An appropriate policy document for use by a business processing special categories of personal data and criminal convictions data which complies with the requirements of the Data Protection Act 2018.