Data Protection Act 2018

Alert Sample

View the Parallel Parliament page for the Data Protection Act 2018

Information since 17 Dec 2024, 9:35 a.m.

Data Protection Act 2018 mentioned

Parliamentary Debates
Crime and Policing Bill (Twelfth sitting) 67 speeches (18,070 words) Committee stage: 12th Sitting Tuesday 29th April 2025 - Public Bill Committees Home Office Mentions: 1: Diana Johnson (Lab - Kingston upon Hull North and Cottingham) data will be subject to the requirements in the UK general data protection regulation and the Data Protection Act - Link to Speech
Bus Services (No. 2) Bill [HL] 88 speeches (14,744 words) Report stage Wednesday 2nd April 2025 - Lords Chamber Department for Transport Mentions: 1: None protection legislation”, “personal data” and “processing” have the same meanings as in the Data Protection Act - Link to Speech 2: None protection legislation”, “personal data” and “processing” have the same meanings as in the Data Protection Act - Link to Speech

Parliamentary Debates

Crime and Policing Bill (Twelfth sitting)
67 speeches (18,070 words)
Committee stage: 12th Sitting
Tuesday 29th April 2025 - Public Bill Committees
Home Office

Mentions:
1: Diana Johnson (Lab - Kingston upon Hull North and Cottingham) data will be subject to the requirements in the UK general data protection regulation and the Data Protection Act - Link to Speech

Bus Services (No. 2) Bill [HL]
88 speeches (14,744 words)
Report stage
Wednesday 2nd April 2025 - Lords Chamber
Department for Transport

Mentions:
1: None protection legislation”, “personal data” and “processing” have the same meanings as in the Data Protection Act - Link to Speech
2: None protection legislation”, “personal data” and “processing” have the same meanings as in the Data Protection Act - Link to Speech

Select Committee Documents
Tuesday 29th April 2025 Oral Evidence - Ofcom, and Information Commissioner's Office Social media, misinformation and harmful algorithms - Science, Innovation and Technology Committee Found: the core of the age appropriate design code, which is a code of practice issued under the Data Protection Act
Thursday 24th April 2025 Written Evidence - Lawyers Against Transnational Repression (working group) TRUK0148 - Transnational repression in the UK Transnational repression in the UK - Human Rights (Joint Committee) Found: guidance explains: “It is standard policy for central or 6 Section 6(1) Human Rights Act 1998 7 Data Protection Act
Wednesday 23rd April 2025 Oral Evidence - Eleanor Lyons, Independent Anti-Slavery Commissioner, National Crime Agency, and Border Force Forced Labour in UK Supply Chains - Human Rights (Joint Committee) Found: There is a probably a cultural reticence because of a fear of breaching the Data Protection Act, which
Wednesday 23rd April 2025 Correspondence - Letter from the Director of Public Prosecutions relating to the Committee’s report on the Police response to the 2024 summer disorder 11.04.2025 Home Affairs Committee Found: the release of such material is governed by the UK General Data Protection Regulation and Data Protection Act

Written Answers
NHS: Artificial Intelligence Asked by: Andrew Murrison (Conservative - South West Wiltshire) Wednesday 30th April 2025 Question to the Department of Health and Social Care: To ask the Secretary of State for Health and Social Care, what assessment he has made of the potential implications for the NHS of the use of (a) generative AI and (b) large language models; and whether pilot schemes are underway to assess potential uses. Answered by Karin Smyth - Minister of State (Department of Health and Social Care) New artificial intelligence (AI) technologies are being developed that have the potential to improve healthcare delivery and to provide significant cost savings to the National Health Service. One example is the use of automated voice to text tools, which use generative AI to listen to and transcribe patient notes. Currently, there are ongoing assessments of the use of these tools in the NHS as these technologies could help ease the administrative burden faced by staff and make systems more efficient. Several NHS trusts are running trials, including a multi-site assessment of the impact of using automated transcription software. The NHS AI team is monitoring these developments and developing guidance for the responsible use of these tools. This guidance will be informed by the Government’s broader guidance on the use of Generative AI in the public sector. There are strict safeguards in place throughout the NHS to protect data. All providers of services which handle patient data must protect that data in line with the UK General Data Protection Regulation (GDPR), and Data Protection Act 2018, and every health organisation is required to appoint a Caldicott Guardian to advise on the protection of people’s health and care data, and ensure it is used properly. This includes where AI is used in relation to patient records. To mitigate the likelihood and severity of any potential harm to individuals arising from use of data in AI, the Information Commissioner’s Office (ICO) has developed detailed AI guidance which provides an overarching view of data protection, including Data Protection Impact Assessments and UK GDPR. It has also produced an AI toolkit to support organisations auditing compliance of their AI-based technologies. NHS bodies are expected to make use of this guidance and toolkit.
Genetics: Databases Asked by: Julian Lewis (Conservative - New Forest East) Tuesday 29th April 2025 Question to the Department for Science, Innovation & Technology: To ask the Secretary of State for Science, Innovation and Technology, what privacy safeguards exist to prevent identifiable peoples' sequenced DNA being passed to third parties when companies which offer family or other research services to members of the public (a) are sold and (b) go into liquidation; and what assessment he has made of the potential merits of introducing stronger safeguards. Answered by Chris Bryant - Minister of State (Department for Culture, Media and Sport) The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA) already require organisations to process personal data lawfully, fairly, transparently and securely, unless certain limited exemptions apply. Organisations are also required to meet additional conditions and safeguards when processing ‘special category’ data, or data that is more sensitive, such as DNA data. The UK’s data protection legislation does not automatically prohibit the selling or sharing of personal data with third parties. Instead, it sets out a framework within which data sharing may safely take place. The Information Commissioner’s Office (ICO), the UK’s Data Protection Regulator, has published a statutory Code of Practice on data sharing which contains practical guidance for organisations on how to share data fairly and lawfully, available at: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/data-sharing/data-sharing-a-code-of-practice/. The ICO has also published guidance to help organisations processing special category data, available at: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/lawful-basis/a-guide-to-lawful-basis/special-category-data/.
Internet: Privacy Asked by: Ian Byrne (Labour - Liverpool West Derby) Monday 28th April 2025 Question to the Department for Science, Innovation & Technology: To ask the Secretary of State for Science, Innovation and Technology, if his Department will take steps to strengthen consumers' online privacy protections. Answered by Feryal Clark - Parliamentary Under Secretary of State (Department for Science, Innovation and Technology) The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA) apply to all online services that use personal data and require organisations to process personal data lawfully, fairly, transparently and securely, unless certain limited exemptions apply. The legislation already gives consumers important rights in relation to their personal data, such as the right to seek access to it, object to its processing or seek its erasure. Consumers can also bring complaints about the handling of their personal data to the independent regulator for data protection, the Information Commissioner’s Office (ICO). Measures in the Data (Use and Access) Bill include revamping the ICO with a new governance structure and powers of enforcement – ensuring people’s personal data will continue to be protected to high standards. Under the new digital markets regime, the Competition and Markets Authority could also introduce targeted remedies that strengthen consumer choice and control.
Recordings: Privacy and Security Asked by: Baroness Bennett of Manor Castle (Green Party - Life peer) Monday 14th April 2025 Question to the Department for Science, Innovation & Technology: To ask His Majesty's Government what assessment they have made of the impacts of life recorders, particularly in regard to privacy and security, and what plans they have to take legal, regulatory or other action in response. Answered by Baroness Jones of Whitchurch - Baroness in Waiting (HM Household) (Whip) All UK organisations processing personal data must comply with UK GDPR and the Data Protection Act (DPA) 2018. This applies to all technologies, including AI-based life recorders. The UK GDPR and the DPA, are risk-based and technology neutral, ensuring organisations process data lawfully, fairly, and transparently. On data security, the UK has strong safeguards, regulatory oversight, and enforcement to ensure responsible data handling. We continuously assess evolving threats to UK data and will take further action if necessary to protect national security.
Data Protection: Age of Consent Asked by: Sorcha Eastwood (Alliance - Lagan Valley) Wednesday 9th April 2025 Question to the Department for Science, Innovation & Technology: To ask the Secretary of State for Science, Innovation and Technology, what recent assessment he has made of the potential merits of raising the digital age of consent. Answered by Feryal Clark - Parliamentary Under Secretary of State (Department for Science, Innovation and Technology) When Information Society Services, such as social media or live streaming sites, rely on consent to process children’s data, consent is only lawful in respect of children under the age of 13 when parental authority has been granted. The current age of consent was set by Parliament in the Data Protection Act 2018. We will continue to keep the evidence for and against change in this area under review.
Motability: Payments Asked by: Nick Timothy (Conservative - West Suffolk) Tuesday 8th April 2025 Question to the Department for Work and Pensions: To ask the Secretary of State for Work and Pensions, if she will make an estimate of the total (a) value and (b) number of payments made by her Department to Motability in each year since 2010. Answered by Stephen Timms - Minister of State (Department for Work and Pensions) The Department for Work and Pensions retains financial information for 7 years in compliance with the fifth principle of the Data Protection Act, therefore we are unable to provide historic data back to 2010. We can provide the requested estimated total Motability values data for the previous three calendar years, DWP has paid: 2022 - c£607 million 2023 - c£600 million 2024 - c£600 million We are unable to provide volumes data, and value data for earlier years within the timescales required for this request, due to the time required to interrogate our systems to obtain this level of information.

Written Answers

NHS: Artificial Intelligence
Asked by: Andrew Murrison (Conservative - South West Wiltshire)
Wednesday 30th April 2025

Question to the Department of Health and Social Care:

To ask the Secretary of State for Health and Social Care, what assessment he has made of the potential implications for the NHS of the use of (a) generative AI and (b) large language models; and whether pilot schemes are underway to assess potential uses.

Answered by Karin Smyth - Minister of State (Department of Health and Social Care)

New artificial intelligence (AI) technologies are being developed that have the potential to improve healthcare delivery and to provide significant cost savings to the National Health Service. One example is the use of automated voice to text tools, which use generative AI to listen to and transcribe patient notes.

Currently, there are ongoing assessments of the use of these tools in the NHS as these technologies could help ease the administrative burden faced by staff and make systems more efficient. Several NHS trusts are running trials, including a multi-site assessment of the impact of using automated transcription software. The NHS AI team is monitoring these developments and developing guidance for the responsible use of these tools. This guidance will be informed by the Government’s broader guidance on the use of Generative AI in the public sector.

There are strict safeguards in place throughout the NHS to protect data. All providers of services which handle patient data must protect that data in line with the UK General Data Protection Regulation (GDPR), and Data Protection Act 2018, and every health organisation is required to appoint a Caldicott Guardian to advise on the protection of people’s health and care data, and ensure it is used properly. This includes where AI is used in relation to patient records.

To mitigate the likelihood and severity of any potential harm to individuals arising from use of data in AI, the Information Commissioner’s Office (ICO) has developed detailed AI guidance which provides an overarching view of data protection, including Data Protection Impact Assessments and UK GDPR. It has also produced an AI toolkit to support organisations auditing compliance of their AI-based technologies. NHS bodies are expected to make use of this guidance and toolkit.

Genetics: Databases
Asked by: Julian Lewis (Conservative - New Forest East)
Tuesday 29th April 2025

Question to the Department for Science, Innovation & Technology:

To ask the Secretary of State for Science, Innovation and Technology, what privacy safeguards exist to prevent identifiable peoples' sequenced DNA being passed to third parties when companies which offer family or other research services to members of the public (a) are sold and (b) go into liquidation; and what assessment he has made of the potential merits of introducing stronger safeguards.

Answered by Chris Bryant - Minister of State (Department for Culture, Media and Sport)

The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA) already require organisations to process personal data lawfully, fairly, transparently and securely, unless certain limited exemptions apply. Organisations are also required to meet additional conditions and safeguards when processing ‘special category’ data, or data that is more sensitive, such as DNA data.

The UK’s data protection legislation does not automatically prohibit the selling or sharing of personal data with third parties. Instead, it sets out a framework within which data sharing may safely take place.

The Information Commissioner’s Office (ICO), the UK’s Data Protection Regulator, has published a statutory Code of Practice on data sharing which contains practical guidance for organisations on how to share data fairly and lawfully, available at: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/data-sharing/data-sharing-a-code-of-practice/.

The ICO has also published guidance to help organisations processing special category data, available at: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/lawful-basis/a-guide-to-lawful-basis/special-category-data/.

