Data Protection Act 2018 Alert Sample


Alert Sample

View the Parallel Parliament page for the Data Protection Act 2018

Information since 4 Nov 2025, 5:50 a.m.


Data Protection Act 2018 mentioned

Parliamentary Debates
Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026
9 speeches (1,716 words)
Tuesday 17th March 2026 - Grand Committee

Mentions:
1: Lord Leong (Lab - Life peer) schedule.Finally, the regulations also contain three minor and technical amendments to the Data Protection Act - Link to Speech

Crime and Policing Bill
106 speeches (29,168 words)
Report stage part two
Wednesday 11th March 2026 - Lords Chamber
Home Office
Mentions:
1: None , mentioned in Committee that this could be achieved by a modest and targeted change to the Data Protection Act - Link to Speech

Crime and Policing Bill
89 speeches (22,378 words)
Report stage: Part 2
Monday 9th March 2026 - Lords Chamber
Home Office
Mentions:
1: Lord Hanson of Flint (Lab - Life peer) is already subject to safeguards, including those provided in the Human Rights Act and the Data Protection Act - Link to Speech
2: Lord Davies of Gower (Con - Life peer) including the principles established under the UK general data protection regulation and the Data Protection Act - Link to Speech
3: Lord Hanson of Flint (Lab - Life peer) all circumstances is currently subject to safeguards, such as the Human Rights Act and the Data Protection Act - Link to Speech

Crime and Policing Bill
158 speeches (30,484 words)
Wednesday 4th March 2026 - Lords Chamber
Home Office
Mentions:
1: Lord Davies of Gower (Con - Life peer) Even the Data Protection Act 2018, the most recent application, is for an era without AI.It is not worth - Link to Speech

Draft Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026
16 speeches (1,731 words)
Wednesday 4th March 2026 - General Committees
Department for Digital, Culture, Media & Sport
Mentions:
1: Ian Murray (Lab - Edinburgh South) everyone is keeping up.The regulations also contain three minor and technical amendments to the Data Protection Act - Link to Speech
2: Edward Morello (LD - West Dorset) nations of the UK.The changes are technical and administrative, including minor amendments to the Data Protection Act - Link to Speech

Representation of the People Bill
262 speeches (37,568 words)
2nd reading
Monday 2nd March 2026 - Commons Chamber
Ministry of Housing, Communities and Local Government
Mentions:
1: Ben Spencer (Con - Runnymede and Weybridge) She may be aware that during the passage of the Data Protection Act 2018 we had an amendment to help - Link to Speech

Short-term Let Accommodation (Data Sharing Requirements)
6 speeches (1,788 words)
1st reading
Wednesday 11th February 2026 - Commons Chamber

Mentions:
1: Rachel Blake (LAB - Cities of London and Westminster) relating to the short-term letting of accommodation with regulatory authorities; to amend the Data Protection Act - Link to Speech



Select Committee Documents
Friday 20th March 2026
Written Evidence - Ministry of Defence
ADBRS0032 - Afghan Data Breach and Resettlement Schemes

Afghan Data Breach and Resettlement Schemes - Defence Committee

Found: The zone owner 1 Data Protection Act 2018 and UK General Data Protection Regulations 2 JSP 441 3 JSP

Thursday 19th March 2026
Written Evidence - Andrew Makower
RAR0003 - Restoration and Renewal of Parliament: Costing and governance

Public Accounts Committee

Found: provisions of the UK General Data Protection Regulation (“the UK GDPR”), as supplemented by the Data Protection Act

Tuesday 17th March 2026
Written Evidence - No 5 Barristers' Chambers
CTB0092 - Legislative scrutiny: Courts and Tribunals Bill

Legislative scrutiny: Courts and Tribunals Bill - Justice Committee

Found: individual judge conviction rates would be resisted on grounds of judicial independence, or the Data Protection Act

Wednesday 4th March 2026
Written Evidence - Information Commissioner’s Office
WRP0017 - Written Parliamentary Questions

Written Parliamentary Questions - Procedure Committee

Found: responsibility for promoting and enforcing the UK General Data Protection Regulation (UK GDPR), the Data Protection Act

Tuesday 3rd March 2026
Written Evidence - Ofsted
EYS0138 - Early Years: Improving Support for Children and Families

Early Years: Improving support for children and parents - Education Committee

Found: beyond legal requirements such as the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act

Thursday 26th February 2026
Written Evidence - Oliver Sanders KC
NITB0017 - Legislative Scrutiny: Northern Ireland Troubles Bill

Legislative Scrutiny: Northern Ireland Troubles Bill - Human Rights (Joint Committee)

Found: §5 (“sensitive information”); and the Freedom of Information Act 2000 (“FOIA”), s.24 and Data Protection Act

Thursday 26th February 2026
Correspondence - Correspondence from Sarah Jones, Minister of State for Policing and Crime, relating to the use of facial recognition technology by police, 09 February 2026

Human Rights (Joint Committee)

Found: Police use of the technology is currently governed by a legal framework which includes the Data Protection Act

Thursday 12th February 2026
Special Report - 3rd Special Report - The Government’s new approach to addressing the legacy of the past in Northern Ireland: Government Response

Northern Ireland Affairs Committee

Found: understanding directly with the Inquiry, issuing regulations (under section 2B of the Irish Data Protection Act

Wednesday 11th February 2026
Written Evidence - Information Commissioner's Office
RAG0114 - Regulators and growth

Regulators and growth - Industry and Regulators Committee

Found: includes responsibilities under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act

Wednesday 11th February 2026
Estimate memoranda - Northern Ireland Office Supplementary Estimates Memorandum 2025-26 - Annex B

Northern Ireland Affairs Committee

Found: recovered or received for work done for other departments, freedom of information receipts, Data Protection Act

Wednesday 11th February 2026
Correspondence - Correspondence from Minister of State for Digital Government and Data, re: Information Commissioner name amendment, 2 February 2026

Science, Innovation and Technology Committee

Found: The SI additionally makes three other minor and technical consequential amendments to the Data Protection Act

Wednesday 11th February 2026
Written Evidence - Handley Gill Limited
RAI0070 - Human Rights and the Regulation of AI

Human Rights and the Regulation of AI - Human Rights (Joint Committee)

Found: legislation, for example:  restrictions on the territorial and material scope of the UK GDPR and Data Protection Act

Wednesday 11th February 2026
Written Evidence - Marcomms By Leena
RAI0063 - Human Rights and the Regulation of AI

Human Rights and the Regulation of AI - Human Rights (Joint Committee)

Found: The Data Protection Act 2018 and UK GDPR regulate privacy and provide some rights related to automated

Wednesday 11th February 2026
Written Evidence - Middlesex University London
RAI0062 - Human Rights and the Regulation of AI

Human Rights and the Regulation of AI - Human Rights (Joint Committee)

Found: Kingdom’s legal framework, namely, the Human Rights Act 1998, the Equality Act 2010, and the Data Protection Act

Wednesday 11th February 2026
Written Evidence - Information Law & Policy Centre, Institute of Advanced Legal Studies, University of London
RAI0060 - Human Rights and the Regulation of AI

Human Rights and the Regulation of AI - Human Rights (Joint Committee)

Found: in practice, i.e. how it meets the relevant principles and safeguards as required under the Data Protection Act

Wednesday 11th February 2026
Written Evidence - European University Institute
RAI0059 - Human Rights and the Regulation of AI

Human Rights and the Regulation of AI - Human Rights (Joint Committee)

Found: UK GDPR and the Data Protection Act 2018 remain the baseline, now updated by the Data (Use and Access

Wednesday 11th February 2026
Written Evidence - Dr Ayca Atabey, Dr Kim Sylwander, and Professor Sonia Livingstone
RAI0058 - Human Rights and the Regulation of AI

Human Rights and the Regulation of AI - Human Rights (Joint Committee)

Found: Equality Act 2010, Online Safety Act 2023, UK General Data Protection Regulation (UK GDPR), Data Protection Act

Wednesday 11th February 2026
Written Evidence - University of Essex
RAI0056 - Human Rights and the Regulation of AI

Human Rights and the Regulation of AI - Human Rights (Joint Committee)

Found: Act 2010, the Human Rights Act 1998, and the UK General Data Protection Regulation and the Data Protection Act

Wednesday 11th February 2026
Written Evidence - University of Aberdeen, University of Aberdeen, University of Aberdeen, University of Aberdeen, University of Aberdeen, University of Aberdeen, University of Aberdeen, University of Aberdeen, University of Aberdeen, and University of Aberdeen
RAI0048 - Human Rights and the Regulation of AI

Human Rights and the Regulation of AI - Human Rights (Joint Committee)

Found: the Human Rights Act 1998 (HRA), the Scotland Act 1998 (SA), the Equality Act 2010 (EA), the Data Protection Act

Wednesday 11th February 2026
Written Evidence - Essex Law School, Essex Law School, Essex Law School, and Essex Law School
RAI0047 - Human Rights and the Regulation of AI

Human Rights and the Regulation of AI - Human Rights (Joint Committee)

Found: such as privacy and data usage protected under the Human Rights Act 1998 (HRA)15 and the UK Data Protection Act

Wednesday 11th February 2026
Written Evidence - Privacy International
RAI0044 - Human Rights and the Regulation of AI

Human Rights and the Regulation of AI - Human Rights (Joint Committee)

Found: Ireland by virtue of section 3 of the European Union (Withdrawal) Act 2018 (UK GDPR) and the Data Protection Act



Written Answers
Lord Mandelson
Asked by: Mike Wood (Conservative - Kingswinford and South Staffordshire)
Thursday 19th March 2026

Question to the Cabinet Office:

To ask the Minister for the Cabinet Office, whether Peter Mandelson has a (a) Ministerial and (b) Civil Service pension.

Answered by Nick Thomas-Symonds - Paymaster General and Minister for the Cabinet Office

In accordance with the Government Financial Reporting Manual, since 2005, information regarding the remuneration and pension interests of Ministers is published in the annual Resource Accounts (as then named) of the relevant departments for the periods an individual served in a qualifying role.

Historical information concerning Lord Mandelson’s Ministerial pension membership during his periods of government service can be found within the relevant departmental annual reports and accounts dating to 2005/6.

Regarding civil service pensions, the Cabinet Office does not disclose personal information relating to specific individuals' pension arrangements. Such information constitutes personal data and is protected under the Data Protection Act 2018 and the UK General Data Protection Regulation. It is a long-standing policy that individuals have a reasonable expectation of privacy regarding their financial affairs and pension entitlements, disclosing such details to a third party would conflict with data protection principles.

Scotland Office: Visas
Asked by: John Hayes (Conservative - South Holland and The Deepings)
Wednesday 18th March 2026

Question to the Scotland Office:

To ask the Secretary of State for Scotland, how many staff within his Department are reliant on a visa for employment.

Answered by Kirsty McNeill - Parliamentary Under-Secretary (Scotland Office)

The Scotland Office has the information that you have requested. However, if a request is made for information and the total figure amounts to five people or fewer, the Scotland Office must consider whether this could lead to the identification of individuals and whether disclosure of this information would be in breach of our statutory obligations under the General Data Protection Regulation and/or the Data Protection Act 2018.

We believe that the release of this information would risk identification of the individual/s concerned. For this reason, the Scotland Office has chosen not to provide the information requested. However, it should not be assumed that the actual figure represented falls at any particular point within this scale; 'five or fewer' is used as a replacement value from which it would be difficult to isolate or extract any individual data.

Public Sector: Artificial Intelligence
Asked by: Lord Taylor of Warwick (Non-affiliated - Life peer)
Wednesday 11th March 2026

Question to the Department of Health and Social Care:

To ask His Majesty's Government what assessment they have made of the data protection and confidentiality risks of the deployment of generative AI workplace tools in public sector bodies; and what guidance they have issued regarding the use of those tools in environments handling sensitive or personal data, including NHS organisations.

Answered by Baroness Merron - Parliamentary Under-Secretary (Department of Health and Social Care)

The Government recognises that the deployment of generative artificial intelligence (AI) workplace tools across the public sector presents data protection, confidentiality, and security risks, particularly where these tools may process sensitive or personal data.

The Government has assessed these risks which are addressed within the Artificial Intelligence Playbook for the UK Government and the Generative AI Framework for UK Government, both published in February 2025.

The AI playbook makes clear that public sector organisations must comply with UK data protection law when using generative AI, including the UK General Data Protection Regulation and the Data Protection Act 2018. It emphasises the need for data protection impact assessments, clear accountability, human oversight, and restrictions on the use of generative AI tools in environments handling sensitive or personal data unless appropriate safeguards are in place. The generative AI framework provides detailed guidance on privacy, security, and information governance, including data minimisation, purpose limitation, and preventing the disclosure of personal or confidential information through prompts or outputs.

