 3 months beginning with the date on which the request for it is received by the Secretary of State.
Biometric information: retention under another power12A
The requirements in these Regulations to destroy biometric information or data do not apply if and in so far as the information or data is retained in accordance with and for the purposes of another power.