Internet: Privacy
Asked by: Ian Byrne (Labour - Liverpool West Derby)
Monday 28th April 2025

Question to the Department for Science, Innovation & Technology:

To ask the Secretary of State for Science, Innovation and Technology, if his Department will take steps to strengthen consumers' online privacy protections.

Answered by Feryal Clark - Parliamentary Under Secretary of State (Department for Science, Innovation and Technology)

The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA) apply to all online services that use personal data and require organisations to process personal data lawfully, fairly, transparently and securely, unless certain limited exemptions apply. The legislation already gives consumers important rights in relation to their personal data, such as the right to seek access to it, object to its processing or seek its erasure. Consumers can also bring complaints about the handling of their personal data to the independent regulator for data protection, the Information Commissioner’s Office (ICO).

Measures in the Data (Use and Access) Bill include revamping the ICO with a new governance structure and powers of enforcement – ensuring people’s personal data will continue to be protected to high standards. Under the new digital markets regime, the Competition and Markets Authority could also introduce targeted remedies that strengthen consumer choice and control.

Recordings: Privacy and Security
Asked by: Baroness Bennett of Manor Castle (Green Party - Life peer)
Monday 14th April 2025

Question to the Department for Science, Innovation & Technology:

To ask His Majesty's Government what assessment they have made of the impacts of life recorders, particularly in regard to privacy and security, and what plans they have to take legal, regulatory or other action in response.

Answered by Baroness Jones of Whitchurch - Baroness in Waiting (HM Household) (Whip)

All UK organisations processing personal data must comply with UK GDPR and the Data Protection Act (DPA) 2018. This applies to all technologies, including AI-based life recorders. The UK GDPR and the DPA, are risk-based and technology neutral, ensuring organisations process data lawfully, fairly, and transparently. On data security, the UK has strong safeguards, regulatory oversight, and enforcement to ensure responsible data handling. We continuously assess evolving threats to UK data and will take further action if necessary to protect national security.

Data Protection: Age of Consent
Asked by: Sorcha Eastwood (Alliance - Lagan Valley)
Wednesday 9th April 2025

Question to the Department for Science, Innovation & Technology:

To ask the Secretary of State for Science, Innovation and Technology, what recent assessment he has made of the potential merits of raising the digital age of consent.

Answered by Feryal Clark - Parliamentary Under Secretary of State (Department for Science, Innovation and Technology)

When Information Society Services, such as social media or live streaming sites, rely on consent to process children’s data, consent is only lawful in respect of children under the age of 13 when parental authority has been granted. The current age of consent was set by Parliament in the Data Protection Act 2018. We will continue to keep the evidence for and against change in this area under review.

Motability: Payments
Asked by: Nick Timothy (Conservative - West Suffolk)
Tuesday 8th April 2025

Question to the Department for Work and Pensions:

To ask the Secretary of State for Work and Pensions, if she will make an estimate of the total (a) value and (b) number of payments made by her Department to Motability in each year since 2010.

Answered by Stephen Timms - Minister of State (Department for Work and Pensions)

The Department for Work and Pensions retains financial information for 7 years in compliance with the fifth principle of the Data Protection Act, therefore we are unable to provide historic data back to 2010. We can provide the requested estimated total Motability values data for the previous three calendar years, DWP has paid:

2022 - c£607 million

2023 - c£600 million

2024 - c£600 million

We are unable to provide volumes data, and value data for earlier years within the timescales required for this request, due to the time required to interrogate our systems to obtain this level of information.

Secondary Legislation
Human Medicines (Amendments Relating to Hub and Spoke Dispensing etc.) Regulations 2025 These Regulations amend the Human Medicines Regulations 2012 (“the 2012 Regulations”), which govern the arrangements throughout the United Kingdom for the licensing, manufacture, marketing, wholesale dealing and the sale and supply of medicines for human use. They also amend the Medicines Act 1968 (“the 1968 Act”). Department of Health and Social Care Parliamentary Status - Text of Legislation - Draft affirmative Laid: Tuesday 29th April - In Force: Not stated Found: paragraph 2(2)(a), (c) and (d) of Schedule 1 (special categories of personal data etc) to, the Data Protection Act

Secondary Legislation

Human Medicines (Amendments Relating to Hub and Spoke Dispensing etc.) Regulations 2025
These Regulations amend the Human Medicines Regulations 2012 (“the 2012 Regulations”), which govern the arrangements throughout the United Kingdom for the licensing, manufacture, marketing, wholesale dealing and the sale and supply of medicines for human use. They also amend the Medicines Act 1968 (“the 1968 Act”).
Department of Health and Social Care

Parliamentary Status - Text of Legislation - Draft affirmative
Laid: Tuesday 29th April - In Force: Not stated

Found: paragraph 2(2)(a), (c) and (d) of Schedule 1 (special categories of personal data etc) to, the Data Protection Act

Parliamentary Research
Data (Use and Access) Bill [HL]: progress of the bill - CBP-10212 Apr. 29 2025 Found: Information Commissioner’s role Clause 95 of bill 179 (PDF) would amend section 139 of the Data Protection Act
Quantum computing, sensing and communications - POST-PN-0742 Apr. 22 2025 Found: intelligence.202 Existing legislation to prevent misuse, such as the Computer Misuse Act 1990, Data Protection Act

Bill Documents
May. 06 2025 Notices of Amendments as at 6 May 2025 Data (Use and Access) Bill [HL] 2024-26 Amendment Paper Found: regulations make provision requiring the Information Commission (under section 114 of the Data Protection Act
May. 06 2025 Notices of Amendments as at 6 May 2025 Crime and Policing Bill 2024-26 Amendment Paper Found: (2) For the purposes of Article 6(1) of the UK GDPR, section 35 of the Data Protection Act 2018 (“
May. 02 2025 Notices of Amendments as at 2 May 2025 Data (Use and Access) Bill [HL] 2024-26 Amendment Paper Found: regulations make provision requiring the Information Commission (under section 114 of the Data Protection Act
May. 02 2025 Notices of Amendments as at 2 May 2025 Crime and Policing Bill 2024-26 Amendment Paper Found: (2) For the purposes of Article 6(1) of the UK GDPR, section 35 of the Data Protection Act 2018 (“
May. 01 2025 Notices of Amendments as at 1 May 2025 Data (Use and Access) Bill [HL] 2024-26 Amendment Paper Found: regulations make provision requiring the Information Commission (under section 114 of the Data Protection Act
May. 01 2025 Notices of Amendments as at 1 May 2025 Crime and Policing Bill 2024-26 Amendment Paper Found: (2) For the purposes of Article 6(1) of the UK GDPR, section 35 of the Data Protection Act 2018 (“
Apr. 30 2025 Notices of Amendments as at 30 April 2025 Data (Use and Access) Bill [HL] 2024-26 Amendment Paper Found: regulations make provision requiring the Information Commission (under section 114 of the Data Protection Act
Apr. 30 2025 Notices of Amendments as at 30 April 2025 Crime and Policing Bill 2024-26 Amendment Paper Found: (2) For the purposes of Article 6(1) of the UK GDPR, section 35 of the Data Protection Act 2018 (“
Apr. 30 2025 Bill 229 2024-25 (as brought from the House of Lords) - large print Bus Services (No. 2) Bill [HL] 2024-26 Bill Found: protection legislation”, “personal data” and “processing” have the same meanings as in the Data Protection Act
Apr. 30 2025 Bill 229 2024-25 (as brought from the House of Lords) Bus Services (No. 2) Bill [HL] 2024-26 Bill Found: protection legislation”, “personal data” and “processing” have the same meanings as in the Data Protection Act
Apr. 30 2025 HL Bill 96 Explanatory Notes Public Authorities (Fraud, Error and Recovery) Bill 2024-26 Explanatory Notes Found: It can also ask for information under the Data Protection Act 2018, but cannot compel it under this
Apr. 30 2025 HL Bill 96 (as brought from the Commons) Public Authorities (Fraud, Error and Recovery) Bill 2024-26 Bill Found: (9) In this section— “data protection legislation” has the same meaning as in the Data Protection Act
Apr. 30 2025 Human Rights Memorandum for the Bill as brought from the House of Commons Public Authorities (Fraud, Error and Recovery) Bill 2024-26 Human rights memorandum Found: relation to the use of powers to gather, process and share information (s ections 115 & 116, Data Protection Act
Apr. 29 2025 Data (Use and Access) Bill [HL]: progress of the bill Data (Use and Access) Bill [HL] 2024-26 Briefing papers Found: Information Commissioner’s role Clause 95 of bill 179 (PDF) would amend section 139 of the Data Protection Act
Apr. 29 2025 Notices of Amendments as at 29 April 2025 Data (Use and Access) Bill [HL] 2024-26 Amendment Paper Found: regulations make provision requiring the Information Commission (under section 114 of the Data Protection Act
Apr. 29 2025 Public Bill Committee Amendments as at 29 April 2025 Crime and Policing Bill 2024-26 Amendment Paper Found: (2) For the purposes of Article 6(1) of the UK GDPR, section 35 of the Data Protection Act 2018 (“
Apr. 28 2025 Notices of Amendments as at 28 April 2025 Data (Use and Access) Bill [HL] 2024-26 Amendment Paper Found: regulations make provision requiring the Information Commission (under section 114 of the Data Protection Act
Apr. 28 2025 Notices of Amendments as at 28 April 2025 Crime and Policing Bill 2024-26 Amendment Paper Found: (2) For the purposes of Article 6(1) of the UK GDPR, section 35 of the Data Protection Act 2018 (“
Apr. 25 2025 Notices of Amendments as at 25 April 2025 Data (Use and Access) Bill [HL] 2024-26 Amendment Paper Found: regulations make provision requiring the Information Commission (under section 114 of the Data Protection Act
Apr. 25 2025 Notices of Amendments as at 25 April 2025 Crime and Policing Bill 2024-26 Amendment Paper Found: (2) For the purposes of Article 6(1) of the UK GDPR, section 35 of the Data Protection Act 2018 (“
Apr. 25 2025 HL Bill 81-I Marshalled list for Committee Employment Rights Bill 2024-26 Amendment Paper Found: of the passing of this Act and every 12 months thereafter, subject to the provisions of the Data Protection Act
Apr. 25 2025 Keeling schedule showing amendments to be made to the Mental Health Act 1983 by the Mental Health bill introduced into Parliament on 6 November 2024 and amended post report stage in the Lords Mental Health Bill [HL] 2024-26 Keeling schedules Found: OFFICIAL (3) In this section “the data protection legislation” has the same meaning as in the Data Protection Act
Apr. 24 2025 Notices of Amendments as at 24 April 2025 Data (Use and Access) Bill [HL] 2024-26 Amendment Paper Found: regulations make provision requiring the Information Commission (under section 114 of the Data Protection Act
Apr. 24 2025 Letter to the Committee from Rt Hon Dame Diana Johnson DBE MP, Minister of State for Policing and Crime Prevention, relating to details of a second tranche of Government amendments which were tabled on 22 April concerning Youth Diversion Orders (CPB81) Crime and Policing Bill 2024-26 Written evidence Found: data will be subject to the requirements in the UK General Data Protection Regulation and the Data Protection Act
Apr. 24 2025 Public Bill Committee Amendments as at 24 April 2025 Crime and Policing Bill 2024-26 Amendment Paper Found: (2) For the purposes of Article 6(1) of the UK GDPR, section 35 of the Data Protection Act 2018 (“
Apr. 24 2025 HL Bill 81 Running list of amendments – 24 April 2025 Employment Rights Bill 2024-26 Amendment Paper Found: of the passing of this Act and every 12 months thereafter, subject to the provisions of the Data Protection Act
Apr. 24 2025 Bill 225 EN 2024-25 - large print Mental Health Bill [HL] 2024-26 Explanatory Notes Found: there are provisions in the act which provide for data sharing, these are subject to the Data Protection Act
Apr. 24 2025 Bill 225 EN 2024-25 Mental Health Bill [HL] 2024-26 Explanatory Notes Found: where there are provisions in the act which provide for data sharing, these are subject to the Data Protection Act
Apr. 24 2025 Bill 225 2024-25 (as brought from the House of Lords) - large print Mental Health Bill [HL] 2024-26 Bill Found: (3) In this section “the data protection legislation” has the same meaning as in the Data Protection Act
Apr. 24 2025 Bill 225 2024-25 (as brought from the House of Lords) Mental Health Bill [HL] 2024-26 Bill Found: (3) In this section “the data protection legislation” has the same meaning as in the Data Protection Act
Apr. 23 2025 Notices of Amendments as at 23 April 2025 Data (Use and Access) Bill [HL] 2024-26 Amendment Paper Found: regulations make provision requiring the Information Commission (under section 114 of the Data Protection Act
Apr. 23 2025 Notices of Amendments as at 23 April 2025 Crime and Policing Bill 2024-26 Amendment Paper Found: (2) For the purposes of Article 6(1) of the UK GDPR, section 35 of the Data Protection Act 2018 (“
Apr. 23 2025 HL Bill 81 Running list of amendments – 23 April 2025 Employment Rights Bill 2024-26 Amendment Paper Found: of the passing of this Act and every 12 months thereafter, subject to the provisions of the Data Protection Act
Apr. 22 2025 Notices of Amendments as at 22 April 2025 Data (Use and Access) Bill [HL] 2024-26 Amendment Paper Found: regulations make provision requiring the Information Commission (under section 114 of the Data Protection Act
Apr. 22 2025 HL Bill 81 Running list of amendments – 22 April 2025 Employment Rights Bill 2024-26 Amendment Paper Found: of the passing of this Act and every 12 months thereafter, subject to the provisions of the Data Protection Act
Apr. 17 2025 HL Bill 81 Running list of amendments – 17 April 2025 Employment Rights Bill 2024-26 Amendment Paper Found: of the passing of this Act and every 12 months thereafter, subject to the provisions of the Data Protection Act
Apr. 16 2025 HL Bill 81 Running list of amendments – 16 April 2025 Employment Rights Bill 2024-26 Amendment Paper Found: of the passing of this Act and every 12 months thereafter, subject to the provisions of the Data Protection Act
Apr. 15 2025 HL Bill 81 Running list of amendments – 15 April 2025 Employment Rights Bill 2024-26 Amendment Paper Found: of the passing of this Act and every 12 months thereafter, subject to the provisions of the Data Protection Act
Apr. 14 2025 HL Bill 81 Running list of amendments – 14 April 2025 Employment Rights Bill 2024-26 Amendment Paper Found: of the passing of this Act and every 12 months thereafter, subject to the provisions of the Data Protection Act
Apr. 12 2025 Bill 221 2024-25 (as introduced) Steel Industry (Special Measures) Act 2024-26 Bill Found: information in contravention of the data protection legislation, within the meaning of the Data Protection Act
Apr. 12 2025 HL Bill 94 (as brought from the Commons) Steel Industry (Special Measures) Act 2024-26 Bill Found: information in contravention of the data protection legislation, within the meaning of the Data Protection Act
Apr. 12 2025 Bill 221 2024-25 (as introduced) - large print Steel Industry (Special Measures) Act 2024-26 Bill Found: information in contravention of the data protection legislation, within the meaning of the Data Protection Act
Apr. 10 2025 HL Bill 81 Running list of amendments – 10 April 2025 Employment Rights Bill 2024-26 Amendment Paper Found: of the passing of this Act and every 12 months thereafter, subject to the provisions of the Data Protection Act
Apr. 09 2025 Notices of Amendments as at 9 April 2025 Data (Use and Access) Bill [HL] 2024-26 Amendment Paper Found: regulations make provision requiring the Information Commission (under section 114 of the Data Protection Act
Apr. 08 2025 HL Bill 81 Running list of amendments - 8 April 2025 Employment Rights Bill 2024-26 Amendment Paper Found: of the passing of this Act and every 12 months thereafter, subject to the provisions of the Data Protection Act
Apr. 07 2025 Notices of Amendments as at 7 April 2025 Data (Use and Access) Bill [HL] 2024-26 Amendment Paper Found: regulations make provision requiring the Information Commission (under section 114 of the Data Protection Act
Apr. 03 2025 HL Bill 81 Running list of amendments - 3 April 2025 Employment Rights Bill 2024-26 Amendment Paper Found: of the passing of this Act and every 12 months thereafter, subject to the provisions of the Data Protection Act
Apr. 02 2025 Notices of Amendments as at 2 April 2025 Data (Use and Access) Bill [HL] 2024-26 Amendment Paper Found: regulations make provision requiring the Information Commission (under section 114 of the Data Protection Act
Apr. 02 2025 HL Bill 92 (as amended on Report) Bus Services (No. 2) Bill [HL] 2024-26 Bill Found: protection legislation”, “personal data” and “processing” have the same meanings as in the Data Protection Act
Apr. 02 2025 HL Bill 81 Running list of amendments - 2 April 2025 Employment Rights Bill 2024-26 Amendment Paper Found: of the passing of this Act and every 12 months thereafter, subject to the provisions of the Data Protection Act
Apr. 02 2025 HL Bill 93 (as amended on Report) Mental Health Bill [HL] 2024-26 Bill Found: (3) In this section “the data protection legislation” has the same meaning as in the Data Protection Act