Specific guidance has also been issued for health and care settings. NHS England has published information governance guidance on the use of AI, which has been reviewed by the Health and Care Information Governance Working Group, including the Information Commissioner's Office and National Data Guardian. This guidance addresses confidentiality, lawful processing, consent, and human oversight, and applies to NHS organisations considering or deploying AI technologies, including generative AI tools. NHS bodies are expected to operate within established information governance frameworks and, where appropriate, adopt local AI governance and acceptable use policies consistent with national guidance.

Judicial Appointments Commission for England and Wales: Freedom of Information
Asked by: Mark Pritchard (Conservative - The Wrekin)
Monday 9th March 2026

Question to the Ministry of Justice:

To ask the Secretary of State for Justice, what discussions he has had with the Judicial Appointment Commission on its use of resources to challenge Freedom of Information requests.

Answered by Sarah Sackman - Minister of State (Ministry of Justice)

The independent Judicial Appointments Commission (JAC) is designated as a public body under the Freedom of Information Act 2000 (FOIA). The JAC is responsible for meeting its statutory obligations under the FOIA and the Data Protection Act 2018, including ensuring requests are handled in line with the relevant legislation. Decisions on the responses to individual Freedom of Information requests, including any associated legal consideration, are for the JAC.

The JAC as a non-departmental public body is responsible for managing its own resources including in relation to meeting its statutory obligations. The governance and accountability arrangements between the Ministry of Justice and the JAC are set out in the framework document agreed in line with HM Treasury’s Managing Public Money, including in relation to governance and financial matters

Hospices and Palliative Care: Artificial Intelligence
Asked by: Lord Taylor of Warwick (Non-affiliated - Life peer)
Thursday 5th March 2026

Question to the Department of Health and Social Care:

To ask His Majesty's Government what assessment they have made of the use of artificial intelligence technologies by hospice and palliative care providers; and what safeguards are in place to ensure that those technologies maintain patient safety, data protection and equitable access to high-quality end of life care.

Answered by Baroness Merron - Parliamentary Under-Secretary (Department of Health and Social Care)

No formal assessment has been made of the use of artificial intelligence (AI) technologies by hospices and other palliative care providers. The majority of hospices are independent charitable organisations and so are free to make their own decisions regarding the adoption and deployment of AI tools.

NHS England is dedicated to enabling the safe deployment and adoption of AI technologies, providing clear guidance on approval, implementation, information governance, security, privacy, and controls. NHS England provides guidance on how technologies should be selected, deployed, and scaled to ensure they are safe, effective, and eligible for National Health Service adoption, including accuracy. NHS trusts are expected to ensure that access to the AI tools they employ is safe, ethical, effective, and equitable for all within their remit.

Strict safeguards are in place across the NHS to guarantee patient safety, and data protection. All NHS organisations, including NHS palliative care and end-of-life care services, are expected to comply with Medical Devices Regulations (SI 2002 No 618, as amended) (UK MDR 2002) and digital clinical safety standards.

Providers handling patient data must comply with UK General Data Protection Regulation and the Data Protection Act 2018. Each health organisation is required to appoint a Caldicott Guardian, whose role is to advise on the protection and proper use of health and care data, including where AI is involved.

Hospitals: Artificial Intelligence
Asked by: Lord Taylor of Warwick (Non-affiliated - Life peer)
Wednesday 4th March 2026

Question to the Department of Health and Social Care:

To ask His Majesty's Government what assessment they have made of the use of AI tools by NHS hospitals to support clinical documentation, including real-time note-taking systems; and what safeguards are in place to ensure that those tools maintain accuracy, patient safety and data protection.

Answered by Baroness Merron - Parliamentary Under-Secretary (Department of Health and Social Care)

National Health Service hospitals are increasingly using artificial intelligence (AI) tools, such as real-time note-taking systems, to support clinical documentation. Among these, Ambient Voice Technologies (AVT) hold transformative potential to improve both patient care and operational efficiency. These tools have been shown to cut down on the amount of time clinicians spend on paperwork by half, giving them more time to spend on other important tasks, like interacting with their patients.

NHS England is dedicated to enabling the safe deployment and adoption of such technologies, providing clear guidance on approval, implementation, information governance, security, privacy, and controls. National standards and additional guidance will explain how AVT solutions should be selected, deployed, and scaled to ensure they are safe, effective, and eligible for NHS adoption including accuracy.

Strict safeguards are in place across the NHS to guarantee patient safety, and data protection. All NHS organisations must comply with Medical Devices Regulations (SI 2002 No 618, as amended) (UK MDR 2002) and digital clinical safety standards. Providers handling patient data must comply with UK General Data Protection Regulation and the Data Protection Act 2018. Each health organisation is required to appoint a Caldicott Guardian, whose role is to advise on the protection and proper use of health and care data, including where AI is involved.

Department for Culture, Media and Sport: Personnel Management
Asked by: Joshua Reynolds (Liberal Democrat - Maidenhead)
Tuesday 3rd March 2026

Question to the Department for Digital, Culture, Media & Sport:

To ask the Secretary of State for Culture, Media and Sport, how many directors with responsibility for human resources are employed across their department and its executive agencies; and how many of those directors hold professional HR qualifications from the Chartered Institute of Personnel and Development or equivalent professional bodies.

Answered by Ian Murray - Minister of State (Department for Science, Innovation and Technology)

We cannot provide the number of HR Directors or details of their professional qualifications. Disclosing this information would breach the Data Protection Act and risk identifying individual staff members because the data concerns five or fewer employees and relates to individuals other than the data subjects. We do not hold data on the qualifications held by employees of DCMS Arms Length Bodies.

Attorney General's Office: Personnel Management
Asked by: Joshua Reynolds (Liberal Democrat - Maidenhead)
Tuesday 3rd March 2026

Question to the Attorney General:

To ask the Solicitor General, how many directors with responsibility for human resources are employed across their department and its executive agencies; and how many of those directors hold professional HR qualifications from the Chartered Institute of Personnel and Development or equivalent professional bodies.

Answered by Ellie Reeves - Solicitor General (Attorney General's Office)

As the number of individuals is five or fewer, across the AGO and the Law Officer Departments, I am unable to disclose the figure. This is to protect against the risk that individuals could be identified, in line with our obligations under the UK GDPR and Data Protection Act 2018.

HM Courts and Tribunals Service: Data Protection
Asked by: Kieran Mullan (Conservative - Bexhill and Battle)
Friday 27th February 2026

Question to the Ministry of Justice:

To ask the Secretary of State for Justice, what data protection safeguards are in place in relation to court lists containing home addresses and dates of birth of individuals, being provided to individuals and organisations by HM Courts & Tribunals Service, either centrally or via individual courts.

Answered by Sarah Sackman - Minister of State (Ministry of Justice)

Home addresses and dates of birth of individuals are not included in Crown Court, County Court, Family Court, High Court, lists of hearings, nor in lists of hearings in the Tribunals.

Standard Lists produced by the Magistrates Court do contain the home addresses and dates of birth of individuals due to appear in court and these lists are only available to approved accredited members of the media, criminal justice partners and other government departments with legitimate reasons for requiring such information.

Standard lists do contain Special Category Data as defined by Data Protection Act 2018. This information is intended to assist the accurate reporting of court proceedings and should be handled appropriately by legal professionals and members of the media.

HMCTS will immediately cease the sharing of this data, if there is concern about how it will be used. Such data is held subject to licencing and can only be shared in agreement with licencing agreements; abiding by those licencing agreements is part of data protection.

Ministry of Justice: Personnel Management
Asked by: Joshua Reynolds (Liberal Democrat - Maidenhead)
Thursday 26th February 2026

Question to the Ministry of Justice:

To ask the Secretary of State for Justice, how many directors with responsibility for human resources are employed across their department and its executive agencies; and how many of those directors hold professional HR qualifications from the Chartered Institute of Personnel and Development or equivalent professional bodies.

Answered by Jake Richards - Assistant Whip

As the number of individuals is five or fewer, the Ministry of Justice is unable to disclose the figure. This is to protect against the risk that individuals could be identified, in line with our obligations under the UK GDPR and Data Protection Act 2018.



Secondary Legislation
Hampshire and the Solent Combined County Authority Regulations 2026
These Regulations establish the Hampshire and the Solent Combined County Authority (“the Combined County Authority”) and confer certain functions of local authorities and other public authorities on the Combined County Authority.
Parliamentary Status - Text of Legislation - Draft affirmative
Laid: Monday 16th March - In Force: Not stated

Found: to the Police and Justice Act 2006 (c. 48) and amended by paragraph 45 of Schedule 19 to the Data Protection Act

Online Safety (CSEA Content Reporting by Regulated User-to-User Service Providers) Regulations 2026
Section 66 of the Online Safety Act 2023 (c. 50) requires certain providers of regulated user-to-user services to report child sexual abuse and exploitation content (“CSEA content”) detected on their internet service to the National Crime Agency (“NCA”). If these providers already have arrangements in place for reporting CSEA content to a foreign agency which is exercising functions similar to the NCA (such as the National Center for Missing & Exploited Children in the United States of America), then this content is not required by section 66 to be reported to the NCA.
Home Office
Parliamentary Status - Text of Legislation - Made negative
Laid: Thursday 12th March - In Force: 7 Apr 2026

Found: section 59 of the Act; “data protection legislation” has the meaning given in section 3(9) of the Data Protection Act



Department Publications - Policy and Engagement
Monday 23rd March 2026
Department for Energy Security & Net Zero
Source Page: UK Emissions Trading Scheme: Treatment of sustainable aviation fuel
Document: (PDF)

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Friday 20th March 2026
Department for Energy Security & Net Zero
Source Page: Eskdalemuir seismic array: revised approach to managing onshore wind turbine interference
Document: (PDF)

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Wednesday 18th March 2026
Department for Energy Security & Net Zero
Source Page: Permitted development rights for onshore wind turbines in England
Document: (PDF)

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Wednesday 11th March 2026
Department for Energy Security & Net Zero
Source Page: Accelerating electricity network connections for strategic demand
Document: (PDF)

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Monday 9th March 2026
Home Office
Source Page: Economic crime information sharing
Document: (PDF)

Found: Money Laundering Suspicious Activity Report DEA 2017 – Digital Economy Act 2017 DPA 2018 – Data Protection Act

Monday 9th March 2026
Home Office
Source Page: Economic crime information sharing
Document: (webpage)

Found: Against Money Laundering Suspicious Activity ReportDEA 2017 – Digital Economy Act 2017DPA 2018 – Data Protection Act

Wednesday 4th March 2026
Department for Energy Security & Net Zero
Source Page: Contracts for Difference: Contract amendments to implement Clean Industry Bonus reforms
Document: (PDF)

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Monday 23rd February 2026
Department for Energy Security & Net Zero
Source Page: Future of the UK downstream oil sector
Document: (PDF)

Found: may be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Friday 20th February 2026
Department for Energy Security & Net Zero
Source Page: Charging regime for offshore oil and gas activities
Document: (PDF)

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act



Department Publications - Guidance
Wednesday 18th March 2026
Foreign, Commonwealth & Development Office
Source Page: Prevention of violence against women and girls, response, and women-led organisations in conflict-affected areas of Sudan
Document: Accountable grant arrangement template (webpage)

Found: Environmental Information Regulations 2004, the UK General Data Protection Regulation (UKGDPR), the Data Protection Act

Thursday 12th March 2026
Ministry of Housing, Communities and Local Government
Source Page: MHCLG: records and information management policy
Document: MHCLG: records and information management policy (webpage)

Found: government, including:  Public Records Act 1958  Freedom of Information Act 2000 (FOIA)   Data Protection Act

Thursday 5th March 2026
Department for Education
Source Page: Information sharing agreement template
Document: (webpage)

Found: UK data protection laws, including the UK General Data Protection Regulations (UK GDPR), the Data Protection Act

Thursday 5th March 2026
Ministry of Justice
Source Page: HMPPS risk assessed access for personnel with lived experience of the criminal justice system policy framework
Document: (PDF)

Found: All personal information will be held securely and in line with the PSI 03/2018 - The Data Protection Act

Tuesday 24th February 2026
Ministry of Defence
Source Page: Competition: Innovation Support to Operations Phase 3 (Cycle 7)
Document: (PDF)

Found: In this clause, "data protection legislation" has the same meaning as in the Data Protection Act 2018

Monday 23rd February 2026
Department for Education
Source Page: School census 2026 to 2027: technical information
Document: (PDF)

Found: Data protection and data sharing The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act

Thursday 12th February 2026
Department for Education
Source Page: Significant changes to an academy: tier 1 application form
Document: Significant changes to an academy: tier 1 application form (webpage)

