GDPR and Sale of Vehicles

[steamship]

I emailed the Information Commissioner's Office about this, specifically asking them how anyone (private or dealer) should handle the historical documentary paperwork that came with the vehicle. Here is their response, which also included links to guidance notes. Any 'part time' lawyers willing to translate?

If an individual acting on their own accord was to purchase a car and it was to contain documents containing logbook/motoring history then they would have no obligations under the General Data Protection Regulation (GDPR) . This because, the information being processed would fall under domestic purposes putting it out of the material scope of the GDPR.

Things are different if a private forecourt or garage was to obtain the same documentation. As they would be processing personal information in an organisational capacity meaning they would have a number of obligations under the GDPR they'd be expected to adhere to.

Namely; the garage would be obliged to ensure that the information secure, processed in a manner is fair lawful and transparent as well as up to date and accurate.

If the garage in question intended to share the personal documentation outside the organisation they would have to ensure that they would have a relevant lawful basis to do so.