Department Publications - Consultations
Thursday 1st May 2025 Department for Energy Security & Net Zero Source Page: Energy code reform: Code manager licence conditions and code modification appeals to the CMA Document: (PDF) Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act
Wednesday 30th April 2025 Department for Energy Security & Net Zero Source Page: Boiler Upgrade Scheme and certification requirements for clean heat schemes Document: (PDF) Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act
Monday 28th April 2025 Department for Energy Security & Net Zero Source Page: Proposals for greenhouse gas removal and power bioenergy with carbon capture and storage regulations Document: (PDF) Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act
Thursday 24th April 2025 Department for Energy Security & Net Zero Source Page: Planning for new energy infrastructure: 2025 revisions to National Policy Statements Document: (PDF) Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act
Thursday 17th April 2025 Department for Energy Security & Net Zero Source Page: Voluntary carbon and nature markets: raising integrity Document: (PDF) Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act
Monday 7th April 2025 Department for Business and Trade Source Page: Package travel legislation: consultation on proposed amendments Document: (PDF) Found: disclosed in accordance with UK legislation: • the Freedom of Information Act 2000 • the Data Protection Act

Department Publications - Policy paper
Tuesday 29th April 2025 Department for Digital, Culture, Media & Sport Source Page: Department for Culture, Media and Sport - Report under Section 179 of the Data Protection Act 2018 Document: Department for Culture, Media and Sport - Report under Section 179 of the Data Protection Act 2018 (webpage) Found: Department for Culture, Media and Sport - Report under Section 179 of the Data Protection Act 2018
Tuesday 29th April 2025 Department for Digital, Culture, Media & Sport Source Page: Department for Culture, Media and Sport - Report under Section 179 of the Data Protection Act 2018 Document: (PDF) Found: Department for Culture, Media and Sport - Report under Section 179 of the Data Protection Act 2018
Tuesday 29th April 2025 Department for Digital, Culture, Media & Sport Source Page: Department for Culture, Media and Sport - Report under Section 179 of the Data Protection Act 2018 Document: (PDF) Found: Department for Culture, Media and Sport - Report under Section 179 of the Data Protection Act 2018
Wednesday 23rd April 2025 Home Office Source Page: Crime and Policing Bill 2025: Delegated powers supplementary memoranda Document: (PDF) Found: data will be subject to the requirements in the UK General Data Protection Regulation and the Data Protection Act
Wednesday 23rd April 2025 Home Office Source Page: Crime and Policing Bill 2025: ECHR supplementary memoranda Document: (PDF) Found: forces who hold the data will also be required to process the data in accordance with the Data Protection Act

Department Publications - Policy and Engagement
Monday 28th April 2025 HM Treasury Source Page: Tax Treatment of Remote Gambling Document: (PDF) Found: explains certain rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act
Monday 28th April 2025 HM Treasury Source Page: Consultation on reform of Landfill Tax Document: (PDF) Found: data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act
Saturday 12th April 2025 Department for Business and Trade Source Page: Steel Industry (Special Measures) Bill Document: (PDF) Found: information in contravention of the data protection legislation, within the meaning of the Data Protection Act

Department Publications - Guidance
Monday 28th April 2025 Cabinet Office Source Page: Identifying and supporting persons who are vulnerable in an emergency Document: (PDF) Found: legislation 12 Equality Act 2010 12 UK General Data Protection Regulation (UK GDPR) and the Data Protection Act
Monday 28th April 2025 Cabinet Office Source Page: Identifying and supporting persons who are vulnerable in an emergency Document: (PDF) Found: specifically the Equality Act 2010 and the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act
Thursday 24th April 2025 Department for Science, Innovation & Technology Source Page: Online Safety Act: Protection of Children Codes of Practice - explanatory memorandum Document: (PDF) Found: Age appropriate design code The code of practice issued under section 125 of the Data Protection Act
Thursday 10th April 2025 Department for Education Source Page: DfE funding agreements and contracts: 2025 to 2026 Document: (PDF) Found: "DPA 2018" Data Protection Act 2018.
Wednesday 9th April 2025 Department for Digital, Culture, Media & Sport Source Page: Applying to the Local Youth Transformation Fund Document: (webpage) Found: competition in May 2025.Privacy noticeAll information will be processed in compliance with the Data Protection Act
Monday 7th April 2025 Department for Energy Security & Net Zero Source Page: Hydrogen Allocation Round 2 (HAR2): due diligence and cost assurance Document: (Excel) Found: obligations (including, but not limited to, under the Freedom of Information Act 2000 (FOIA), the Data Protection Act
Thursday 3rd April 2025 Department for Education Source Page: School census 2025 to 2026: technical information Document: (PDF) Found: Data protection and data sharing The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act
Thursday 3rd April 2025 Ministry of Justice Source Page: Learning and skills and library services for adult prisons in Wales: PSI 2/2015 Document: (PDF) Found: Reference section: • Human Rights Act 1998 and European Convention on Human Rights • Data Protection Act

Department Publications - Statistics
Friday 25th April 2025 Department for Work and Pensions Source Page: Sector-based Work Academy Programmes (SWAPs) Management Information, April 2021 to March 2025 Document: (ODS) Found: Figures fewer than 5 are supressed due to rounding to avoid disclosure required by the Data Protection Act
Tuesday 8th April 2025 Department for Science, Innovation & Technology Source Page: Cyber Governance Code of Practice - evaluation survey Document: (PDF) Found: as set out in Articles 13 and 14 of UK General Data Protection Regulation (UK GDPR) and the Data Protection Act

Non-Departmental Publications - Open consultation
May. 01 2025 Ofgem Source Page: Energy code reform: Code manager licence conditions and code modification appeals to the CMA Document: (PDF) Open consultation Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act
May. 01 2025 Competition and Markets Authority Source Page: Vets Market Investigation – Remedies working paper Document: (PDF) Open consultation Found: this consultation will be processed in accordance with our obligations under the UK GDPR, the Data Protection Act
Apr. 29 2025 Competition and Markets Authority Source Page: Leniency and no-action in cartel cases Document: (PDF) Open consultation Found: This legislation is the General Data Protection Regulation 2016 and the Data Protection Act 2018.