Found: with the Freedom of Information Act 2000, Environmental Information Regulations 2004 or the Data Protection Act

Wednesday 11th February 2026
Ministry of Housing, Communities and Local Government
Source Page: Social Housing Stock Management Research - privacy notice
Document: Social Housing Stock Management Research - privacy notice (webpage)

Found: details will not be used for any other purpose and will be handled in line with UK GDPR and the Data Protection Act

Wednesday 11th February 2026
Department for Education
Source Page: Design standards: employer's requirements
Document: (webpage)

Found: and/or obligations of either Party in connection with this Appointment and: the GDPR; the Data Protection Act



Department Publications - Consultations
Thursday 12th March 2026
Department for Energy Security & Net Zero
Source Page: UK Emissions Trading Scheme: Regulating cross-boundary CCS pipelines
Document: (PDF)

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Tuesday 10th March 2026
Cabinet Office
Source Page: Making public services work for you with your digital identity
Document: (PDF)

Found: Data protection legislation means the UK GDPR, the Data Protection Act 2018 and

Tuesday 10th March 2026
Cabinet Office
Source Page: Making public services work for you with your digital identity
Document: (PDF)

Found: of the Crown, or a government department (paragraph 6, schedule 1, Data Protection Act

Monday 2nd March 2026
Department for Science, Innovation & Technology
Source Page: Growing up in the online world: a national consultation
Document: (PDF)

Found: may be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Monday 2nd March 2026
Department for Science, Innovation & Technology
Source Page: Growing up in the online world: a national consultation
Document: (PDF)

Found: may be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Thursday 26th February 2026
Department for Business and Trade
Source Page: Make Work Pay: threshold for triggering collective redundancy obligations
Document: (PDF)

Found: may be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Thursday 26th February 2026
Department for Business and Trade
Source Page: Make Work Pay: protection from detriments for taking industrial action
Document: (PDF)

Found: may be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Wednesday 25th February 2026
Ministry of Housing, Communities and Local Government
Source Page: General Safety Requirement for Construction Products
Document: (PDF)

Found: disclosed in accordance with United Kingdom legislation (the Freedom of Information Act 2000, the Data Protection Act

Wednesday 25th February 2026
Ministry of Housing, Communities and Local Government
Source Page: Construction Products Reform White Paper
Document: (PDF)

Found: disclosed in accordance with United Kingdom legislation (the Freedom of Information Act 2000, the Data Protection Act

Monday 23rd February 2026
Department for Education
Source Page: SEND reform: putting children and young people first
Document: (PDF)

Found: may be subject to publication or disclosure under the Freedom of Information Act 2000, the Data Protection Act

Monday 23rd February 2026
Department for Education
Source Page: SEND reform: putting children and young people first
Document: (PDF)

Found: may be subject to publication or disclosure under the Freedom of Information Act 2000, the Data Protection Act



Department Publications - Statistics
Thursday 12th March 2026
Department for Science, Innovation & Technology
Source Page: Cyber Resilience Act and AI Act follow-up survey: privacy notice
Document: (PDF)

Found: as set out in Articles 13 and 14 of UK General Data Protection Regulation (UK GDPR) and the Data Protection Act

Wednesday 11th March 2026
Department for Energy Security & Net Zero
Source Page: Green home finance products: homeowner awareness and attitudes
Document: (PDF)

Found: treat all information that you give in strict confidence, in accordance with UK GDPR and the Data Protection Act

Wednesday 11th March 2026
Department for Energy Security & Net Zero
Source Page: Green home finance consumer typologies and barriers
Document: (PDF)

Found: information will be stored and deleted by Verian in compliance with GDPR regulations and the Data Protection act

Thursday 12th February 2026
Ministry of Defence
Source Page: Career Transition Partnership ex-service personnel employment outcomes: financial year 2024/25
Document: (PDF)

Found: information knowledge awareness, that ensure an understanding of their responsibilities under the Data Protection Act

Wednesday 11th February 2026
Department for Science, Innovation & Technology
Source Page: Privacy notice for Cyber Resilience Act and AI Act survey
Document: (PDF)

Found: as set out in Articles 13 and 14 of UK General Data Protection Regulation (UK GDPR) and the Data Protection Act



Department Publications - Policy paper
Wednesday 11th March 2026
Cabinet Office
Source Page: Government response to Humble Address motion of 4 February 2026
Document: (PDF)

Found: Notice for Staff in compliance with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act

Monday 9th March 2026
HM Treasury
Source Page: HM Treasury Market Engagement Group
Document: (PDF)

Found: the UK GDPR – Substantial public interest Schedule 1, Part 2, Paragraph 6(2)(b) of the Data Protection Act



Department Publications - Transparency
Thursday 26th February 2026
Ministry of Defence
Source Page: Service Inquiry into the support provided to Army victims of sexual assault
Document: (PDF)

Found: to current Service policy on disclosure and adhering to current legislation, including the Data Protection Act

Thursday 12th February 2026
Ministry of Defence
Source Page: Service Inquiry into the death of a service person found deceased on 28 September 2022
Document: (PDF)

Found: to current Service policy on disclosure and adhering to current legislation, including the Data Protection Act



Department Publications - News and Communications
Wednesday 25th February 2026
Department for Environment, Food and Rural Affairs
Source Page: Councils urged to crush more fly-tippers’ vehicles
Document: government guidance (PDF)

Found: Local authorities will need to complete a Data Protection Act (DPA) Enquiry Form which can be requested



Non-Departmental Publications - Transparency
Mar. 23 2026
Money and Pensions Service
Source Page: Money and Pensions Service annual report and accounts: 2024 to 2025
Document: (PDF)
Transparency

Found: our responsibilities under His Majesty’s Government (HMG) Security Policy Framework and the Data Protection Act

Mar. 23 2026
Money and Pensions Service
Source Page: Money and Pensions Service annual report and accounts: 2024 to 2025
Document: (PDF)
Transparency

Found: our responsibilities under His Majesty’s Government (HMG) Security Policy Framework and the Data Protection Act

Feb. 12 2026
Leasehold Advisory Service
Source Page: Leasehold Advisory Service framework document
Document: (PDF)
Transparency

Found: information is received by either party under the Freedom of Information Act 2000, or the Data Protection Act



Non-Departmental Publications - Guidance and Regulation
Mar. 20 2026
Planning Inspectorate
Source Page: Nationally Significant Infrastructure Projects - Advice on working with public bodies in the infrastructure planning process - Annex D: Environment Agency
Document: Nationally Significant Infrastructure Projects - Advice on working with public bodies in the infrastructure planning process - Annex D: Environment Agency (webpage)
Guidance and Regulation

Found: Agency is also subject to the provisions of the Environmental Information Regulations 2004, the Data Protection Act

Mar. 19 2026
Office of Financial Sanctions Implementation
Source Page: OFSI General Licence INT/2026/9247168
Document: (PDF)
Guidance and Regulation

Found: to third parties only in compliance with the UK General Data Protection Regulation and the Data Protection Act

Mar. 10 2026
UK Defence Innovation
Source Page: Rapid transfusion diagnostics: optimising safety on deployed operations
Document: (PDF)
Guidance and Regulation

Found: In this clause, "data protection legislation" has the same meaning as in the Data Protection Act 2018

Mar. 05 2026
HM Prison and Probation Service
Source Page: HMPPS risk assessed access for personnel with lived experience of the criminal justice system policy framework
Document: (PDF)
Guidance and Regulation

Found: All personal information will be held securely and in line with the PSI 03/2018 - The Data Protection Act

Mar. 02 2026
HM Revenue & Customs
Source Page: Requesting HMRC data: guidance for public bodies
Document: Requesting HMRC data: guidance for public bodies (webpage)
Guidance and Regulation

Found: sharing must comply with the Commissioners of Revenue and Customs Act 2005, UK GDPR, and the Data Protection Act

Feb. 24 2026
UK Defence Innovation
Source Page: Competition: Innovation Support to Operations Phase 3 (Cycle 7)
Document: (PDF)
Guidance and Regulation

Found: In this clause, "data protection legislation" has the same meaning as in the Data Protection Act 2018

Feb. 24 2026
Office of Financial Sanctions Implementation
Source Page: OFSI General Licence INT/2026/8889196
Document: (PDF)
Guidance and Regulation

Found: to third parties only in compliance with the UK General Data Protection Regulation and the Data Protection Act

Feb. 24 2026
Office of Financial Sanctions Implementation
Source Page: OFSI General Licence INT/2026/8893924
Document: (PDF)
Guidance and Regulation

Found: to third parties only in compliance with the UK General Data Protection Regulation and the Data Protection Act

Feb. 20 2026
Forensic Science Regulator
Source Page: Contamination detection: DNA elimination samples (FSR-GUI-0019)
Document: (PDF)
Guidance and Regulation

Found: ensuring that all samples and data are retained according to the retention guidelines and the Data Protection Act

Feb. 19 2026
UK Visas and Immigration
Source Page: Criminal investigation guidance to the PACE (Northern Ireland) Regulations 2026
Document: (PDF)
Guidance and Regulation

Found: their obligations under the UK General Data Protection Regulation (UK GDPR) and Part 3 of the Data Protection Act

Feb. 11 2026
Animals in Science Committee
Source Page: Animals in Science Committee: ways of working
Document: (PDF)
Guidance and Regulation

Found: website. 7.3.6 The Committee is subject to the Freedom of Information Act 2000 (FOIA), and the Data Protection Act



Non-Departmental Publications - News and Communications
Mar. 20 2026
Competition and Markets Authority
Source Page: Heating oil market study
Document: Statement of Scope (PDF, 203KB) (PDF)
News and Communications

Found: accordance with the CMA’s obligations under the UK General Data Protection Regulation and the Data Protection Act

Mar. 17 2026
Legal Aid Agency
Source Page: Guidance updates for travel and subsistence
Document: Criminal Bills Assessment Manual (PDF)
News and Communications

Found: Evidence at Trial (EPE) 77 7.14 In-House Photocopying 78 7.15 Defence Post-mortems 78 7.16 Data Protection Act

Mar. 17 2026
Legal Aid Agency
Source Page: Guidance updates for travel and subsistence
Document: Civil Finance Electronic Handbook (PDF)
News and Communications

Found: Access Requests Subject Access Requests – Copies of Records With the introduction of the Data Protection Act



Non-Departmental Publications - Closed consultation
Mar. 09 2026
Department for Levelling Up, Housing and Communities
Source Page: Contractual controls on land: consultation
Document: (PDF)
Closed consultation

Found: Data will be published with regard to obligations and principles under the Data Protection Act 2018



Non-Departmental Publications - Policy paper
Mar. 03 2026
National Museum of the Royal Navy
Source Page: National Museum of the Royal Navy (NMRN) framework document
Document: (PDF)
Policy paper

Found: information is received by either party under the Freedom of Information Act 2000, or the Data Protection Act

Feb. 26 2026
Biometrics and Surveillance Camera Commissioner
Source Page: International transfer of personal information: consultation response
Document: International transfer of personal information: consultation response (webpage)
Policy paper

Found: Chapter 5 of part 3 of the Data Protection Act 2018 places limits on the circumstances when a competent



Non-Departmental Publications - Statistics
Feb. 26 2026
HM Revenue & Customs
Source Page: Customs Administrative Burden Wave 2
Document: (webpage)
Statistics

Found: be awarded this in August 2008.The UK General Data Protection Regulation (GDPR) and the UK Data Protection Act

Feb. 26 2026
HM Revenue & Customs
Source Page: Traders and Intermediaries Panel Research Summary Report 2025
Document: (webpage)
Statistics

Found: be awarded this in August 2008.The UK General Data Protection Regulation (GDPR) and the UK Data Protection Act

Feb. 26 2026
HM Revenue & Customs
Source Page: Traders and Intermediaries Panel Research Summary Report 2025
Document: (webpage)
Statistics

Found: awarded this in August 2008.The UK General Data Protection Regulation (UK GDPR) and the UK Data Protection Act

Feb. 19 2026
Planning Inspectorate
Source Page: Planning Inspectorate Ministerial Measures - Experimental Statistics 19 February 2026
Document: (PDF)
Statistics

Found: Responsible for Information training and they understand their responsibilities under the Data Protection Act

Feb. 19 2026
HM Prison and Probation Service
Source Page: HM Prison & Probation Service workforce quarterly: December 2025
Document: (ODS)
Statistics

Found: Low numbers are suppressed to prevent disclosure in accordance with the Data Protection Act, 2018.

Feb. 19 2026
HM Prison and Probation Service
Source Page: HM Prison & Probation Service workforce quarterly: December 2025
Document: (ODS)
Statistics

Found: Low numbers are suppressed to prevent disclosure in accordance with the Data Protection Act, 2018.

Feb. 19 2026
HM Prison and Probation Service
Source Page: HM Prison & Probation Service workforce quarterly: December 2025
Document: (ODS)
Statistics

Found: Low numbers are suppressed to prevent disclosure in accordance with the Data Protection Act, 2018.

Feb. 19 2026
HM Prison and Probation Service
Source Page: HM Prison & Probation Service workforce quarterly: December 2025
Document: (ODS)
Statistics

Found: Low numbers are suppressed to prevent disclosure in accordance with the Data Protection Act, 1998.



Non-Departmental Publications - Open consultation
Feb. 20 2026
Offshore Petroleum Regulator for Environment and Decommissioning
Source Page: Charging regime for offshore oil and gas activities
Document: (PDF)
Open consultation

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Feb. 16 2026
Medicines and Healthcare products Regulatory Agency
Source Page: Medical devices regulations: targeted consultation on the indefinite recognition of CE marked devices
Document: (PDF)
Open consultation

Found: Your rights under the UK General Data Protection Regulation and the UK Data Protection Act 2018 apply



Non-Departmental Publications - Policy and Engagement
Feb. 16 2026
Office of Financial Sanctions Implementation
Source Page: Ownership and Control Test in UK Financial Sanctions Regulations
Document: (PDF)
Policy and Engagement

Found: These are primarily the Freedom of Information Act 2000 (FOIA), the Data Protection Act 2018 (DPA) and

Feb. 16 2026
Office of Financial Sanctions Implementation
Source Page: Ownership and Control Test in UK Financial Sanctions Regulations
Document: Ownership and Control Test in UK Financial Sanctions Regulations (webpage)
Policy and Engagement

Found: personal data and explains your rights under the General Data Protection Regulation (GDPR) and the Data Protection Act



Arms Length Bodies Publications
Feb. 17 2026
NHS England
Source Page: Federated Data Platform product screening questionnaire
Document: Federated Data Platform product screening questionnaire (webpage)
Template

Found: UK GDPR UK GDPR as defined in and read in accordance with the Data Protection Act 2018.



Draft Secondary Legislation
The Hampshire and the Solent Combined County Authority Regulations 2026
These Regulations establish the Hampshire and the Solent Combined County Authority (“the Combined County Authority”) and confer certain functions of local authorities and other public authorities on the Combined County Authority.
Ministry of Housing, Communities and Local Government

Found: to the Police and Justice Act 2006 (c. 48) and amended by paragraph 45 of Schedule 19 to the Data Protection Act

The Sussex and Brighton Combined County Authority Regulations 2026
These Regulations establish the Sussex and Brighton Combined County Authority (“the Combined County Authority”) and confer certain functions of local authorities and other public authorities on the Combined County Authority.
Ministry of Housing, Communities and Local Government

Found: to the Police and Justice Act 2006 (c. 48) and amended by paragraph 45 of Schedule 19 to the Data Protection Act



Deposited Papers
Friday 20th March 2026

Source Page: Framework Document: British Film Institute. Non-departmental public body with charitable status. Incl. annexes. 54p.
Document: British_Film_Institute_Framework_Document_2026.pdf (PDF)

Found: is received by either party under the Freedom of Information Act 2000, or the Data Protection Act

Wednesday 11th March 2026
Home Office
Source Page: Economic crime information sharing: call for evidence. 37p.
Document: Call_for_Evidence_Economic_Crime_Information_Sharing_9_3_26.pdf (PDF)

Found: Money Laundering Suspicious Activity Report DEA 2017 – Digital Economy Act 2017 DPA 2018 – Data Protection Act

Wednesday 11th March 2026
Ministry of Defence
Source Page: I. Framework document for the National Museum of the Royal Navy. 52p. II. Letter dated 09/03/2026 from Louise Sandher-Jones MP to the Deposited Papers clerk regarding a document for deposit in the House libraries. 1p.
Document: 20260225_Framework_Document_signed_by_NMRN_and_MOD.pdf (PDF)

Found: information is received by either party under the Freedom of Information Act 2000, or the Data Protection Act

Thursday 26th February 2026
Department for Education
Source Page: Letter dated 19/02/2026 from Baroness Smith of Malvern to Baroness Morris of Yardley regarding amendment 184 and what is meant by “excluded” and “special procedure” material, as discussed during the Report stage (fourth day) of the Children’s Wellbeing and Schools Bill. 4p.
Document: Bns_Smith_to_Estelle_Morris_following_HoL_Report_s9_PACE.pdf (PDF)

Found: legislative restriction – whether that is the PACE provision we address in our amendment, the Data Protection Act

Wednesday 25th February 2026
Home Office
Source Page: Identification of victims of modern slavery. Call for evidence: summary of responses. Incl. annex. 23p.
Document: Identification_of_Victims_of_Modern_Slavery.pdf (PDF)

Found: transferred to Ipsos UK via secure, encrypted file-transfer portals, ensuring compliance with the Data Protection Act

Thursday 19th February 2026
Department for Education
Source Page: I. Statutory guidance: Keeping children safe in education 2026. Government consultation. 46p. II. Keeping children safe in education 2026. Statutory guidance for schools and colleges. Draft for consultation 12 February 2026. 201p. III. Keeping children safe in education: Part one – staff quick reference. 1p.
Document: Keeping_children_safe_in_education_2026_draft_for_consultation.pdf (PDF)

Found: Data Protection Act 2018, the UK GDPR and the Data (Use and Access) Act 2025 – ‘data protection laws

Thursday 19th February 2026
Department for Education
Source Page: I. Statutory guidance: Keeping children safe in education 2026. Government consultation. 46p. II. Keeping children safe in education 2026. Statutory guidance for schools and colleges. Draft for consultation 12 February 2026. 201p. III. Keeping children safe in education: Part one – staff quick reference. 1p.
Document: Keeping_children_safe_in_education_2026_government_consultation.pdf (PDF)

Found: may be subject to publication or disclosure under the Freedom of Information Act 2000, the Data Protection Act

Tuesday 17th February 2026

Source Page: I. Ordnance Survey Limited. Shareholder framework document. 41p. II. Letters dated 13/02/2026 from Ian Murray MP to Chi Onwurah MP and Lord Mair regarding the new shareholder framework document agreed between the Department for Science, Innovation and Technology, UK Government Investments and Ordnance Survey. 2 docs.
Document: Ordnance_Survey_Limited_Shareholder_Framework_Document.pdf (PDF)

Found: by any of the parties to this document under the Freedom of Information Act 2000, or the Data Protection Act

Tuesday 17th February 2026
Department of Health and Social Care
Source Page: I. Framework Agreement between Department of Health and Social Care (DHSC) and NHS Counter Fraud Authority (NHSCFA) 2026 to 2029. Annex A: Wider guidance; B: Communications; C: Relationships with other bodies; and D: Delegation letter. 5 docs. II. Letter dated 10/02/2026 from Karin Smyth MP to the Deposited Papers Clerk regarding documents for deposit in the House Libraries. 1p.
Document: DHSC_NHSCFA_Framework_Agreement_2026-2029.pdf (PDF)

Found: This applies to requests for information under the: • Freedom of Information Act 2000 • Data Protection Act

Thursday 12th February 2026
Ministry of Housing, Communities and Local Government
Source Page: I. Leasehold Advisory Service Framework Document. Incl. annex A. 32p. II. Letter dated 06/02/2026 from Baroness Taylor of Stevenage to the Deposited Papers Clerk regarding a document for deposit in the House libraries. 1p.
Document: 260211_FINAL_LEASE_Framework_Document.pdf (PDF)

Found: information is received by either party under the Freedom of Information Act 2000, or the Data Protection Act

Thursday 12th February 2026
Ministry of Housing, Communities and Local Government
Source Page: I. HM Land Registry Framework Document. Non-ministerial department. Incl. annex. 28p. II. Letter dated 06/02/2026 from Baroness Taylor of Stevenage to the Deposited Papers Clerk regarding a document for deposit in the House libraries. 1p.
Document: 2026-01-26_HMLR_Framework_Final.pdf (PDF)

Found: information is received by either party under the Freedom of Information Act 2000, or the Data Protection Act




Data Protection Act 2018 mentioned in Scottish results


Scottish Government Publications
Wednesday 18th March 2026
Marine Directorate
Source Page: Fishing vessel monitoring system (VMS) data for all of the International Council for the Exploration of the Seas (ICES) rectangles in Scotland: EIR release
Document: Fishing vessel monitoring system (VMS) data for all of the International Council for the Exploration of the Seas (ICES) rectangles in Scotland: EIR release (webpage)

Found: reason why that exception applies is explained in the Annex to this letter.To comply with the Data Protection Act

Wednesday 18th March 2026

Source Page: Scottish Forestry - Revised hydrological assessment information and correspondence regarding Carlinden Burn: EIR release
Document: Scottish Forestry - Revised hydrological assessment information and correspondence regarding Carlinden Burn: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 18th March 2026
Energy and Climate Change Directorate
Source Page: Peterhead Carbon Capture Power Station documentation: EIR release
Document: Peterhead Carbon Capture Power Station documentation: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 18th March 2026
Justice Directorate
Source Page: Information held by the Justice Directorate relating to the progression of rape and attempted rape cases in Scotland: FOI release
Document: Information held by the Justice Directorate relating to the progression of rape and attempted rape cases in Scotland: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 17th March 2026
Safer Communities Directorate
Source Page: Code of Practice on the Exercise by Constables in Scotland of Search Powers Conferred by Sections 289, 303C and 303Z21 of the Proceeds of Crime Act 2002
Document: Code of Practice on the Exercise by Constables in Scotland of Search Powers Conferred by Sections 289, 303C and 303Z21 of the Proceeds of Crime Act 2002 (PDF)

Found: shared when in accordance with the Human Rights Act 1998, the Gender Recognition Act 2004, the Data Protection Act

Tuesday 17th March 2026
Children and Families Directorate
Source Page: Costs of delivering funded ELC in private, third sector and childminding settings
Document: Costs of delivering funded ELC in private, third sector and childminding settings (PDF)

Found: All your data will be securely stored by Diffley Partnership in accordance with the Data Protection Act

Monday 16th March 2026
Local Government and Housing Directorate
Source Page: Mansion tax documentation: FOI release
Document: Mansion tax documentation: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 10th March 2026
Population Health Directorate
Source Page: Alcohol and drugs: partnership delivery framework - 2026
Document: Partnership Delivery Framework: Alcohol and Drugs (2026) (PDF)

Found: PHS processes personal data under the lawful basis of GDPR and the Data Protection Act 2018, which is

Tuesday 10th March 2026
Propriety and Ethics Directorate
Source Page: Scottish Ministerial Code correspondence: FOI release
Document: Scottish Ministerial Code correspondence: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 10th March 2026
Chief Operating Officer, NHS Scotland Directorate
Source Page: Correspondence regarding magnetic resonance imaging (MRI): FOI release
Document: Correspondence regarding magnetic resonance imaging (MRI): FOI release (webpage)

Found: data of individuals which would contravene data protection principles under the UK GDPR and Data Protection Act

Tuesday 10th March 2026
People Directorate
Source Page: Engagement of agency workers information: FOI release
Document: Engagement of agency workers information: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and section 34(1) of the Data Protection Act

Tuesday 10th March 2026

Source Page: Strategic Transport Projects Review (STPR2) correspondence: FOI release
Document: Strategic Transport Projects Review (STPR2) correspondence: FOI release (webpage)

Found: applicant and disclosure would contravene the data protection principles in Schedule 1 to the Data Protection Act

Tuesday 10th March 2026
Safer Communities Directorate
Source Page: Correspondence relating to protests against housing asylum seekers in hotels and which mention right wing ideologies: FOI release
Document: Correspondence relating to protests against housing asylum seekers in hotels and which mention right wing ideologies: FOI release (webpage)

Found: protection principles in the UK.General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 9th March 2026

Source Page: Scottish Forestry - Environmental Impact Assessment (EIA) screening opinion workflow and internal documents regarding Carlinden Burn: EIR release
Document: Scottish Forestry - Environmental Impact Assessment (EIA) screening opinion workflow and internal documents regarding Carlinden Burn: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 9th March 2026

Source Page: Scottish Forestry - Environmental Impact Assessment (EIA) screening opinion workflow and internal documents regarding Carlinden Burn: EIR release
Document: EIR 202500497166 - Information released - Annex A (PDF)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 9th March 2026

Source Page: Transport Scotland - Connel Bridge maintenance and spend information: EIR release
Document: Transport Scotland - Connel Bridge maintenance and spend information: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 9th March 2026
Energy and Climate Change Directorate
Source Page: Energy Consents public portal decision materials: EIR release
Document: Energy Consents public portal decision materials: EIR release (webpage)