Non-Departmental Publications - Services
Apr. 28 2025 UK Visas and Immigration Source Page: Application to register as British overseas territories citizen Document: (PDF) Services Found: This also sets out your rights under the Data Protection Act 2018 and explains how you can access your
Apr. 17 2025 HM Revenue & Customs Source Page: Tax credits: if you think a decision is wrong (WTC/AP) Document: (PDF) Services Found: How we use your information HM Revenue & Customs is a Data Controller under the Data Protection Act 1998
Apr. 11 2025 HM Revenue & Customs Source Page: Child Benefit: allow someone to help you with your award (CH105) Document: (PDF) Services Found: This is in accordance with the ‘subject access rules’ of the Data Protection Act 2018 and the General

Non-Departmental Publications - Guidance and Regulation
Apr. 28 2025 Office of Financial Sanctions Implementation Source Page: Legal Services General Licence Document: (PDF) Guidance and Regulation Found: to third parties only in compliance with the UK General Data Protection Regulation and the Data Protection Act
Apr. 28 2025 Office of Financial Sanctions Implementation Source Page: Legal Services General Licence Document: (PDF) Guidance and Regulation Found: to third parties only in compliance with the UK General Data Protection Regulation and the Data Protection Act
Apr. 28 2025 Office of Financial Sanctions Implementation Source Page: Legal Services General Licence Document: (PDF) Guidance and Regulation Found: to third parties only in compliance with the UK General Data Protection Regulation and the Data Protection Act
Apr. 28 2025 Office of Financial Sanctions Implementation Source Page: Legal Services General Licence Document: (PDF) Guidance and Regulation Found: to third parties only in compliance with the UK General Data Protection Regulation and the Data Protection Act
Apr. 28 2025 Office of Financial Sanctions Implementation Source Page: Legal Services General Licence Document: (PDF) Guidance and Regulation Found: to third parties only in compliance with the UK General Data Protection Regulation and the Data Protection Act
Apr. 24 2025 Ofcom Source Page: Online Safety Act: Protection of Children Codes of Practice - explanatory memorandum Document: (PDF) Guidance and Regulation Found: Age appropriate design code The code of practice issued under section 125 of the Data Protection Act
Apr. 14 2025 HM Revenue & Customs Source Page: Authorise an agent to register or amend a VAT group Document: (PDF) Guidance and Regulation Found: How we use your information HMRC is a Data Controller under the Data Protection Act 1998.
Apr. 10 2025 Defence and Security Accelerator Source Page: Competition: Innovation in Support of Operations (Phase 2) Document: (PDF) Guidance and Regulation Found: In this clause, "data protection legislation" has the same meaning as in the Data Protection Act 2018
Apr. 03 2025 Nuclear Waste Services Source Page: LLWR's Socio-economic Fund Document: LLWR's Socio-economic Fund (webpage) Guidance and Regulation Found: It is made under the Data Protection Act 2018, section 36(1).
Apr. 03 2025 HM Prison and Probation Service Source Page: Learning and skills and library services for adult prisons in Wales: PSI 2/2015 Document: (PDF) Guidance and Regulation Found: Reference section: • Human Rights Act 1998 and European Convention on Human Rights • Data Protection Act

Non-Departmental Publications - Transparency
Apr. 24 2025 Serious Fraud Office Source Page: FOI Log - February 2025 Document: (PDF) Transparency Found: All records will be kept confidential and in accordance with the Data Protection Act 2018.
Apr. 23 2025 Evaluation Task Force Source Page: Government Major Projects Evaluation Review Document: (PDF) Transparency Found: The UK General Data Protection Regulation (UK GDPR) and the UK Data Protection Act 2018 (DPA) Ipsos

Non-Departmental Publications - Statistics
Apr. 24 2025 HM Revenue & Customs Source Page: Regional information on Corporate Tax reliefs Document: (webpage) Statistics Found: ISO 27001:2013Interviewer Quality Control Scheme (IQCS) Member CompanyRegistered under the Data Protection Act
Apr. 24 2025 Planning Inspectorate Source Page: Planning Inspectorate statistical release 24 April 2025 Document: (PDF) Statistics Found: Security and Data Protection training and they understand their responsibilities under the Data Protection Act

Non-Departmental Publications - News and Communications
Apr. 03 2025 Disclosure and Barring Service Source Page: Industry leaders launch new hospitality sector hiring toolkit Document: here (PDF) News and Communications Found: Legal responsibilities 08 Data protection Act 2018 considerations Equality Act 2010 and Public Sector

Arms Length Bodies Publications
Apr. 23 2025 NICE Source Page: Balloon disimpaction of the baby's head at emergency caesarean during the second stage of labour Publication Type: Guidance published Document: Specialist advice questionnaires (PDF 528 KB) (webpage) Published Found: disclosed to third parties in accordance with the Freedom of Information Act 2000 and the Data Protection Act
Apr. 16 2025 NHS England Source Page: Sub-contract for the provision of services related to the Network Contract DES 2025/26 Document: Sub-contract for the provision of services related to the Network Contract DES 2025/26 (webpage) Policy or strategy Found: force from time to time in the UK including the UK General Data Protection Regulation; the Data Protection Act
Apr. 03 2025 NHS England Source Page: 2025/26 NHS Standard Contract – Schedule 2L and explanatory note Document: 2025/26 NHS Standard Contract - Schedule 2L and explanatory note (webpage) NHS Standard Contract Found: User vaccination status. 2.8A.3.2.3 “processing” has the meaning given by section 3(4) of the Data Protection Act

Draft Secondary Legislation
The Human Medicines (Amendments Relating to Hub and Spoke Dispensing etc.) Regulations 2025 These Regulations amend the Human Medicines Regulations 2012 (“the 2012 Regulations”), which govern the arrangements throughout the United Kingdom for the licensing, manufacture, marketing, wholesale dealing and the sale and supply of medicines for human use. They also amend the Medicines Act 1968 (“the 1968 Act”). Department of Health and Social Care Found: paragraph 2(2)(a), (c) and (d) of Schedule 1 (special categories of personal data etc) to, the Data Protection Act

Draft Secondary Legislation

The Human Medicines (Amendments Relating to Hub and Spoke Dispensing etc.) Regulations 2025
These Regulations amend the Human Medicines Regulations 2012 (“the 2012 Regulations”), which govern the arrangements throughout the United Kingdom for the licensing, manufacture, marketing, wholesale dealing and the sale and supply of medicines for human use. They also amend the Medicines Act 1968 (“the 1968 Act”).

Department of Health and Social Care

Found: paragraph 2(2)(a), (c) and (d) of Schedule 1 (special categories of personal data etc) to, the Data Protection Act

Deposited Papers
Friday 2nd May 2025 Department for Environment, Food and Rural Affairs Source Page: Framework Document. British Wool. Incl. annex. 26p. Document: British_Wool_Framework_Document-March_2025.pdf (PDF) Found: the Freedom of Information Act 2000, the Environmental Information Regulations 2004, or the Data Protection Act
Friday 2nd May 2025 Department for Environment, Food and Rural Affairs Source Page: Framework Document: Environment Agency. Incl. annex. 45p. Document: EA_Framework_document.pdf (PDF) Found: Environmental Information Regulations 2004, the UK GDPR (General Data Protection Regulation) or the Data Protection Act
Thursday 24th April 2025 Department for Work and Pensions Source Page: Universal Credit Programme Board Papers from Nov and Dec 2022, Jan to Jul 2023, Sept to Dec 2023, Jan to Mar (Part 1) 2024 [redacted]. (191 docs). Document: 202212_H_UCPB_20.12.22_BLT01_Scaling_Readiness_Entry_Criteria.pdf (PDF) Found: Theme Outcome Readiness Criteria Assessment Criteria/Measures/Evidence RAG Status GDPR/UK Data Protection Act
Thursday 24th April 2025 Department for Work and Pensions Source Page: Universal Credit Programme Board Papers from Nov and Dec 2022, Jan to Jul 2023, Sept to Dec 2023, Jan to Mar (Part 1) 2024 [redacted]. (191 docs). Document: 202301_H_UCPB_19.01.23_BTL01_Scaling_Readiness_Entry_Criteria.pdf (PDF) Found: service designs, processes and supporting products to ensure we remain compliant with GDPR/UK Data Protection Act
Thursday 24th April 2025 Department for Work and Pensions Source Page: Universal Credit Programme Board Papers from Nov and Dec 2022, Jan to Jul 2023, Sept to Dec 2023, Jan to Mar (Part 1) 2024 [redacted]. (191 docs). Document: 202211_H_UCPB_15.11.22_BTL01_Scaling_Readiness_Entry_Criteria.pdf (PDF) Found: service designs, processes and supporting products to ensure we remain compliant with GDPR/UK Data Protection Act
Thursday 17th April 2025 Department for Business and Trade Source Page: Package travel - updating the framework 2025. Consultation paper. 26p. Document: Package_travel_updating_the_framework_2025.pdf (PDF) Found: disclosed in accordance with UK legislation: • the Freedom of Information Act 2000 • the Data Protection Act
Thursday 17th April 2025 Home Office Source Page: I. Requests for victim information: Draft code of practice. 45p. II. Victim information requests: Code of practice and counselling services definition. Government consultation. 25p. Document: Victim_Request_for_Information_Consultation.pdf (PDF) Found: persons within the framework of existing legislation, including the Human Rights Act 1998, the Data Protection Act
Thursday 17th April 2025 Home Office Source Page: I. Requests for victim information: Draft code of practice. 45p. II. Victim information requests: Code of practice and counselling services definition. Government consultation. 25p. Document: Victim_Information_Request_-_Draft_Code_of_Practice.pdf (PDF) Found: Convention on Human Rights (ECHR) 11 The Criminal Procedure and Investigations Act 1996 (CPIA) 12 Data Protection Act
Thursday 3rd April 2025 Source Page: RAF Museum: framework document, Sept 2024 (updated). Incl. annex. 37p. Document: RAF_Museum_Framework_Document-2022-2025-updated.pdf (PDF) Found: information is received by either party under the Freedom of Information Act 2000, or the Data Protection Act
Wednesday 2nd April 2025 Source Page: British Council 2023-24 Annual report and accounts. 139p. Document: British_Council_Annual_Report_and_Accounts_2023-24.pdf (PDF) Found: systems and ensure ongoing compliance with the General Data Protection Regulation (GDPR), the UK Data Protection Act

Data Protection Act 2018 mentioned in Scottish results

Scottish Government Publications
Thursday 1st May 2025 Source Page: A82 Tarbet to Inverarnan - Analysis and design of cycleway/mixed path: EIR release Document: A82 Tarbet to Inverarnan - Analysis and design of cycleway/mixed path: EIR release (webpage) Found: party and disclosing it would contravene the data protection principles in Schedule 1 to the Data Protection Act
Thursday 1st May 2025 Communications and Ministerial Support Directorate Source Page: Activities and communications of the Cabinet Secretary for Finance and Local Government: FOI release Document: Activities and communications of the Cabinet Secretary for Finance and Local Government: FOI release (webpage) Found: contravene the data protection principles in Article 5(1) of the UK GDPR (or section 34(1) of the Data Protection Act
Wednesday 30th April 2025 Energy and Climate Change Directorate Source Page: Clean Power 2030 Action Plan briefing documents: EIR release Document: EIR 202500452601 - Information released - Annex A (PDF) Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act
Wednesday 30th April 2025 Environment and Forestry Directorate Source Page: Galloway National Park correspondence with various organisations: EIR release Document: EIR 202500453720 - Information released - Annex (PDF) Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act
Wednesday 30th April 2025 Communications and Ministerial Support Directorate Source Page: Copy of information referenced in the Scottish Information Commissioner’s Decision Notice 186/2024: FOI release Document: FOI 202500454839 - Information released - Annex A (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 30th April 2025 Agriculture and Rural Economy Directorate Source Page: Proposed ban on owning cats in new housing developments in rural areas: EIR release Document: Proposed ban on owning cats in new housing developments in rural areas: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 30th April 2025 Economic Development Directorate Source Page: Plans for the site of the former McVities factory in Tollcross: FOI release Document: Plans for the site of the former McVities factory in Tollcross: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 30th April 2025 Energy and Climate Change Directorate Source Page: Clean Power 2030 report briefing documents: EIR release Document: EIR 202500452602 - Information released - Annex A (PDF) Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act
Wednesday 30th April 2025 Source Page: ScotRail’s alcohol survey results: FOI release Document: ScotRail’s alcohol survey results: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 30th April 2025 Source Page: Contract and planting plan map for previous request (202500450951): EIR release Document: Contract and planting plan map for previous request (202500450951): EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 30th April 2025 Chief Operating Officer, NHS Scotland Directorate Source Page: Documentation about sending surplus NHS equipment to Ukraine: FOI release Document: FOI 202500451642 - Information released - Exemptions (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 30th April 2025 Source Page: Contract and planting plan map for previous request (202500450951): EIR release Document: EIR 202500455863 - Information released - Contract Document (PDF) Found: of Information (Scotland) Act 2002 (FOISA), the UK General Data Protection Regulation, the Data Protection Act
Monday 28th April 2025 Social Security Directorate Source Page: Social Security (Amendment) (Scotland) Bill: data protection impact assessment - updated April 2025 Document: Social Security (Amendment) (Scotland) Bill - updated 2025: Data Protection Impact Assessment (PDF) Found: organisation a public authority or body as set out in Part 2, Chapter 2, section 7 of the Data Protection Act
Thursday 24th April 2025 Tackling Child Poverty and Social Justice Directorate Source Page: Scottish landlord register and private rental levels: FOI release Document: Scottish landlord register and private rental levels: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 23rd April 2025 Population Health Directorate Source Page: Correspondence regarding Professor of Global Public Health: FOI release Document: Correspondence regarding Professor of Global Public Health: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 22nd April 2025 Energy and Climate Change Directorate Source Page: Correspondence relating to Kendoon to Tongland 132KV reinforcement project: EIR release Document: Correspondence relating to Kendoon to Tongland 132KV reinforcement project: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 22nd April 2025 Local Government and Housing Directorate Source Page: Tenancy deposit schemes: FOI release Document: Tenancy deposit schemes: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 22nd April 2025 Environment and Forestry Directorate Source Page: Correspondence between Scottish Government and Scottish Parliament regarding Galloway National Park: EIR release Document: EIR 202500453718 - Information Released - Annex A & B (PDF) Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act
Tuesday 22nd April 2025 Environment and Forestry Directorate Source Page: Galloway National Park correspondence with council officials: EIR release Document: EIR 202500453716 - Information Released - Annex A and B (PDF) Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act
Wednesday 16th April 2025 Source Page: Low Emission Zone (LEZ) information: EIR release Document: Low Emission Zone (LEZ) information: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 16th April 2025 Safer Communities Directorate Source Page: Short life working group minutes regarding misuse of pyrotechnics at football: FOI release Document: Short life working group minutes regarding misuse of pyrotechnics at football: FOI release (webpage) Found: protection principles in the UK General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 16th April 2025 Legal Services (Solicitor to the Scottish Government) Source Page: Flamingo Land plans for Loch Lomond: EIR release Document: Flamingo Land plans for Loch Lomond: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 16th April 2025 Scottish Procurement and Property Directorate Source Page: Procurement contracts: terms and conditions Document: Model ICT services contract - concession contracts April 2025 (webpage) Found: Computer Misuse Act 1990, the Network and Information Systems Regulations 2018, the UK GDPR or the Data Protection Act
Wednesday 16th April 2025 Scottish Procurement and Property Directorate Source Page: Procurement contracts: terms and conditions Document: Terms and conditions 4: conditions of contract for the supply of goods and services February 2025 (PDF) Found: individuals with regard to the processing of Personal Data to which a Party is subject including the Data Protection Act
Wednesday 16th April 2025 Scottish Procurement and Property Directorate Source Page: Procurement contracts: terms and conditions Document: Terms and conditions 5: conditions of contract for the sale of goods (PDF) Found: the Trade Union and Labour Relations (Consolidation) Act 1992, or commit any breach of the Data Protection Act
Wednesday 16th April 2025 Scottish Procurement and Property Directorate Source Page: Procurement contracts: terms and conditions Document: Terms and conditions 1: conditions of contract for the purchase of goods - February 2025 (PDF) Found: individuals with regard to the processing of Personal Data to which a Party is subject including the Data Protection Act
Wednesday 16th April 2025 Safer Communities Directorate Source Page: Correspondence relating to right wing extremist groups: FOI release Document: Correspondence relating to right wing extremist groups: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 16th April 2025 Scottish Procurement and Property Directorate Source Page: Procurement contracts: terms and conditions Document: Model services contract - April 2025 (webpage) Found: individuals with regard to the processing of Personal Data to which a Party is subject including the Data Protection Act
Wednesday 16th April 2025 Local Government and Housing Directorate Source Page: Public health supplement documentation: FOI release Document: Public health supplement documentation: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 16th April 2025 Scottish Procurement and Property Directorate Source Page: Procurement contracts: terms and conditions Document: Terms and conditions 3: conditions of contract for consultancy services February 2025 (PDF) Found: individuals with regard to the processing of Personal Data to which a Party is subject including the Data Protection Act
Wednesday 16th April 2025 Scottish Procurement and Property Directorate Source Page: Procurement contracts: terms and conditions Document: Terms and conditions 2: conditions of contract for the purchase of services February 2025 (PDF) Found: individuals with regard to the processing of Personal Data to which a Party is subject including the Data Protection Act
Wednesday 16th April 2025 Scottish Procurement and Property Directorate Source Page: Procurement contracts: terms and conditions Document: ICT services model contract - April 2025 (webpage) Found: Computer Misuse Act 1990, the Network and Information Systems Regulations 2018, the UK GDPR or the Data Protection Act
Wednesday 16th April 2025 Propriety and Ethics Directorate Source Page: Information regarding handling of Freedom of Information response 202400443239: FOI release Document: Information regarding handling of Freedom of Information response 202400443239: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 16th April 2025 Source Page: Social Security Scotland and Secretary of State (DWP) information sharing agreements: FOI release Document: FOI 202500453728 - Information Released - Annex (PDF) Found: Date of Birth D.O.D Date of Death DPA Data Protection Act 2018 DPIA Data Protection Impact Assessment
Wednesday 16th April 2025 Energy and Climate Change Directorate Source Page: Carbon Capture Fund as part of the Scottish Government’s Emerging Energy Technologies Fund: EIR release Document: Carbon Capture Fund as part of the Scottish Government’s Emerging Energy Technologies Fund: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Monday 14th April 2025 Local Government and Housing Directorate Source Page: Open Market Shared Equity Scheme: administrative procedures Document: Open Market Shared Equity Scheme: Administrative Procedures (PDF) Found: You will duly observe your obligations under the Data Protection Act 2018 and the General Data Protection
Friday 11th April 2025 Source Page: Public Sector Pay Policy Technical Guide - April 2025 Document: Public Sector Pay Policy Technical Guide (PDF) Found: and in particular the principles of the General Data Protection Regulation (GDPR) and the Data Protection Act
Thursday 10th April 2025 Energy and Climate Change Directorate Source Page: Emerging Energy Technologies Fund correspondence: EIR release Document: Emerging Energy Technologies Fund correspondence: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Thursday 10th April 2025 Energy and Climate Change Directorate Source Page: Carbon Capture Fund correspondence: EIR release Document: Carbon Capture Fund correspondence: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Thursday 10th April 2025 Marine Directorate Source Page: Live cleaner fish movements: EIR release Document: Live cleaner fish movements: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Thursday 10th April 2025 Offshore Wind Directorate Source Page: First Minister and Deputy First Minister offshore renewable investor discussions: EIR release Document: First Minister and Deputy First Minister offshore renewable investor discussions: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Thursday 10th April 2025 Learning Directorate Source Page: Materials and communications related to funding made available to local authorities: FOI release Document: Materials and communications related to funding made available to local authorities: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 9th April 2025 Source Page: City of Edinburgh Council’s proposed Supplementary Guidance on Developer Contributions and Infrastructure Delivery for City Plan 2030 information: EIR release Document: City of Edinburgh Council’s proposed Supplementary Guidance on Developer Contributions and Infrastructure Delivery for City Plan 2030 information: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 9th April 2025 Safer Communities Directorate Source Page: Far-right/neo Nazi activity correspondence: FOI release Document: Far-right/neo Nazi activity correspondence: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 9th April 2025 Culture and Major Events Directorate Source Page: Commonwealth Games cost documentation: FOI release Document: Commonwealth Games cost documentation: FOI release (webpage) Found: individuals, and disclosing it would contravene the data protection principles in Schedule 1 of the Data Protection Act
Wednesday 9th April 2025 Energy and Climate Change Directorate Source Page: Eskdalemuir Seismic Array contract: FOI release Document: Eskdalemuir Seismic Array contract: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 9th April 2025 Constitution Directorate Source Page: Independence spending in the Budget documentation: FOI release Document: Independence spending in the Budget documentation: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 9th April 2025 External Affairs Directorate Source Page: Details of First Minister's meeting with the Speaker of Lok Sabha, India: FOI release Document: Details of First Minister's meeting with the Speaker of Lok Sabha, India: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 8th April 2025 Marine Directorate Source Page: National Marine Plan 2 (NMP2) consultation minutes: EIR release Document: National Marine Plan 2 (NMP2) consultation minutes: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 8th April 2025 Safer Communities Directorate Source Page: Correspondence which relate to right wing extremist groups: FOI release Document: FOI 202400421592 - Information Released - Annex A (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 8th April 2025 Communications and Ministerial Support Directorate Source Page: Former First Minister's trip to Qatar: FOI release Document: Former First Minister's trip to Qatar: FOI release (webpage) Found: contravene the data protection principles in Article 5(1) of the UK GDPR (or section 34(1) of the Data Protection Act
Monday 7th April 2025 Marine Directorate Source Page: Evaluation of Regional Inshore Fisheries Group Document: Digital media - Evaluation of Regional Inshore Fisheries Group (PDF) Found: information I give will be treated confidentially and securely, in accordance with the terms of the Data Protection Act
Monday 7th April 2025 Energy and Climate Change Directorate Source Page: Ministerial correspondence relating to Kendoon to Tongland Reinforcement Project: EIR release Document: Ministerial correspondence relating to Kendoon to Tongland Reinforcement Project: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Friday 4th April 2025 Agriculture and Rural Economy Directorate Source Page: Animals and Wildlife (Penalties, Protections and Powers) (Scotland) Act 2020 - A Review Of Provisions And Requirements For Additional Animal Welfare, Animal Health And Wildlife Offences Document: Animals and Wildlife (Penalties, Protections and Powers) (Scotland) Act 2020 (PDF) Found: fulfilled its duty; however as this information relates to living persons, the provisions of the Data Protection Act
Tuesday 1st April 2025 Justice Directorate Source Page: Service Leavers Database - Scotland: privacy notice Document: Service Leavers Database - Scotland: privacy notice (webpage) Found: Section 2 Part 6 Para 27 of the Data Protection Act 2018 allows for exemptions to UK GDPR Article 5 1
Monday 31st March 2025 Agriculture and Rural Economy Directorate Source Page: Data Protection Impact Assessment (DPIA) for the Crofting Consultation 2024 and Consultation Analysis Document: Data Protection Impact Assessment (DPIA) for the Crofting Bill Consultation 2024 and Consultation Analysis (PDF) Found: regard to the processing of Personal Data to which a Party is subject including the 3 Data Protection Act
Friday 28th March 2025 Marine Directorate Source Page: Weekly fishing landings and landed value data for Orkney: EIR release Document: Weekly fishing landings and landed value data for Orkney: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Friday 28th March 2025 Social Security Directorate Source Page: Chief Executive of Social Security Scotland and Cabinet Secretary for Social Justice correspondence: FOI release Document: Chief Executive of Social Security Scotland and Cabinet Secretary for Social Justice correspondence: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Friday 28th March 2025 Constitution Directorate Source Page: First Minister and Prime Minister correspondence: FOI release Document: FOI 202500452857 - Information released - Annex B (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Friday 28th March 2025 Chief Economist Directorate Source Page: Minister for Public Finance and Scotonomics documentation: FOI release Document: FOI 202500453113 - Information released - Point 1 (PDF) Found: under the requirements of the General Data Protection Regulation (EU) 2016/679 (the GDPR), the Data Protection Act
Friday 28th March 2025 Source Page: UK Government Treasury/Chancellor correspondence: FOI release Document: UK Government Treasury/Chancellor correspondence: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Thursday 27th March 2025 Scottish Procurement and Property Directorate Source Page: Social Security Scotland Quality Assurance Testing Services tender contract: FOI release Document: FOI 202500452760 - Information released - Documents 8 - 22 (PDF) Found: bound by confidentiality and data protection clauses which align to standards set by the Data Protection Act