Found: remains current and compliant with relevant statutory requirements, including GDPR and the Data Protection Act

Monday 9th March 2026

Source Page: Scottish Forestry felling permission applications and mapping standards queries: EIR Review
Document: Scottish Forestry felling permission applications and mapping standards queries: EIR Review (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 9th March 2026
Children and Families Directorate
Source Page: Shetland Islands Council Early Adopter Communities Project funding reports: FOI release
Document: Shetland Islands Council Early Adopter Communities Project funding reports: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 9th March 2026
Energy and Climate Change Directorate
Source Page: Windfall tax and energy profits levy correspondence: EIR release
Document: Windfall tax and energy profits levy correspondence: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 5th March 2026
Digital Directorate
Source Page: ScotAccount Equality Impact Assessment
Document: ScotAccount Equality Impact Assessment (PDF)

Found: The programme also reflects commitments under UK GDPR, the Data Protection Act 2018 and accessibility

Wednesday 4th March 2026

Source Page: Correspondence between Transport Scotland and East Dunbartonshire Council (EDC) regarding 20mph zones: FOI release
Document: Correspondence between Transport Scotland and East Dunbartonshire Council (EDC) regarding 20mph zones: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 4th March 2026
Marine Directorate
Source Page: Norwegian Mountain Salmon (NMS) correspondence: EIR release
Document: Norwegian Mountain Salmon (NMS) correspondence: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 4th March 2026

Source Page: Correspondence between Transport Scotland and East Dunbartonshire Council (EDC) regarding 20mph zones: FOI release
Document: FOI 202500499806 - Information Released - Attachment 1 - 3 (PDF)

Found: individuals with regard to the processing of Personal Data to which a Party is subject including the Data Protection Act

Wednesday 4th March 2026

Source Page: Transport Scotland correspondence regarding CalMac Ferries Ltd offshore workforce: FOI release
Document: Transport Scotland correspondence regarding CalMac Ferries Ltd offshore workforce: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 4th March 2026
Marine Directorate
Source Page: Consultation on fisheries management for inshore Marine Protected Area (MPA) and Priority Marine Feature (PMF): EIR release
Document: Consultation on fisheries management for inshore Marine Protected Area (MPA) and Priority Marine Feature (PMF): EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 3rd March 2026
Marine Directorate
Source Page: Correspondence between Fish Health Inspectorate and Loch Duart PLC relating to sea lice levels: EIR release
Document: Correspondence between Fish Health Inspectorate and Loch Duart PLC relating to sea lice levels: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 3rd March 2026
Communications and Ministerial Support Directorate
Source Page: Correspondence regarding GB News: FOI release
Document: Correspondence regarding GB News: FOI release (webpage)

Found: out in Article 5(1)(a) of the UK General Data Protection Regulation and section 34(1) of the Data Protection Act

Tuesday 3rd March 2026
Communications and Ministerial Support Directorate
Source Page: Emails between Scottish Government and GB News: FOI release
Document: Emails between Scottish Government and GB News: FOI release (webpage)

Found: out in Article 5(1)(a) of the UK General Data Protection Regulation and section 34(1) of the Data Protection Act

Tuesday 3rd March 2026

Source Page: Transport Scotland - Dundee Airport communications: EIR release
Document: Transport Scotland - Dundee Airport communications: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 3rd March 2026
Population Health Directorate
Source Page: Correspondence regarding extension of the Sugar Tax (Soft Drinks Industry Levy) and National Treatment Centre programme: FOI release
Document: Correspondence regarding extension of the Sugar Tax (Soft Drinks Industry Levy) and National Treatment Centre programme: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 3rd March 2026

Source Page: Scottish Government’s Boycott, Divestment and Sanctions (BDS) Against the State of Israel correspondence: FOI release
Document: Scottish Government’s Boycott, Divestment and Sanctions (BDS) Against the State of Israel correspondence: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 3rd March 2026

Source Page: Scottish Government’s Boycott, Divestment and Sanctions (BDS) Against the State of Israel correspondence: FOI release
Document: FOI 202500491728 - Information Released - Annex (PDF)

Found: with the requirements of the General Data Protection Regulation (EU) 2016/679 (the GDPR), the Data Protection Act

Tuesday 3rd March 2026
Marine Directorate
Source Page: Scottish Enterprise funding and Moray FLOW-Park project documentation: EIR release
Document: Scottish Enterprise funding and Moray FLOW-Park project documentation: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 3rd March 2026
Population Health Directorate
Source Page: Right to Recovery Addiction (Scotland) Bill correspondence: FOI release
Document: Right to Recovery Addiction (Scotland) Bill correspondence: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 3rd March 2026
Marine Directorate
Source Page: Correspondence relating to Offshore Solutions Group Ltd, Flow Park Investment Ltd and the Moray FLOW-Park Project: EIR release
Document: Correspondence relating to Offshore Solutions Group Ltd, Flow Park Investment Ltd and the Moray FLOW-Park Project: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 3rd March 2026
Justice Directorate
Source Page: Aberdeen City Council (Drinking in Public Places) Byelaws 2009 correspondence: FOI release
Document: Aberdeen City Council (Drinking in Public Places) Byelaws 2009 correspondence: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 2nd March 2026
Marine Directorate
Source Page: West of Orkney wind farm application conflict of interest information: EIR Review
Document: West of Orkney wind farm application conflict of interest information: EIR Review (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 2nd March 2026

Source Page: Documentation mentioning Irvine Welsh and Scottish Fiscal Commission: FOI release
Document: Documentation mentioning Irvine Welsh and Scottish Fiscal Commission: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 2nd March 2026
Constitution Directorate
Source Page: Correspondence to the First Minister regarding A Fresh Start with Independence: FOI release
Document: Correspondence to the First Minister regarding A Fresh Start with Independence: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 2nd March 2026

Source Page: Information relating to works on the Carlinden Burn site: EIR release
Document: Information relating to works on the Carlinden Burn site: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 2nd March 2026

Source Page: Ecological, wildlife and habitat information for Carlinden Burn: EIR release
Document: Ecological, wildlife and habitat information for Carlinden Burn: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 2nd March 2026
Constitution Directorate
Source Page: Correspondence to the Deputy First Minister and Cabinet Secretary for Economy and Gaelic regarding A Fresh Start with Independence: FOI release
Document: FOI 202500498553 - Information Released - Annex A and Annex B (PDF)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 2nd March 2026
Equality, Inclusion and Human Rights Directorate
Source Page: Scottish Catholic Church communications regarding the COVID pandemic: FOI Review
Document: Scottish Catholic Church communications regarding the COVID pandemic: FOI Review (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 2nd March 2026

Source Page: Scottish Forestry - Bowden Moor tree felling application details: EIR release
Document: Scottish Forestry - Bowden Moor tree felling application details: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 2nd March 2026
Agriculture and Rural Economy Directorate
Source Page: Future Farming Investment Scheme (FFIS) data: EIR release
Document: FOI 202600500681 - Information Released - Annex A (PDF)

Found: outlined in Article 5(1) of the General Data Protection Regulation (GDPR) and Section 34(1) of the Data Protection Act

Monday 2nd March 2026
Children and Families Directorate
Source Page: Correspondence from clinicians regarding the proposed downgrade of Wishaw Neonatal Unit: FOI release
Document: Correspondence from clinicians regarding the proposed downgrade of Wishaw Neonatal Unit: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 2nd March 2026
Chief Operating Officer, NHS Scotland Directorate
Source Page: Correspondence regarding United Kingdom Internal Market Act 2020 (UKIMA) for the Non-surgical Procedures and Functions of Medical Reviewers (Scotland) Bill: FOI release
Document: FOI 202500498378 - Information Released - Annex A and Annex B (PDF)

Found: regulate the relationship between FOISA, the UK General Data Protection Regulation and the Data Protection Act

Monday 2nd March 2026

Source Page: Transport Scotland - Small Vessel Replacement Project Gateway Review information: EIR release
Document: Transport Scotland - Small Vessel Replacement Project Gateway Review information: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and section 34(1) of the Data Protection Act

Friday 27th February 2026
Children and Families Directorate
Source Page: National Transitions to Adulthood Strategy for Young Disabled People – Supplementary Report
Document: Supplementary report for Transitions Strategy for Disabled Young People (PDF)

Found: Collaboration, including information sharing that is in keeping with the Data Protection Act (2018),

Thursday 26th February 2026

Source Page: Scottish Pubs Code: guidance for tied pub tenants and pub companies
Document: Scottish Pubs Adjudicator: complaints form for tied pub tenants (webpage)

Found: information given to us about you and your complaint for its intended purpose and in line with Data Protection Act

Wednesday 25th February 2026

Source Page: Adult Disability Payment caseload by Condition Type: FOI release
Document: Adult Disability Payment caseload by Condition Type: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 25th February 2026
People Directorate
Source Page: Scottish Government's Trans and Non-Binary Inclusion Policy: FOI release
Document: FOI 202500497199 - Information Released - Annex (PDF)

Found: including but not limited to medical treatment as special category personal data under the Data Protection Act

Wednesday 25th February 2026

Source Page: Social Security Scotland’s Retention and Disposal Policy and Guidance: FOI release
Document: FOI 202500498570 - Information Released - Spreadsheet (Excel)

Found: For Law Enforcement processing, Data Protection Act 2018, section 67.

Wednesday 25th February 2026

Source Page: Social Security Scotland’s Retention and Disposal Policy and Guidance: FOI release
Document: FOI 202500498570 - Information Released - Documents (PDF)

Found: Under UK General Data Protection Regulation (UK GDPR) and the Data Protection Act (DPA) 2018, personal

Wednesday 25th February 2026
Marine Directorate
Source Page: Fish health inspectorate’s (FHI) inspections data: EIR release
Document: Fish health inspectorate’s (FHI) inspections data: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 25th February 2026

Source Page: Transport Scotland 20mph speed limit roll out Dumfries and Galloway: FOI release
Document: Transport Scotland 20mph speed limit roll out Dumfries and Galloway: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 25th February 2026
Marine Directorate
Source Page: Analysis of aquaculture administrative burdens and mandatory mortality reporting: EIR release
Document: Analysis of aquaculture administrative burdens and mandatory mortality reporting: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 25th February 2026

Source Page: Woodland restoration grant to Invergeldie Estate, Oxygen Conservation: EIR release
Document: Woodland restoration grant to Invergeldie Estate, Oxygen Conservation: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 24th February 2026
Safer Communities Directorate
Source Page: Police Division risk register information: FOI release
Document: Police Division risk register information: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 24th February 2026

Source Page: First Minister and Leader of Sinn Fein meeting documentation: FOI release
Document: First Minister and Leader of Sinn Fein meeting documentation: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 24th February 2026
Communications and Ministerial Support Directorate
Source Page: Cabinet Secretary for Climate Action and Energy's expenses for COP30: FOI release
Document: Cabinet Secretary for Climate Action and Energy's expenses for COP30: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 24th February 2026
Local Government and Housing Directorate
Source Page: LAR Housing Trust loan information: FOI release
Document: LAR Housing Trust loan information: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 24th February 2026
Communications and Ministerial Support Directorate
Source Page: Documentation for meetings attended by Former first Minister and Aamer Anwar and Co: FOI release
Document: Documentation for meetings attended by Former first Minister and Aamer Anwar and Co: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 24th February 2026
Energy and Climate Change Directorate
Source Page: Carbon budget targets advice correspondence: EIR release
Document: EIR 202500496970 - Information released - Annex A, Annex B and Annex C (PDF)

Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act

Tuesday 24th February 2026

Source Page: Historic Environment Scotland meeting note information: FOI release
Document: Historic Environment Scotland meeting note information: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 24th February 2026
Financial Management Directorate
Source Page: Scottish Government budget and Barnett consequential meetings: FOI release
Document: Scottish Government budget and Barnett consequential meetings: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 24th February 2026
Propriety and Ethics Directorate
Source Page: Communications and information relating to the James Hamilton report and associated published legal advice (case reference number 281/2025): FOI Appeal
Document: Communications and information relating to the James Hamilton report and associated published legal advice (case reference number 281/2025): FOI Appeal (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 24th February 2026
Propriety and Ethics Directorate
Source Page: Communications and information relating to the James Hamilton report and associated published legal advice (case reference number 281/2025): FOI Appeal
Document: FOI 202400438168 - DN281 - Information Released - Batch 18 (PDF)

Found: Team (CRIT) at the ICO to discontinue an investigation into potential offences under s.170 Data Protection Act

Tuesday 24th February 2026
Propriety and Ethics Directorate
Source Page: Communications and information relating to the James Hamilton report and associated published legal advice (case reference number 281/2025): FOI Appeal
Document: FOI 202400438168 - DN281 - Information Released - Batch 15 (PDF)

Found: The Data Protection Act gives you the right to see information about yourself.