Thursday 27th March 2025 Source Page: Bus and travel demand management report documentation: EIR release Document: Bus and travel demand management report documentation: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Thursday 27th March 2025 Source Page: Bus and travel demand management report documentation: EIR release Document: EIR 202500452179 - Information released - Annex A, B and C (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Thursday 27th March 2025 Source Page: Planning Hubs and Planning apprenticeships information: EIR release Document: EIR 202500447903 - Information Released - Documents (PDF) Found: individuals with regard to the processing of Personal Data to which a Party is subject including the Data Protection Act
Thursday 27th March 2025 Social Care and National Care Service Development Source Page: Documentation on discussions with Scottish Care regarding Anne's Law: FOI release Document: Documentation on discussions with Scottish Care regarding Anne's Law: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Thursday 27th March 2025 Population Health Directorate Source Page: Correspondence regarding restriction on promotions of food high in fat, salt and sugar: FOI release Document: Correspondence regarding restriction on promotions of food high in fat, salt and sugar: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Thursday 27th March 2025 Source Page: Planning Hubs and Planning apprenticeships information: EIR release Document: Planning Hubs and Planning apprenticeships information: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Thursday 27th March 2025 Environment and Forestry Directorate Source Page: South Kinross Flood Protection Scheme objections: EIR release Document: EIR 202500454394 - Information released - Annex A & Annex B (PDF) Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act
Thursday 27th March 2025 Local Government and Housing Directorate Source Page: Reinforced autoclaved aerated concrete (RAAC) costs and correspondence: EIR release Document: Reinforced autoclaved aerated concrete (RAAC) costs and correspondence: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Thursday 27th March 2025 Source Page: Native woodland scheme at Schiehallion correspondence: EIR release Document: Native woodland scheme at Schiehallion correspondence: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Thursday 27th March 2025 Source Page: Social Security Scotland staff disciplinary action statistics: FOI release Document: Social Security Scotland staff disciplinary action statistics: FOI release (webpage) Found: This is because under UK General Data Protection Regulation (UK GDPR) and the Data Protection Act (DPA
Wednesday 26th March 2025 Marine Directorate Source Page: Green Volt Project correspondence: FOI release Document: Green Volt Project correspondence: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 26th March 2025 Energy and Climate Change Directorate Source Page: Material related to the overhead line from Spittal to Beauly: EIR release Document: Material related to the overhead line from Spittal to Beauly: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 26th March 2025 Children and Families Directorate Local Government and Housing Directorate Mental Health Directorate Social Care and National Care Service Development Source Page: Trauma Responsive Social Work Services Programme Data Protection Impact Assessment Document: Trauma Responsive Social Work Services Programme: Data protection impact assessment (PDF) Found: organisation a public authority or body as set out in Part 2, Chapter 2, Section 7 of the Data Protection Act
Wednesday 26th March 2025 Population Health Directorate Source Page: Documentation regarding the Cass report: FOI release Document: FOI 202500452272 - Information released - ANNEX B (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 26th March 2025 Constitution Directorate Source Page: Westminster's Scottish Affairs Committee correspondence: FOI release Document: FOI 202500452271 - Information released - Annex B (PDF) Found: nciples in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 26th March 2025 Energy and Climate Change Directorate Source Page: Correspondence and documentation that include the phrase "return on capital": FOI release Document: Correspondence and documentation that include the phrase "return on capital": FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 26th March 2025 Environment and Forestry Directorate Source Page: Copy of correspondence in relation to Montrose beach stability and dredging: EIR release Document: EIR 202500454881 - Information Released - Annex A (PDF) Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act
Wednesday 26th March 2025 Environment and Forestry Directorate Source Page: Vehicle idling details in specific areas: EIR release Document: Vehicle idling details in specific areas: EIR release (webpage) Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Propriety and Ethics Directorate Source Page: Legal advice given to the Scottish Government/ministers in reference to The Scottish Ministers v The Scottish Information Commissioner: FOI release Document: FOI 202400438168 - Information released - Annex A (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Environment and Forestry Directorate Source Page: Call for Evidence: Reducing the Landfilling of Biodegradable and Other Wastes Document: Call for Evidence: Reducing the Landfilling of Biodegradable and Other Wastes (PDF) Found: The legal basis for processing this data is ‘public task’ (Data Protection Act 2018 Article 6 (1) (e
Tuesday 25th March 2025 Environment and Forestry Directorate Source Page: Strengthening approach to household recycling collection services Document: Strengthening approach to household recycling collection services (PDF) Found: The legal basis for processing this data is ‘public task’ (Data Protection Act 2018 Article 6 (1) (e
Tuesday 25th March 2025 Communications and Ministerial Support Directorate Source Page: Legal advice in response to Scottish Information Commissioner’s decision 193/2024: FOI release Document: Legal advice in response to Scottish Information Commissioner’s decision 193/2024: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Communications and Ministerial Support Directorate Source Page: Information regarding the decision not to give the Scottish Information Commissioner legal advice: FOI release Document: Information regarding the decision not to give the Scottish Information Commissioner legal advice: FOI release (webpage) Found: are the data subject, and so it is subject to the General Data Protection Regulation and the Data Protection Act
Tuesday 25th March 2025 Propriety and Ethics Directorate Source Page: Queries regarding access to secretariat members email accounts: FOI Review Document: FOI 202500449874 - Information released - Annex (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Propriety and Ethics Directorate Source Page: James Hamilton QC's secretariat communications: FOI Review Document: FOI 202500448736 - Information released - Annex (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Communications and Ministerial Support Directorate Source Page: Documents and legal advise relating to decision notice (193/2024): FOI release Document: Documents and legal advise relating to decision notice (193/2024): FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Propriety and Ethics Directorate Source Page: Correspondence between former First Minister Nicola Sturgeon and James Hamilton: FOI release Document: FOI 202400438682 - Information released - Annex (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Tackling Child Poverty and Social Justice Directorate Source Page: Former Chief Social Policy Adviser WhatsApp messages during Covid-19 pandemic: FOI release Document: Former Chief Social Policy Adviser WhatsApp messages during Covid-19 pandemic: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Energy and Climate Change Directorate Source Page: Deputy Director of Future Environment WhatsApp messages during Covid-19 pandemic: FOI release Document: FOI 202400439464 - Information Released - Annex A and B (PDF) Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Communications and Ministerial Support Directorate Source Page: Former Minister for Mental Health WhatsApp messages from February 2020 to February 2021: FOI release Document: Former Minister for Mental Health WhatsApp messages from February 2020 to February 2021: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Communications and Ministerial Support Directorate Source Page: Former Director General for Education and Justice WhatsApp messages during Covid-19 pandemic: FOI release Document: FOI 202400439469 - Information Released - Attachment A (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Economic Development Directorate Source Page: Director of Economic Development WhatsApp messages during the Covid-19 pandemic: FOI release Document: Director of Economic Development WhatsApp messages during the Covid-19 pandemic: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Communications and Ministerial Support Directorate Source Page: Mairi McAllan's WhatsApp messages during the Covid-19 pandemic: FOI Review Document: Mairi McAllan's WhatsApp messages during the Covid-19 pandemic: FOI Review (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Source Page: Director General for Net Zero WhatsApp messages during Covid-19 pandemic: FOI release Document: Director General for Net Zero WhatsApp messages during Covid-19 pandemic: FOI release (webpage) Found: Personal data is defined in the Data Protection Act 2018 as information relating to an identified or
Tuesday 25th March 2025 Communications and Ministerial Support Directorate Source Page: Director General for Strategy & External Affairs WhatsApp messages during Covid-19 pandemic: FOI release Document: Director General for Strategy & External Affairs WhatsApp messages during Covid-19 pandemic: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Covid Inquiries Response Directorate Source Page: Former Director General of Economy WhatsApp messages during Covid-19 pandemic: FOI release Document: Former Director General of Economy WhatsApp messages during Covid-19 pandemic: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Source Page: Judicial Appointments Board member WhatsApp messages during Covid-19 pandemic: FOI release Document: Judicial Appointments Board member WhatsApp messages during Covid-19 pandemic: FOI release (webpage) Found: party and disclosing it would contravene the data protection principles in Schedule 1 to the Data Protection Act
Tuesday 25th March 2025 Source Page: Former Director General Health and Social Care WhatsApp messages during the Covid-19 pandemic: FOI release Document: Former Director General Health and Social Care WhatsApp messages during the Covid-19 pandemic: FOI release (webpage) Found: party and disclosing it would contravene the data protection principles in Schedule 1 to the Data Protection Act
Tuesday 25th March 2025 Source Page: Director General Scottish Exchequer WhatsApp messages during Covid-19 pandemic: FOI release Document: Director General Scottish Exchequer WhatsApp messages during Covid-19 pandemic: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Population Health Directorate Source Page: Deputy Director for Population Health Resilience and Protection WhatsApp messages during Covid-19 pandemic: FOI release Document: Deputy Director for Population Health Resilience and Protection WhatsApp messages during Covid-19 pandemic: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Communications and Ministerial Support Directorate Source Page: Former Minister for Mental Health's WhatsApp messages during the Covid 19 pandemic: FOI Review Document: Former Minister for Mental Health's WhatsApp messages during the Covid 19 pandemic: FOI Review (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Communications and Ministerial Support Directorate Source Page: Former Minister for Public Health, Women's Health and Sport WhatsApp messages during the COVID-19 pandemic: FOI Review Document: Former Minister for Public Health, Women's Health and Sport WhatsApp messages during the COVID-19 pandemic: FOI Review (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Propriety and Ethics Directorate Source Page: Email and chain referred to in material released under previous request: FOI release Document: Email and chain referred to in material released under previous request: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Communications and Ministerial Support Directorate Source Page: Information pertaining to Scottish Information Commissioner decision 004/2023: FOI release Document: Information pertaining to Scottish Information Commissioner decision 004/2023: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Covid Inquiries Response Directorate Source Page: Former Permanent Secretary's WhatsApp messages during Covid-19 pandemic: FOI release Document: Former Permanent Secretary's WhatsApp messages during Covid-19 pandemic: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Friday 21st March 2025 Justice Directorate Source Page: HMP Glasgow information: FOI release Document: HMP Glasgow information: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Friday 21st March 2025 Source Page: Scottish Forestry communications with James Jones and Sons: EIR release Document: EIR 202500452022 - Information released - Annex A (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Friday 21st March 2025 Energy and Climate Change Directorate Source Page: Strath Oykel Wind Farm correspondence: EIR release Document: Strath Oykel Wind Farm correspondence: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 19th March 2025 Equality, Inclusion and Human Rights Directorate Source Page: Men’s Sheds documentation: FOI release Document: FOI 202500451542 - Information released - Annex A (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 19th March 2025 Offshore Wind Directorate Source Page: Scottish Offshore Wind Energy Council Barriers to Deployment Group agendas and minutes: EIR release Document: Scottish Offshore Wind Energy Council Barriers to Deployment Group agendas and minutes: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 18th March 2025 Source Page: Liquid sprayed on A96 at Keith during winter months: EIR release Document: Liquid sprayed on A96 at Keith during winter months: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 18th March 2025 Source Page: Closure of the Queensferry Crossing documentation: EIR release Document: Closure of the Queensferry Crossing documentation: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 18th March 2025 Energy and Climate Change Directorate Source Page: Scotia Gas Networks (SGN) correspondence regarding the First Minister's visit to the H100 project: FOI release Document: Scotia Gas Networks (SGN) correspondence regarding the First Minister's visit to the H100 project: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 18th March 2025 Marine Directorate Source Page: Payments and support to Scotland's salmon farming industry: EIR release Document: EIR 202500450923 - Information Released - Annex B (PDF) Found: individuals with regard to the processing of Personal Data to which a Party is subject including the Data Protection Act
Tuesday 18th March 2025 International Trade and Investment Directorate Source Page: Communications exchanged with various organisations: FOI release Document: Communications exchanged with various organisations: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 18th March 2025 Communications and Ministerial Support Directorate Source Page: Access to Information Rights in Scotland: FOI release Document: FOI 202500450915 - Information Released - Annex (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 18th March 2025 Local Government and Housing Directorate Source Page: Springfield Group housing development correspondence: EIR release Document: Springfield Group housing development correspondence: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 18th March 2025 Environment and Forestry Directorate Source Page: Review of transferable skills in Scotland's land-based and aquaculture sectors Document: Review of transferable skills in Scotland's land-based and aquaculture sectors (PDF) Found: are collecting this data in the performance of a public task, under Article 6(1)(e) of the Data Protection Act
Thursday 13th March 2025 Agriculture and Rural Economy Directorate Source Page: Correspondence pertaining to "The Rural Development (Continuation of Operation) (Miscellaneous Amendment) (Scotland) Regulations 2024": FOI Review Document: Correspondence pertaining to "The Rural Development (Continuation of Operation) (Miscellaneous Amendment) (Scotland) Regulations 2024": FOI Review (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Thursday 13th March 2025 Source Page: Correspondence regarding Class 222 trains on ScotRail services: EIR release Document: Correspondence regarding Class 222 trains on ScotRail services: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Thursday 13th March 2025 Energy and Climate Change Directorate Source Page: Delivery of 19 climate action policies: EIR release Document: Delivery of 19 climate action policies: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Thursday 13th March 2025 Marine Directorate Source Page: ScotWind leasing round correspondence: EIR Review Document: ScotWind leasing round correspondence: EIR Review (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 12th March 2025 Communications and Ministerial Support Directorate Source Page: Specific Scottish Government electronic purchasing cards (ePC) charges: FOI Review Document: Specific Scottish Government electronic purchasing cards (ePC) charges: FOI Review (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Data Protection Act 2018 mentioned in Welsh results