Tuesday 24th February 2026

Source Page: Social Security Scotland - Adult Disability Payment (ADP) data on specific recorded Primary Disability Conditions: FOI release
Document: Social Security Scotland - Adult Disability Payment (ADP) data on specific recorded Primary Disability Conditions: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 23rd February 2026
Local Government and Housing Directorate
Source Page: Non-Domestic Rates (Liability for Unoccupied Properties) (Scotland) Bill correspondence: FOI release
Document: Non-Domestic Rates (Liability for Unoccupied Properties) (Scotland) Bill correspondence: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 23rd February 2026
Agriculture and Rural Economy Directorate
Source Page: Agricultural payments computerised system information: FOI release
Document: Agricultural payments computerised system information: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 23rd February 2026
Energy and Climate Change Directorate
Source Page: Correspondence from Oil and Gas organisations regarding engagement with Scottish Government: EIR release
Document: EIR 202500496792 - Information Released - Annex (PDF)

Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act

Monday 23rd February 2026

Source Page: Recorded communications containing certain phrases: FOI release
Document: FOI 202500496330 - Information released - Annex A and Annex B (PDF)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 23rd February 2026

Source Page: Transport Scotland - Swallow Roundabout in Dundee correspondence: EIR release
Document: Transport Scotland - Swallow Roundabout in Dundee correspondence: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 23rd February 2026
Local Government and Housing Directorate
Source Page: Business Gateway funding communications: FOI release
Document: Business Gateway funding communications: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 23rd February 2026
Local Government and Housing Directorate
Source Page: Cabinet Secretary for Finance and Local Government correspondence regarding the Non-Domestic Rates (Scotland) Act 2020: FOI release
Document: Cabinet Secretary for Finance and Local Government correspondence regarding the Non-Domestic Rates (Scotland) Act 2020: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 23rd February 2026

Source Page: City of Edinburgh Council correspondence regarding the proposed new West Edinburgh secondary school: EIR Review
Document: City of Edinburgh Council correspondence regarding the proposed new West Edinburgh secondary school: EIR Review (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 23rd February 2026
Agriculture and Rural Economy Directorate
Source Page: Sustainable farming incentive documentation: EIR release
Document: Sustainable farming incentive documentation: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 23rd February 2026

Source Page: Scottish Forestry - East Netershield Woodland Creation Scheme correspondence: EIR relaese
Document: Scottish Forestry - East Netershield Woodland Creation Scheme correspondence: EIR relaese (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 23rd February 2026
Safer Communities Directorate
Source Page: Minutes from Serious Organised Crime Taskforce meetings: FOI release
Document: Minutes from Serious Organised Crime Taskforce meetings: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 23rd February 2026
Safer Communities Directorate
Source Page: Minutes from Serious Organised Crime Taskforce meetings: FOI release
Document: FOI 202600501737 - Information Released - Attachment (PDF)

Found: said that the Information Commissioner’s Office (ICO) was aware of issues since GDPR and the Data Protection Act

Monday 23rd February 2026
Mental Health Directorate
Source Page: NHS Highland neurodevelopmental and mental health information: FOI release
Document: NHS Highland neurodevelopmental and mental health information: FOI release (webpage)

Found: contravene the data protection principles in Article 5(1) of the UK GDPR and in section 34(1) of the Data Protection Act

Monday 23rd February 2026
Children and Families Directorate
Source Page: Correspondence sent to former First Minister regarding child sexual exploitation and abuse: FOI release
Document: FOI 202600499932 - Information Released - Annex (PDF)

Found: handled under the requirements of the EU General Data Protection Regulation (GDRP) and the Data Protection Act

Monday 23rd February 2026
Energy and Climate Change Directorate
Source Page: Community Wind Power correspondence: FOI release
Document: Community Wind Power correspondence: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in Section 34(1) of the Data Protection Act

Monday 23rd February 2026

Source Page: Reduction of public sector workforce risks registers and progress: FOI release
Document: Reduction of public sector workforce risks registers and progress: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 23rd February 2026
Local Government and Housing Directorate
Source Page: Correspondence regarding Non- Domestic Rates (Scotland) Act 2020: FOI release
Document: Correspondence regarding Non- Domestic Rates (Scotland) Act 2020: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 23rd February 2026
Communications and Ministerial Support Directorate
Source Page: Plans for proactive publication of relevant data and ongoing communications plans information: FOI release
Document: Plans for proactive publication of relevant data and ongoing communications plans information: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 23rd February 2026
Energy and Climate Change Directorate
Source Page: Correspondence regarding the Mosmorran Just Transition plan: EIR release
Document: Correspondence regarding the Mosmorran Just Transition plan: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 23rd February 2026
Energy and Climate Change Directorate
Source Page: Warmworks contract information: EIR release
Document: Warmworks contract information: EIR release (webpage)

Found: applicant and disclosure would contravene the data protection principles in Schedule 1 to the Data Protection Act

Monday 23rd February 2026

Source Page: Institute for Fiscal Studies and Barnett Formula documentation: FOI release
Document: Institute for Fiscal Studies and Barnett Formula documentation: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 23rd February 2026

Source Page: Scottish Forestry gender and specific demographic groups queries: FOI release
Document: FOI 202600501731 - Information Released - Annex C (PDF)

Found: respective obligations under the General Data Protection Regulation (EU) 2016/679 and the Data Protection Act

Monday 23rd February 2026

Source Page: Social Security Scotland Benefit payment statistics: FOI release
Document: Social Security Scotland Benefit payment statistics: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 23rd February 2026

Source Page: Cabinet Secretary for Constitution, External Affairs and Culture’s visit to Switzerland and Germany: FOI release
Document: FOI 202500496305 - Information Released - Annex (PDF)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 23rd February 2026
Local Government and Housing Directorate
Source Page: Copies of concern regarding Non-Domestic Rates (Scotland) Act 2020: FOI release
Document: Copies of concern regarding Non-Domestic Rates (Scotland) Act 2020: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 18th February 2026
Agriculture and Rural Economy Directorate
Source Page: Future Farming Investment Scheme correspondence regarding the assessment of common grazing land: EIR release
Document: EIR 202500494702 - Information Released - Annex A (PDF)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 18th February 2026

Source Page: Summerhall documentation: FOI release
Document: Summerhall documentation: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 18th February 2026
Environment and Forestry Directorate
Source Page: Meeting details between the Stove Industry Association and the Scottish Government: EIR request
Document: EIR 202500494885 - Information released - Annex A - Annec C (PDF)

Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act

Wednesday 18th February 2026
Justice Directorate
Source Page: Correspondence sent to Cabinet Secretary for Justice and Minister for Victims and Community Safety regarding prisons: FOI release
Document: Correspondence sent to Cabinet Secretary for Justice and Minister for Victims and Community Safety regarding prisons: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 18th February 2026
Energy and Climate Change Directorate
Source Page: Correspondence regarding the closure of Mossmorran: EIR release
Document: Correspondence regarding the closure of Mossmorran: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 18th February 2026
Internal Audit and Assurance Directorate
Source Page: Gate Review Child Health report: FOI release
Document: Gate Review Child Health report: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and section 34(1) of the Data Protection Act

Wednesday 18th February 2026
Chief Operating Officer, NHS Scotland Directorate
Source Page: National Elective Care Programme Gateway Review information: FOI release
Document: National Elective Care Programme Gateway Review information: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 18th February 2026

Source Page: Communications by Scottish Ministers relating to the future ownership and management of Dundee Airport: EIR release
Document: Communications by Scottish Ministers relating to the future ownership and management of Dundee Airport: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 18th February 2026

Source Page: First Minister Questions briefing notes on Scottish taxpayers paying less income tax than elsewhere in the UK: FOI release
Document: FOI 202500496273 - Information Released - Annex A (PDF)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 18th February 2026

Source Page: Museums Galleries Scotland documentation regarding the Equality and Human Rights Commission (EHRC): FOI release
Document: Museums Galleries Scotland documentation regarding the Equality and Human Rights Commission (EHRC): FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 18th February 2026
Social Security Directorate
Source Page: Social Security Programme Gateway Review information: FOI release
Document: Social Security Programme Gateway Review information: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 18th February 2026
Communications and Ministerial Support Directorate
Source Page: Correspondence which mentions former Chief Executive of the Scottish National Party: FOI release
Document: Correspondence which mentions former Chief Executive of the Scottish National Party: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 18th February 2026
Population Health Directorate
Source Page: Public health information regarding LED lighting: EIR Review
Document: Public health information regarding LED lighting: EIR Review (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 18th February 2026
Education Reform Directorate
Source Page: Proposed relocation of Glasgow Gaelic Primary School documentation: FOI release
Document: FOI 202500496130 - Information Released - Annex A (PDF)

Found: collect, store and use) the information you provide in a manner compatible with UK GDPR and the Data Protection Act

Wednesday 18th February 2026
Agriculture and Rural Economy Directorate
Source Page: Derogation from Agri-Environment Climate Scheme (AECS) contracts: EIR release
Document: Derogation from Agri-Environment Climate Scheme (AECS) contracts: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 18th February 2026
Agriculture and Rural Economy Directorate
Source Page: Assessment of Future Farming Investment Scheme applications correspondence: EIR release
Document: EIR 202500494687 - Information released - Annex A (PDF)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 17th February 2026
Social Security Directorate
Source Page: Details of the Cabinet Secretary for Social Justice's trip to London: FOI release
Document: Details of the Cabinet Secretary for Social Justice's trip to London: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 17th February 2026
Internal Audit and Assurance Directorate
Source Page: Gate Review HMP Glasgow report: FOI release
Document: Gate Review HMP Glasgow report: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and  section 34(1) of the Data Protection Act

Tuesday 17th February 2026
Marine Directorate
Source Page: Review of the Scottish Adjacent Waters Boundary Order 2009 communications: FOI release
Document: Review of the Scottish Adjacent Waters Boundary Order 2009 communications: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 17th February 2026

Source Page: Transport Scotland 'Mallaig Lochboisdale New Vessel Project' Gateway Review: FOI release
Document: Transport Scotland 'Mallaig Lochboisdale New Vessel Project' Gateway Review: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and section 34(1) of the Data Protection Act

Tuesday 17th February 2026
Internal Audit and Assurance Directorate
Source Page: Gate Review Mangata Project report: FOI release
Document: Gate Review Mangata Project report: FOI release (webpage)

Found: parties and disclosing it would contravene the data protection principles in Schedule 1 to the Data Protection Act

Tuesday 17th February 2026

Source Page: Transport Scotland - Dualling of the A96 documentation: EIR release
Document: Transport Scotland - Dualling of the A96 documentation: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 17th February 2026

Source Page: Transport Scotland 'Lochboisdale Gasay' completed Gateway Review information: FOI release
Document: Transport Scotland 'Lochboisdale Gasay' completed Gateway Review information: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and section 34(1) of the Data Protection Act

Tuesday 17th February 2026
Justice Directorate
Source Page: Justice Division risk registers: FOI release
Document: Justice Division risk registers: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 17th February 2026
Children and Families Directorate
Source Page: Correspondence between Ministers regarding grooming gangs: FOI release
Document: Correspondence between Ministers regarding grooming gangs: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 17th February 2026

Source Page: Transport impact assessment relating to temporary worker accommodation village in Thurso: FOI release
Document: Transport impact assessment relating to temporary worker accommodation village in Thurso: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 17th February 2026
Chief Operating Officer, NHS Scotland Directorate
Source Page: Correspondence and documentation regarding waiting list statistic: FOI release
Document: Correspondence and documentation regarding waiting list statistic: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 17th February 2026
Communications and Ministerial Support Directorate
Source Page: Justice Secretary attendance, itinerary, and correspondence on 19 November 2025: FOI release
Document: FOI 202500494722 - Information Released - Annex A (PDF)

Found: principles in Article 5(1) of the General Data Protection Regulation and in Section 34(1) of the Data Protection Act



Scottish Parliamentary Debates
Criminal Justice System (Challenges for Session 7)
240 speeches (160,353 words)
Wednesday 11th March 2026 - Committee
Mentions:
1: None of practice to update it in the light of UK legislative changes relating to changes from the Data Protection Act - Link to Speech




Data Protection Act 2018 mentioned in Welsh results


Welsh Committee Publications
Tuesday 3rd February 2026
PDF - Marshalled List of Amendments - 3 February 2026 (PDF 238KB)

Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill


Found: (4) In this section, “the data protection legislation” has the same meaning as in the Data Protection Act

Tuesday 3rd February 2026
PDF - Marshalled List of Amendments - 3 February 2026 (PDF 243KB) v2

Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill


Found: (4) In this section, “the data protection legislation” has the same meaning as in the Data Protection Act

Thursday 29th January 2026
PDF - Marshalled List of Amendments - 29 January 2026

Inquiry: Building Safety (Wales) Bill


Found: (5) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements

Tuesday 20th January 2026
PDF - Notice of Amendments – 20 January 2026 (PDF 231KB)

Inquiry: Building Safety (Wales) Bill


Found: (5) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements

Tuesday 16th December 2025
PDF - Notice of Amendments - 16 December 2025 (PDF 111KB)

Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill


Found: (4) In this section, “the data protection legislation” has the same meaning as in the Data Protection Act

Monday 15th December 2025
PDF - Welsh Government: Purpose and effect table - 15 December 2025

Inquiry: Building Safety (Wales) Bill


Found: The amendment replaces subsection (8) to refer to new section 183A of the Data Protection Act 2018 (

Thursday 11th December 2025
PDF - Marshalled List of Amendments - 11 December 2025

Inquiry: Homelessness and Social Housing Allocation (Wales) Bill


Found: purpose for which it is disclosed, and (b) handled and stored in accordance with— (i) the Data Protection Act

Thursday 11th December 2025
PDF - Notice of amendments - 11 December 2025

Inquiry: Building Safety (Wales) Bill


Found: Section 61, page 49, leave out lines 24 to 27 and insert— ‘(8) But see also section 183A of the Data Protection Act

Friday 5th December 2025
PDF - Marshalled List of Amendments - 5 December 2025

Inquiry: Homelessness and Social Housing Allocation (Wales) Bill


Found: purpose for which it is disclosed, and (b) handled and stored in accordance with— (i) the Data Protection Act

Thursday 4th December 2025
PDF - Marshalled List of Amendments - 4 December 2025 (PDF 420KB)

Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill


Found: Irranca-Davies 16 Section 24, page 12, after line 21, insert— ‘( ) But see also section 183A of the Data Protection Act

Thursday 4th December 2025
PDF - Notice of amendments - 4 December 2025

Inquiry: Homelessness and Social Housing Allocation (Wales) Bill


Found: purpose for which it is disclosed, and (b) handled and stored in accordance with— (i) the Data Protection Act

Monday 1st December 2025
PDF - Welsh Government: Purpose and effect table - 1 December 2025 (PDF 404KB)

Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill


Found: protection of prohibitions and restrictions etc on processing: relevant enactments) of the Data Protection Act

Thursday 27th November 2025
PDF - Notice of Amendments - 27 November 2025 (PDF 276KB)

Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill


Found: Irranca-Davies 16 Section 24, page 12, after line 21, insert— ‘( ) But see also section 183A of the Data Protection Act

Thursday 27th November 2025
PDF - Notice of Amendments - 27 November 2025 (PDF 276KB)

Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill


Found: Irranca-Davies 16 Section 24, page 12, after line 21, insert— ‘( ) But see also section 183A of the Data Protection Act

Tuesday 25th November 2025
PDF - Letter from the Cabinet Secretary for Finance and Welsh Language to the Legislation, Justice and Constitution Committee, 25 November 2025

Inquiry: Report on the Development of Tourism and Regulation of Visitor Accommodation (Wales) Bill


Found: However, the provisions under section 39 need to be read alongside section 183A of the Data Protection Act

Monday 17th November 2025
PDF - Welsh Government: Purpose and Effect Table - 17 November 2025

Inquiry: Homelessness and Social Housing Allocation (Wales) Bill


Found: Housing Registers as they are no longer required as a consequence of section 183A of the Data Protection Act


PDF - Notice of Amendments - 27 November 2025

Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill


Found: Irranca-Davies 16 Section 24, page 12, after line 21, insert— ‘( ) But see also section 183A of the Data Protection Act


PDF - Notice of Amendments - 27 November 2025

Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill


Found: Irranca-Davies 16 Section 24, page 12, after line 21, insert— ‘( ) But see also section 183A of the Data Protection Act


PDF - Welsh Government: Purpose and effect table - 1 December 2025

Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill


Found: protection of prohibitions and restrictions etc on processing: relevant enactments) of the Data Protection Act


PDF - Letter

Inquiry: Report on the Development of Tourism and Regulation of Visitor Accommodation (Wales) Bill


Found: However, the provisions under section 39 need to be read alongside section 183A of the Data Protection Act


PDF - Response letter from the Cabinet Secretary for Finance and Welsh Language to the Chair of the Legislation, Justice and Constitution Committee: Follow-up from the Legislation, Justice and Constitution Committee meeting held on 10 November 2025 - 25 November 2025

Inquiry: Report on the Development of Tourism and Regulation of Visitor Accommodation (Wales) Bill


Found: However, the provisions under section 39 need to be read alongside section 183A of the Data Protection Act


PDF - Marshalled List of Amendments - 4 December 2025

Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill


Found: Irranca-Davies 16 Section 24, page 12, after line 21, insert— ‘( ) But see also section 183A of the Data Protection Act


PDF - Marshalled List of amendments – 5 December 2025

Inquiry: Homelessness and Social Housing Allocation (Wales) Bill


Found: purpose for which it is disclosed, and (b) handled and stored in accordance with— (i) the Data Protection Act


PDF - Notice of amendments – 4 December 2025

Inquiry: Homelessness and Social Housing Allocation (Wales) Bill


Found: purpose for which it is disclosed, and (b) handled and stored in accordance with— (i) the Data Protection Act


PDF - Notice of amendments - 11 December 2025

Inquiry: Building Safety (Wales) Bill


Found: Section 61, page 49, leave out lines 24 to 27 and insert— ‘(8) But see also section 183A of the Data Protection Act


PDF - Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill, as amended at Stage 2 (PDF 462KB)

Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill


Found: (2) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements


PDF - Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill, as amended at Stage 2 (UNCHECKED)

Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill


Found: (2) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements


PDF - Welsh Government: Purpose and effect table - 15 December 2025

Inquiry: Building Safety (Wales) Bill


Found: The amendment replaces subsection (8) to refer to new section 183A of the Data Protection Act 2018 (


PDF - Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill, as amended at Stage 2 (UNCHECKED) (PDF 462KB)

Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill


Found: (2) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements


PDF - Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill, as amended at Stage 2 (PDF 462KB)

Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill


Found: (2) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements


PDF - Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill, as amended at Stage 2

Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill


Found: (2) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements


PDF - Notice of Amendments - 16 December 2025

Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill


Found: (4) In this section, “the data protection legislation” has the same meaning as in the Data Protection Act


PDF - Supplementary LCM

Inquiry: The Welsh Government’s Legislative Consent Memoranda on the Children’s Wellbeing and Schools Bill


Found: Education Act 2002 3 • The Academies Act 2010 • School Standards and Framework Act 1998 • Data Protection Act


PDF - Notice of Amendments – 20 January 2026

Inquiry: Building Safety (Wales) Bill


Found: (5) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements


PDF - Marshalled List of Amendments – 29 January 2026

Inquiry: Building Safety (Wales) Bill


Found: (5) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements


PDF - Llywodraeth Cymru: Tabl Diben ac Effaith - 17 Tachwedd 2025

Inquiry: Homelessness and Social Housing Allocation (Wales) Bill


Found: Housing Registers as they are no longer required as a consequence of section 183A of the Data Protection Act


PDF - Welsh Government: Purpose and effect table - 17 November 2025

Inquiry: Homelessness and Social Housing Allocation (Wales) Bill


Found: Housing Registers as they are no longer required as a consequence of section 183A of the Data Protection Act


PDF - report

Inquiry: Report on the Development of Tourism and Regulation of Visitor Accommodation (Wales) Bill


Found: letter adds that the provisions under section 39 need to be read alongside section 183A of the Data Protection Act


PDF - Marshalled List of Amendments - 3 February 2026

Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill


Found: (4) In this section, “the data protection legislation” has the same meaning as in the Data Protection Act


PDF - Revised Explanatory Memorandum and Regulatory Impact Assessment - 3 February 2026

Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill


Found: Information Commissioner's Office (ICO) is the independent regulatory office dealing with the Data Protection Act


PDF - Building Safety (Wales) Bill as amended at stage 2

Inquiry: Building Safety (Wales) Bill


Found: (5) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements


PDF - Building Safety (Wales) Bill

Inquiry: Building Safety (Wales) Bill


Found: (5) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements


PDF - Marshalled List of Amendments - 3 February 2026

Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill


Found: (4) In this section, “the data protection legislation” has the same meaning as in the Data Protection Act


PDF - Development of Tourism and Regulation of Visitor Accommodation (Wales) Bill

Inquiry: Report on the Development of Tourism and Regulation of Visitor Accommodation (Wales) Bill


Found: (5) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements


PDF - Stage 2 amended Bill (Unchecked)

Inquiry: Report on the Development of Tourism and Regulation of Visitor Accommodation (Wales) Bill


Found: (5) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements


PDF - 10. Manon Antoniazzi, Chief Executive of the Senedd

Inquiry: Introducing more independence and support into the complaints process in the Senedd.


Found: There is no need for information to be recorded – in doing so it could breach Data Protection Act.


PDF - Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill, as amended at Stage 3 (UNCHECKED) (PDF 463KB)

Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill


Found: (2) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements


PDF - Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill, as amended at Stage 3 (UNCHECKED)

Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill


Found: (2) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements


PDF - Development of Tourism and Regulation of Visitor Accommodation (Wales) Bill

Inquiry: Report on the Development of Tourism and Regulation of Visitor Accommodation (Wales) Bill


Found: (5) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements


PDF - Stage 2 amended Bill (Checked)

Inquiry: Report on the Development of Tourism and Regulation of Visitor Accommodation (Wales) Bill


Found: (5) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements


PDF - Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill, as amended at Stage 3 (CHECKED) (PDF 467KB)

Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill


Found: (2) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements


PDF - Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill, as amended at Stage 3

Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill


Found: (2) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements


PDF - Revised Explanatory Memorandum and Regulatory Impact Assessment – 24 February 2026

Inquiry: Building Safety (Wales) Bill


Found: restriction on the disclosure of information or a document; but by virtue of section 183A of the Data Protection Act


PDF - report

Inquiry: Inquiry into dignity and respect: Introducing more independence and support into the complaints process in the Senedd


Found: ▪ There is no need for information to be recorded – in doing so it could breach Data Protection Act


PDF - Building Safety (Wales) Bill as amended at stage 3

Inquiry: Building Safety (Wales) Bill


Found: the disclosure of information (however imposed). 15 (6) But see also section 183A of the Data Protection Act


PDF - Building Safety (Wales) Bill

Inquiry: Building Safety (Wales) Bill


Found: the disclosure of information (however imposed). 15 (6) But see also section 183A of the Data Protection Act


PDF - Supplementary LCM

Inquiry: The Welsh Government’s Legislative Consent Memorandum on the Crime and Policing Bill


Found: section 106(2) of the Data (Use and Access) Act 2025, which inserted section 183A into the Data Protection Act


PDF - Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill, as passed (PDF 461KB)

Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill


Found: (2) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements


PDF - Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill, as passed

Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill


Found: (2) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements


PDF - Building Safety (Wales) Bill

Inquiry: Building Safety (Wales) Bill


Found: (5) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements


PDF - Building Safety (Wales) Bill, as passed

Inquiry: Building Safety (Wales) Bill


Found: (5) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements


PDF - Stage 3 amended Bill (Unchecked)

Inquiry: Report on the Development of Tourism and Regulation of Visitor Accommodation (Wales) Bill


Found: (5) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements



Welsh Government Publications
Friday 20th March 2026

Source Page: Ynni Cymru capital grant funding programme 2026 to 2027: guidance
Document: Ynni Cymru capital grant funding programme 2026 to 2027: guidance (PDF)

Found: protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act

Wednesday 18th March 2026

Source Page: FOI release 26712: Deleted files
Document: Doc 2 (PDF)

Found: 7 Complaints The handling of some of this information is subject to the provisions of the Data Protection Act

Monday 16th March 2026

Source Page: FOI release 26725: Wales Japan Club
Document: Wales Japan Club (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Monday 16th March 2026

Source Page: FOI release 26725: Wales Japan Club
Document: Doc C (PDF)

Found: Information Act 2000 (the “FOIA”), the Environmental Information Regulations 2004 (the “EIR”), the Data Protection Act

Monday 16th March 2026

Source Page: FOI release 26725: Wales Japan Club
Document: Doc B (PDF)