Welsh Committee Publications
Friday 7th February 2025 PDF - Marshalled List of Amendments - 7 February 2025 Inquiry: Report on the Welsh Language and Education (Wales) Bill Found: ending on 31 August, ( ) “data protection legislation” has the same meaning as in the Data Protection Act
Wednesday 5th February 2025 PDF - Notice of Amendments (v3) - 5 February 2025 Inquiry: Report on the Welsh Language and Education (Wales) Bill Found: ending on 31 August, ( ) “data protection legislation” has the same meaning as in the Data Protection Act
Tuesday 21st January 2025 PDF - Welsh Government Response - 21 January 2025 Inquiry: Children on the Margins Found: share information in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act

Welsh Government Publications
Friday 4th July 2025 Source Page: Distribution Sub Group meeting: 4 July 2025 Document: Paper 09 (PDF) Found: Data was supplied via postcodes and handled in accordance with the 1998 Data Protection Act with special
Tuesday 6th May 2025 Source Page: Attendance of pupils in maintained schools: 2 September 2024 to 25 April 2025 Document: Attendance of pupils in maintained schools: 2 September 2024 to 25 April 2025 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Monday 28th April 2025 Source Page: Iaith Athrawon Yfory Incentive Scheme: guidance for ITE partnerships from 2023 and 2024 Document: Iaith Athrawon Yfory Incentive Scheme: guidance for ITE partnerships from 2023 and 2024 (webpage) Found: Information Regulations 2004 (the “EIR”) the General Data Protection Regulation (GDPR) and Data Protection Act
Monday 28th April 2025 Source Page: National multi-agency practice framework for children’s services Document: National multi-agency practice framework for children’s services (webpage) Found: their legal obligations, namely the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act
Thursday 24th April 2025 Source Page: FOI release 24584: Ceredigion Local Development Plan Document: Doc 1 (PDF) Found: Under the UK GDPR, Data Protection Act 2018 and the Freedom of Information Act 2000 the contents of
Thursday 24th April 2025 Source Page: FOI release 24584: Ceredigion Local Development Plan Document: Ceredigion Local Development Plan (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Tuesday 22nd April 2025 Source Page: Attendance of pupils in maintained schools: 2 September 2024 to 11 April 2025 Document: Attendance of pupils in maintained schools: 2 September 2024 to 11 April 2025 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Wednesday 16th April 2025 Source Page: Bus Services (Wales) Bill 2020 (withdrawn): integrated impact assessment Document: Bus Services (Wales) Bill 2020 (withdrawn): integrated impact assessment (PDF) Found: will process personal data, or require another organisation to do so, must comply with the Data Protection Act
Monday 14th April 2025 Source Page: FOI release 24421: Swansea maternity services Document: Swansea maternity services (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)
Friday 11th April 2025 Source Page: Standard for digital health identity verification in primary care Document: The NHS Wales digital health identity standard for primary care (NHS login) (PDF) Found: have a legal requirement: • to adhere to the General Data Protection Regulation (GDPR), Data Protection Act
Thursday 10th April 2025 Source Page: Young people not in education, employment or training (NEET): 2024 Document: Young people not in education, employment or training (NEET): 2024 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Tuesday 8th April 2025 Source Page: Attendance of pupils in maintained schools: 2 September 2024 to 28 March 2025 Document: Attendance of pupils in maintained schools: 2 September 2024 to 28 March 2025 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Monday 7th April 2025 Source Page: FOI release 24503: Godre'r Graig Primary School Document: Doc 2 (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)
Wednesday 2nd April 2025 Source Page: FOI release 23323: Tertiary Education Document: Tertiary Education (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)
Friday 28th March 2025 Source Page: FOI release 24464: Hendy Wind Farm Document: Hendy Wind Farm (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Friday 28th March 2025 Source Page: Food Business Accelerator scheme: pre-qualification form Document: Food Business Accelerator scheme: pre-qualification form (PDF) Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004, Data Protection Act
Friday 28th March 2025 Source Page: Welsh Revenue Authority equality report 2025 Document: Welsh Revenue Authority equality report 2025 (webpage) Found: great importance on protecting people’s privacy and their data in full compliance with the Data Protection Act
Friday 28th March 2025 Source Page: FOI release 24479: Misoprostol Document: Misoprostol (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)
Thursday 27th March 2025 Source Page: Relative income poverty: April 2023 to March 2024 Document: Relative income poverty: April 2023 to March 2024 (webpage) Found: are presented impartially and objectively and are in accordance with the requirements of the Data Protection Act
Wednesday 26th March 2025 Source Page: Eliminating profit from the care of looked after children: data protection impact assessment Document: Data protection impact assessment (PDF) Found: In our view the requirements of section 10 of and paragraph 1 of Schedule 1 to the Data Protection Act
Tuesday 25th March 2025 Source Page: FOI release 24554: Brilliant Basics Grant Document: Brilliant Basics Grant (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Tuesday 25th March 2025 Source Page: FOI release 24487: Wildlife poisoning Document: Wildlife poisoning (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Tuesday 25th March 2025 Source Page: Attendance of pupils in maintained schools: 2 September 2024 to 14 March 2025 Document: Attendance of pupils in maintained schools: 2 September 2024 to 14 March 2025 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Monday 17th March 2025 Source Page: Food Business Accelerator scheme (window 2): general rules booklet Document: Food Business Accelerator scheme (window 2): general rules booklet (webpage) Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004, Data Protection Act
Thursday 13th March 2025 Source Page: Participation of young people in education and the labour market: 2022 and 2023 (provisional) Document: Participation of young people in education and the labour market: 2022 and 2023 (provisional) (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Wednesday 12th March 2025 Source Page: FOI release 24353: A470 access road Document: A470 access road (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Tuesday 11th March 2025 Source Page: Attendance of pupils in maintained schools: 2 September 2024 to 28 February 2025 Document: Attendance of pupils in maintained schools: 2 September 2024 to 28 February 2025 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Monday 10th March 2025 Source Page: Scoping study for mixed attainment teaching practice in schools in Wales: report Document: Scoping study for mixed attainment teaching practice in schools in Wales (PDF) Found: The information you provide will be handled in accordance with the UK Data Protection Act 1998, which
Thursday 6th March 2025 Source Page: Ffermio Bro - Farming in Designated Landscapes (stage 1): rules booklet Document: Ffermio Bro - Farming in Designated Landscapes (stage 1): rules booklet (webpage) Found: obligations under the Freedom of Information Act 2000, the Environmental Information Act 2004 or the Data Protection Act
Thursday 6th March 2025 Source Page: FOI release 23347: Grooming Gangs Document: Grooming Gangs (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)
Thursday 6th March 2025 Source Page: FOI release 23347: Grooming Gangs Document: Doc 3 (PDF) Found: The present study complied with the 2018 Data Protection Act, which allows sensitive study data to be
Tuesday 4th March 2025 Source Page: Attendance and absence from schools: September 2023 to August 2024 Document: Attendance and absence from schools: September 2023 to August 2024 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Friday 28th February 2025 Source Page: Small Grants – Woodland Creation (windows 7, 8 and 9): rules booklet Document: Small Grants – Woodland Creation (windows 7, 8 and 9): rules booklet (webpage) Found: in accordance with the obligations and duties under the Freedom of Information Act 2000, the Data Protection Act
Friday 28th February 2025 Source Page: FOI release 23327: Physician associate students Document: Physician associate students (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)
Friday 28th February 2025 Source Page: Woodland Creation Grant (window 5): rules booklet Document: Woodland Creation Grant (window 5): rules booklet (webpage) Found: in accordance with the obligations and duties under the Freedom of Information Act 2000, the Data Protection Act
Wednesday 26th February 2025 Source Page: FOI release 23335: Ainon Welsh Baptist Chapel, Treorchy Document: Ainon Welsh Baptist Chapel, Treorchy (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Wednesday 26th February 2025 Source Page: Small Grants – Efficiency (window 4): general rules booklet Document: Small Grants – Efficiency (window 4): general rules booklet (webpage) Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004 or the Data Protection Act
Tuesday 25th February 2025 Source Page: FOI release 23329: Protocols Document: Protocols (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Tuesday 25th February 2025 Source Page: Attendance of pupils in maintained schools: 2 September 2024 to 14 February 2025 Document: Attendance of pupils in maintained schools: 2 September 2024 to 14 February 2025 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Monday 24th February 2025 Source Page: FOI release 23301: Brilliant Basics Grant for Llansteffan North Carpark Document: Brilliant Basics Grant for Llansteffan North Carpark (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Monday 24th February 2025 Source Page: FOI release 23294: Ty Llwyd Quarry Document: Doc 1 (PDF) Found: Information Act 2000 (the “FOIA”), the Environmental Information Regulations 2004 (the “EIR”), the Data Protection Act
Wednesday 19th February 2025 Source Page: Single Application Form (SAF) 2025: rules booklet Document: Single Application Form (SAF) 2025: rules booklet (PDF) Found: accordance with its obligations and duties under the: • Freedom of Information Act 2000 • The Data Protection Act
Thursday 13th February 2025 Source Page: FOI release 23265: Tŷ Llwyd Quarry Document: Doc 1 (PDF) Found: Information Act 2000 (the “FOIA”), the Environmental Information Regulations 2004 (the “EIR”), the Data Protection Act
Wednesday 12th February 2025 Source Page: FOI release 23211: Special Advisers Document: Special Advisers (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)
Wednesday 12th February 2025 Source Page: FOI release 23253: Cafcass policies Document: Cafcass policies (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Tuesday 11th February 2025 Source Page: Contracting authority onboarding Document: Contracting authority onboarding (webpage) Found: It is a requirement under Article 26 of Data Protection Act 2018 and is quite commonly used in Central
Tuesday 11th February 2025 Source Page: Attendance of pupils in maintained schools: 2 September 2024 to 31 January 2025 Document: Attendance of pupils in maintained schools: 2 September 2024 to 31 January 2025 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Monday 10th February 2025 Source Page: FOI release 23243: E Harley Street Primary Care Solutions Document: E Harley Street Primary Care Solutions (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)
Tuesday 28th January 2025 Source Page: Attendance of pupils in maintained schools: 2 September 2024 to 17 January 2025 Document: Attendance of pupils in maintained schools: 2 September 2024 to 17 January 2025 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Monday 20th January 2025 Source Page: FOI release 23209: Aberpergwm coal mine Document: Aberpergwm coal mine (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Monday 20th January 2025 Source Page: FOI release 23206: Palestine Document: Palestine (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Monday 20th January 2025 Source Page: Call for evidence: shore-based netting in Wales Document: Call for evidence: shore-based netting in Wales (PDF) Found: document is also available in Welsh UK General Data Protection Regulation (UK GDPR) and the Data Protection Act
Tuesday 14th January 2025 Source Page: Attendance of pupils in maintained schools: 2 September to 20 December 2024 Document: Attendance of pupils in maintained schools: 2 September to 20 December 2024 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Monday 13th January 2025 Source Page: General funding round window 2 (Welsh Marine and Fisheries Scheme): guidance Document: General funding round window 2 (Welsh Marine and Fisheries Scheme): guidance (webpage) Found: the Freedom of Information Act 2000, the Environmental Information Regulations 2004 and the Data Protection Act
Monday 13th January 2025 Source Page: Proposals to make the food environment healthier Document: Annex 1: draft statutory instrument (PDF) Found: data” and “ the data protection legislation” have the same meanings as in section 3 of the Data Protection Act
Thursday 9th January 2025 Source Page: School Governors' guide to the law Document: 4: Governing Body Procedures and Meetings (PDF) Found: personal data is handled in accordance with the General Data Protection Regulation and the Data Protection Act
Thursday 9th January 2025 Source Page: School Governors' guide to the law Document: 10: Staffing (PDF) Found: regard to and comply with the requirements of the Freedom of Information Act 2000 and the Data Protection Act
Thursday 9th January 2025 Source Page: School Governors' guide to the law Document: 6: Providing Information (PDF) Found: to parents; • pupils’ educational records and pupil reports; • information covered by the Data Protection Act
Thursday 9th January 2025 Source Page: School Governors' guide to the law Document: Annex 3: Glossary (PDF) Found: D Data Protection Act 1998 (DPA) - an Act making provision for the regulation of the processing of
Thursday 9th January 2025 Source Page: Small Grants - Environment (landscape and pollinators): general rules booklet 2025 Document: Small Grants - Environment (landscape and pollinators): general rules booklet 2025 (webpage) Found: in accordance with the obligations and duties under the Freedom of Information Act 2000, the Data Protection Act
Wednesday 8th January 2025 Source Page: Advertisement consent and discontinuance notice appeal form Document: Advertisement consent and discontinuance notice appeal form (PDF) Found: supplied by you in this form, is in accordance with the terms of our registration under the Data Protection Act
Tuesday 7th January 2025 Source Page: Diversity and inclusion guidance for registered political parties Document: Draft guidance (webpage) Found: Compliance with relevant legislation Political parties are reminded of their obligations under the Data Protection Act
Thursday 2nd January 2025 Source Page: Woodland Creation Planning Scheme (January 2025): rules booklet Document: Woodland Creation Planning Scheme (January 2025): rules booklet (webpage) Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004 or the Data Protection Act
Monday 30th December 2024 Source Page: Draft Senedd Cymru (Representation of the People) Order Document: The Senedd Cymru (Representation of the People) Order 2025 (webpage) Found: In this paragraph, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018
Tuesday 24th December 2024 Source Page: FOI release 23147: Wildlife poisoning Document: Wildlife poisoning (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Friday 20th December 2024 Source Page: Allocation of accommodation and homelessness: guidance for local authorities Document: Allocation of accommodation and homelessness: guidance for local authorities (PDF) Found: administering allocation schemes, Local Authorities must comply with the provisions of the Data Protection Act
Thursday 19th December 2024 Source Page: Woodland Restoration Scheme (window 3) - Forest Management Plan: template Document: Woodland Restoration Scheme - Forest Management Plan: template (webpage) Found: in accordance with the obligations and duties under the Freedom of Information Act 2000, the Data Protection Act
Thursday 19th December 2024 Source Page: Managing technology that manages people Document: Managing technology that manages people: a Social Partnership approach to algorithmic management systems in the Welsh public sector (PDF) Found: Act 1974, • the Human Rights Act 1998, • the Equality Act 2010, 10 • the Data Protection Act
Wednesday 18th December 2024 Source Page: FOI release 21984: Dublin office Document: Dublin office (PDF) Found: We believe that releasing this information would be in breach of the Data Protection Act.
Wednesday 18th December 2024 Source Page: Integrated Natural Resources Scheme: project delivery plan guidance Document: Integrated Natural Resources Scheme: project delivery plan guidance (webpage) Found: obligations under the Freedom of Information Act 2000, the Environmental Information Act 2004 or the Data Protection Act
Tuesday 17th December 2024 Source Page: Absenteeism from primary schools: September 2023 to August 2024 Document: Absenteeism from primary schools: September 2023 to August 2024 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Tuesday 17th December 2024 Source Page: Attendance of pupils in maintained schools: 2 September to 6 December 2024 Document: Attendance of pupils in maintained schools: 2 September to 6 December 2024 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Monday 16th December 2024 Source Page: FOI release 22105: Physician associates Document: Physician associates (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)
Friday 13th December 2024 Source Page: FOI release 22095: Pandemic preparedness Document: Pandemic preparedness (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)
Monday 9th December 2024 Source Page: FOI release 22088: Eating disorder review Document: Eating disorder review (PDF) Found: Information Act, as it is personal data protected by the General Data Protection Regulation and Data Protection Act
Monday 9th December 2024 Source Page: The Disused Mine and Quarry Tips (Wales) Bill Document: Data protection impact assessment (PDF) Found: The Authority is a competent authority (within the meaning of section 30(1)(b) of the Data Protection Act
Thursday 5th December 2024 Source Page: FOI release 22128: Call-in Planning application Document: Call-in Planning application (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Thursday 5th December 2024 Source Page: Examination results: September 2023 to August 2024 Document: Examination results: September 2023 to August 2024 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Tuesday 3rd December 2024 Source Page: FOI release 22067: Phonics Document: Phonics (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)
Tuesday 3rd December 2024 Source Page: Single Unified Safeguarding Review: statutory guidance Document: Statutory guidance (PDF) Found: Data protection, privacy and confidentiality considerations 10.9 The Data Protection Act 2018 and the
Tuesday 3rd December 2024 Source Page: Attendance of pupils in maintained schools: 2 September to 22 November 2024 Document: Attendance of pupils in maintained schools: 2 September to 22 November 2024 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Monday 25th November 2024 Source Page: Electric vehicle charging infrastructure procurement: technical advice note Document: Electric vehicle charging infrastructure procurement: technical advice note (PDF) Found: Data protection All systems and parties must comply with the Data Protection Act 2018 (UK GDPR).
Monday 25th November 2024 Source Page: Visitor Accommodation (Register and Levy) Etc. (Wales) Bill: data protection impact assessment Document: Data protection impact assessment (webpage) Found: new power, local authorities must have regard to their existing statutory duties under the Data Protection Act
Thursday 21st November 2024 Source Page: FOI release 22050: CRI services Document: CRI services (PDF) Found: Personal data protected by the General Data Protection Regulation and Data Protection Act 2018.
Tuesday 19th November 2024 Source Page: Attendance of pupils in maintained schools: 2 September to 8 November 2024 Document: Attendance of pupils in maintained schools: 2 September to 8 November 2024 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Monday 18th November 2024 Source Page: FOI release 22032: Planning application Document: Planning application (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Friday 15th November 2024 Source Page: Iaith Athrawon Yfory Incentive Scheme: guidance for students 2025 to 2026 Document: Iaith Athrawon Yfory Incentive Scheme: guidance for students 2025 to 2026 (webpage) Found: Information Regulations 2004 (the “EIR”) the General Data Protection Regulation (GDPR) and Data Protection Act
Thursday 14th November 2024 Source Page: Welsh Government retention and disposal schedule Document: Retention and disposal schedule (PDF) Found: For sensitive information, including that covered by the Data Protection Act 2018 (which replaced the
Wednesday 13th November 2024 Source Page: Digital submission of planning application forms and associated consents Document: Digital submission of planning application forms and associated consents (PDF) Found: In accordance with the Data Protection Act 2018, Welsh Government is the data controller for personal
Monday 11th November 2024 Source Page: Listed building and conservation area enforcement notice appeal form Document: Listed building enforcement and conservation area enforcement appeal form (PDF) Found: supplied by you in this form, is in accordance with the terms of our registration under the Data Protection Act
Monday 11th November 2024 Source Page: Listed building and conservation area consent appeal form Document: Listed building consent or conservation area consent appeal form (PDF) Found: supplied by you in this form, is in accordance with the terms of our registration under the Data Protection Act
Monday 11th November 2024 Source Page: FOI release 21937: International Engagement budget Document: Internal review (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Monday 11th November 2024 Source Page: Enforcement notice appeal form Document: Enforcement notice appeal form (PDF) Found: supplied by you in this form, is in accordance with the terms of our registration under the Data Protection Act
Monday 11th November 2024 Source Page: FOI release 22005: Pig Registration Document: Pig Registration (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Monday 11th November 2024 Source Page: Woodland Restoration Scheme (window 3): rules booklet Document: Woodland Restoration Scheme (window 3): rules booklet (webpage) Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004 or the Data Protection Act
Tuesday 5th November 2024 Source Page: FOI release 22013: Flying Start Document: Flying Start (PDF) Found: Contact name and email address are considered personal data as defined in the Data Protection Act 2018
Tuesday 5th November 2024 Source Page: Attendance of pupils in maintained schools: 2 September to 25 October 2024 Document: Attendance of pupils in maintained schools: 2 September to 25 October 2024 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Monday 4th November 2024 Source Page: FOI release 21993: Physician Associates Document: Physician Associates (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)
Monday 4th November 2024 Source Page: Agricultural Diversification and Horticulture Scheme: rules booklet Document: Agricultural Diversification and Horticulture Scheme: rules booklet (webpage) Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004 or the Data Protection Act
Monday 4th November 2024 Source Page: Growing for the environment: rules booklet Document: Growing for the environment: rules booklet (window 6) (webpage) Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004 or the Data Protection Act
Monday 4th November 2024 Source Page: Growing for the environment: rules booklet Document: Growing for the environment: rules booklet (window 4) (webpage) Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004 or the Data Protection Act
Monday 4th November 2024 Source Page: Growing for the environment: rules booklet Document: Growing for the environment: rules booklet (window 5) (webpage) Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004 or the Data Protection Act
Monday 4th November 2024 Source Page: Growing for the environment: rules booklet Document: Growing for the environment: rules booklet (window 2) (webpage) Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004 or the Data Protection Act
Monday 4th November 2024 Source Page: Growing for the environment: rules booklet Document: Growing for the environment: rules booklet (window 3) (webpage) Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004 or the Data Protection Act
Monday 4th November 2024 Source Page: Growing for the environment: rules booklet Document: Growing for the environment: rules booklet (window 1) (webpage) Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004 or the Data Protection Act
Monday 4th November 2024 Source Page: Small Grants – Horticulture Start Up (window 3): rules booklet Document: Small Grants – Horticulture Start Up (window 3): rules booklet (webpage) Found: obligations under the Freedom of Information Act 2000, the Environmental Information Act 2004 or the Data Protection Act
Monday 28th October 2024 Source Page: Open government report: 2023 Document: Open government report: 2023 (PDF) Found: Information Act 2000 (FOIA), the Environmental Information Regulations 2004 (EIRs) and the Data Protection Act
Friday 25th October 2024 Source Page: Safeguarding people: an introduction Document: Working together to safeguard people volume 1: introduction and overview (PDF) Found: Practitioners must share information in accordance with the Data Protection Act 1998 and the common
Thursday 24th October 2024 Source Page: Attendance of pupils in maintained schools: 2 September to 18 October 2024 Document: Attendance of pupils in maintained schools: 2 September to 18 October 2024 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Wednesday 23rd October 2024 Source Page: FOI release 21970: Aberaeron Library Document: Aberaeron Library (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)
Wednesday 23rd October 2024 Source Page: FOI release 21970: Aberaeron Library Document: Doc 2 (PDF) Found: Under the UK GDPR, Data Protection Act 2018 and the Freedom of Information Act 2000 the contents of
Monday 21st October 2024 Source Page: FOI release 20877: St Isan Nursing Home Document: Internal review - Doc 1 (PDF) Found: Information Act 2000 (the “FOIA”), the Environmental Information Regulations 2004 (the “EIR”), the Data Protection Act
Monday 21st October 2024 Source Page: FOI release 20877: St Isan Nursing Home Document: Internal review (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)
Thursday 17th October 2024 Source Page: Attendance of pupils in maintained schools: 2 September to 11 October 2024 Document: Attendance of pupils in maintained schools: 2 September to 11 October 2024 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Monday 14th October 2024 Source Page: FOI release 21942: Highway Improvement Project Document: Highway Improvement Project (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)
Thursday 10th October 2024 Source Page: Attendance of pupils in maintained schools: 2 September to 4 October 2024 Document: Attendance of pupils in maintained schools: 2 September to 4 October 2024 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Thursday 3rd October 2024 Source Page: Examination results: September 2023 to August 2024 (provisional) Document: Examination results: September 2023 to August 2024 (provisional) (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Thursday 3rd October 2024 Source Page: Attendance of pupils in maintained schools: 2 to 27 September 2024 Document: Attendance of pupils in maintained schools: 2 to 27 September 2024 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Tuesday 1st October 2024 Source Page: Absenteeism from secondary schools: September 2023 to August 2024 Document: Absenteeism from secondary schools: September 2023 to August 2024 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Thursday 26th September 2024 Source Page: Rent Smart Wales: code of practice Document: Rent Smart Wales: code of practice (PDF) Found: the reason for such a deposit, and all associated terms and conditions 10 Section 7 of the Data Protection Act
Thursday 26th September 2024 Source Page: Attendance of pupils in maintained schools: 2 to 20 September 2024 Document: Attendance of pupils in maintained schools: 2 to 20 September 2024 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Monday 23rd September 2024 Source Page: FOI release 21910: School Organisation Code Document: Doc 1 (PDF) Found: Under the UK GDPR, Data Protection Act 2018 and the Freedom of Information Act 2000 the contents of