Found: Information Act 2000 (the “FOIA”), the Environmental Information Regulations 2004 (the “EIR”), the Data Protection Act

Monday 16th March 2026

Source Page: FOI release 26725: Wales Japan Club
Document: Doc A (PDF)

Found: Information Act 2000 (the “FOIA”), the Environmental Information Regulations 2004 (the “EIR”), the Data Protection Act

Thursday 12th March 2026

Source Page: FOI release 26677: Pollution incident
Document: Pollution incident (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Thursday 12th March 2026

Source Page: Visitor levy: guidance for local authorities
Document: Visitor levy: guidance for local authorities (webpage)

Found: and relevant data protection legislation, including their existing statutory duties under the Data Protection Act

Thursday 12th March 2026

Source Page: Visitor levy: guidance for local authorities
Document: Visitor levy: guidance for local authorities (PDF)

Found: relevant data protection legislation, including their existing statutory duties under the Data Protection Act

Wednesday 11th March 2026

Source Page: National strategy for preventing and responding to child sexual abuse in Wales 2026 to 2036: children's rights impact assessment
Document: National strategy for preventing and responding to child sexual abuse in Wales 2026 to 2036: children's rights impact assessment (PDF)

Found: Informed consent procedures and secure data protection practices, in line with the Data Protection Act

Wednesday 11th March 2026

Source Page: FOI release 26675: Flooding and agriculture
Document: Doc 1 (PDF)

Found: obligations under the Freedom of Information Act 2000, the Environmental Information Act 2004 or the Data Protection Act

Tuesday 10th March 2026

Source Page: Active travel (National Survey for Wales): April 2024 to March 2025
Document: Active travel (National Survey for Wales): April 2024 to March 2025 (webpage)

Found: personal data underlying these statistics is processed in accordance with the requirements of the Data Protection Act

Tuesday 10th March 2026

Source Page: Attendance of pupils in maintained schools: 2 September 2025 to 27 February 2026
Document: Attendance of pupils in maintained schools: 2 September 2025 to 27 February 2026 (webpage)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Friday 6th March 2026

Source Page: Ffermio Bro - Farming in Designated Landscapes (stage 1): rules booklet 2026-28
Document: Ffermio Bro - Farming in Designated Landscapes (stage 1): rules booklet 2026-28 (webpage)

Found: obligations under the Freedom of Information Act 2000, the Environmental Information Act 2004 or the Data Protection Act

Wednesday 4th March 2026

Source Page: FOI release 26668: Wildlife Incident Investigation Scheme reports
Document: Wildlife Incident Investigation Scheme reports (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Friday 27th February 2026

Source Page: Single Application Form (SAF) 2026: rules booklet for woodland and organic schemes when claiming Sustainable Farming Scheme
Document: Single Application Form (SAF) 2026: rules booklet for woodland and organic schemes when claiming Sustainable Farming Scheme (PDF)

Found: accordance with its obligations and duties under the: • Freedom of Information Act 2000 • The Data Protection Act

Friday 27th February 2026

Source Page: Small Grants – Woodland Creation (window 10): rules booklet
Document: Small Grants – Woodland Creation (window 10): rules booklet (webpage)

Found: in accordance with the obligations and duties under the Freedom of Information Act 2000, the Data Protection Act

Friday 27th February 2026

Source Page: Woodland Creation Grant (window 6): rules booklet
Document: Woodland Creation Grant (window 6): rules booklet (webpage)

Found: in accordance with the obligations and duties under the Freedom of Information Act 2000, the Data Protection Act

Thursday 26th February 2026

Source Page: Common legislative solutions: a guide to tackling recurring policy issues in legislation
Document: Common legislative solutions: a guide to tackling recurring policy issues in legislation (PDF)

Found: schedule/1) (failure to comply with a stop notice is an offence) • section 155(1)(b) of the Data Protection Act

Tuesday 24th February 2026

Source Page: Attendance of pupils in maintained schools: 2 September 2025 to 13 February 2026
Document: Attendance of pupils in maintained schools: 2 September 2025 to 13 February 2026 (webpage)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Monday 23rd February 2026

Source Page: FOI release 26622: Rhos-farch Farm
Document: Rhos-farch Farm (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Monday 23rd February 2026

Source Page: Single Application Form (SAF) 2026: rules booklet for Basic Payment Scheme, woodland and organic schemes
Document: Single Application Form (SAF) 2026: rules booklet for Basic Payment Scheme, woodland and organic schemes (PDF)

Found: accordance with its obligations and duties under the: • Freedom of Information Act 2000 • The Data Protection Act

Thursday 19th February 2026

Source Page: Small Grant Scheme: Food and Drink Festivals and Events Scheme 2026 to 2027: application form
Document: Small Grant Scheme: Food and Drink Festivals and Events Scheme 2026 to 2027: application form (webpage)

Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004 or the Data Protection Act

Wednesday 18th February 2026

Source Page: FOI release 26596: Glyndŵr National Park
Document: Doc 1 (PDF)

Found: Information Act 2000 (the “FOIA”), the Environmental Information Regulations 2004 (the “EIR”), the Data Protection Act

Wednesday 18th February 2026

Source Page: FOI release 26606: Nation of Sanctuary
Document: Nation of Sanctuary (PDF)

Found: data protection principles. 5 ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act

Monday 16th February 2026

Source Page: FOI release 26586: St Ann Street, Chepstow
Document: St Ann Street, Chepstow (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Monday 16th February 2026

Source Page: FOI release 26579: St Ann Street, Chepstow
Document: St Ann Street, Chepstow (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Monday 16th February 2026

Source Page: FOI release 26571: Bridge House Farm
Document: Bridge House Farm (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Thursday 12th February 2026

Source Page: FOI release 26442and26567: Marine Nitrates Development Taskforce
Document: Marine Nitrates Development Taskforce (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Thursday 12th February 2026

Source Page: Performance and improvement framework for social services: additional guidance 2023 to 2024
Document: Performance and improvement framework for social services: additional guidance 2023 to 2024 (PDF)

Found: collected under this framework is governed by the General Data Protection Regulation (GDPR) and Data Protection Act

Wednesday 11th February 2026

Source Page: Changes to two codes of practice: Part 6 and Special Guardianship Orders
Document: Part 6 Code of Practice (Looked After and Accommodated Children): As amended with tracked changes (PDF)

Found: Authorities will need to satisfy themselves that they are complying with the Data Protection Act 2018

Wednesday 11th February 2026

Source Page: Changes to two codes of practice: Part 6 and Special Guardianship Orders
Document: Part 6 Code of Practice (Looked After and Accommodated Children): As amended (PDF)

Found: Authorities will need to satisfy themselves that they are complying with the Data Protection Act 2018

Tuesday 10th February 2026

Source Page: Attendance of pupils in maintained schools: 2 September 2025 to 30 January 2026
Document: Attendance of pupils in maintained schools: 2 September 2025 to 30 January 2026 (webpage)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Monday 9th February 2026

Source Page: FOI release 26553: Councillors standards
Document: Councillors standards (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)

Monday 9th February 2026

Source Page: FOI release 26556: St David’s Day Pilot
Document: St David’s Day Pilot (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Thursday 5th February 2026

Source Page: Fair work (National Survey for Wales): April 2024 to March 2025
Document: Fair work (National Survey for Wales): April 2024 to March 2025 (webpage)

Found: personal data underlying these statistics is processed in accordance with the requirements of the Data Protection Act

Thursday 5th February 2026

Source Page: FOI release 26544: Buckland Hall
Document: Buckland Hall (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Thursday 29th January 2026

Source Page: Young people not in education, employment or training (NEET): October 2024 to September 2025
Document: Young people not in education, employment or training (NEET): October 2024 to September 2025 (webpage)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Thursday 29th January 2026

Source Page: Evaluation of the elective home education statutory guidance
Document: Evaluation of the elective home education statutory guidance (PDF)

Found: with such services, in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act

Tuesday 27th January 2026

Source Page: Attendance of pupils in maintained schools: 2 September 2025 to 16 January 2026
Document: Attendance of pupils in maintained schools: 2 September 2025 to 16 January 2026 (webpage)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Monday 26th January 2026

Source Page: FOI release 26526: Great British Railways
Document: Great British Railways (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Wednesday 21st January 2026

Source Page: Labour market statistics (Annual Population Survey): October 2024 to September 2025
Document: Labour market statistics (Annual Population Survey): October 2024 to September 2025 (webpage)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Tuesday 20th January 2026

Source Page: FOI release 26510: BBC
Document: BBC (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Tuesday 20th January 2026

Source Page: FOI release 26383: Dingestow crossing
Document: Doc 7 (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Thursday 15th January 2026

Source Page: FOI release 26503: Animal welfare
Document: Doc 1 (PDF)

Found: Commissioner's Data Sharing Code of Practice of May 2011 1.1.5 Data Protection Legislation : (i) the Data Protection Act

Thursday 15th January 2026

Source Page: FOI release 26503: Animal welfare
Document: Animal welfare (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Tuesday 13th January 2026

Source Page: Attendance of pupils in maintained schools: 2 September 2025 to 2 January 2026
Document: Attendance of pupils in maintained schools: 2 September 2025 to 2 January 2026 (webpage)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Wednesday 7th January 2026

Source Page: General funding round window 3 (Welsh Marine and Fisheries Scheme): guidance
Document: General funding round window 3 (Welsh Marine and Fisheries Scheme): guidance (PDF)

Found: Freedom of Information Act 2000, the 28 Environmental Information Regulations 2004 and the Data Protection Act

Tuesday 6th January 2026

Source Page: FOI release 26504: Respiratory Protective Equipment
Document: Respiratory Protective Equipment (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)

Tuesday 6th January 2026

Source Page: FOI release 26422: Rhydycar West
Document: Rhydycar West (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Tuesday 6th January 2026

Source Page: FOI release 26399 and 26498: Water quality
Document: Water quality (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Tuesday 6th January 2026

Source Page: FOI release 26401: Rhydycar West
Document: Rhydycar West (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Monday 5th January 2026

Source Page: Small Grants - Environment (landscape and pollinators): general rules booklet 2026
Document: Small Grants - Environment (landscape and pollinators): general rules booklet 2026 (webpage)

Found: in accordance with the obligations and duties under the Freedom of Information Act 2000, the Data Protection Act

Monday 5th January 2026

Source Page: Woodland Creation Planning Scheme (January 2026): rules booklet
Document: Woodland Creation Planning Scheme (January 2026): rules booklet (webpage)

Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004 or the Data Protection Act

Monday 22nd December 2025

Source Page: Freedom of Information (FOI): request from the Welsh Government
Document: Requesting information from the Welsh Government (webpage)

Found: The Data Protection Act 2018, Freedom of Information Act 2000 and the Environmental Information Regulations

Wednesday 17th December 2025

Source Page: FOI release 26284: Llansteffan North Green car park
Document: Llansteffan North Green car park (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Wednesday 17th December 2025

Source Page: Sustainable Farming Scheme (2026): universal layer: rules booklet
Document: Sustainable Farming Scheme (2026): universal layer: rules booklet (PDF)

Found: used by the Welsh Government in accordance with its obligations and duties under the: • The Data Protection Act

Tuesday 16th December 2025

Source Page: FOI release 26391: Cafcass complaints
Document: Cafcass complaints (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Tuesday 16th December 2025

Source Page: Significant infrastructure projects (SIP): notification of proposed application
Document: Significant infrastructure projects (SIP): notification of proposed application (PDF)

Found: supplied by you in this form, is in accordance with the terms of our registration under the Data Protection Act

Tuesday 16th December 2025

Source Page: Attendance of pupils in maintained schools: 2 September to 5 December 2025
Document: Attendance of pupils in maintained schools: 2 September to 5 December 2025 (webpage)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Tuesday 16th December 2025

Source Page: Remote working (National Survey for Wales): April 2024 to March 2025
Document: Remote working (National Survey for Wales): April 2024 to March 2025 (webpage)

Found: personal data underlying these statistics is processed in accordance with the requirements of the Data Protection Act



Welsh Senedd Debates
Group 11: Office of Environmental Governance: disclosure of information and confidentiality (Amendments 16, 17, 18)

Thursday 11th December 2025
Mentions:
1: Huw Irranca-Davies (Welsh Labour and Co-operative Party - Ogmore) Amendments 16, 17, 18 in my name make necessary amendments to reflect changes to the Data Protection Act - Link to Speech

2. Development of Tourism and Regulation of Visitor Accommodation (Wales) Bill: Evidence Session 1

Wednesday 5th November 2025
Mentions:
1: None gateways that are in the Bill, and highlights that that has to be read with reference to the Data Protection Act - Link to Speech