Found: launched a £250m language services tender, allowing AI integration if bidders comply with the UK Data

Found: costs recovered or received for work done for other departments, freedom of information receipts, data

Found: The proposal primarily restricts naming individuals, in ongoing investigations due to GDPR and the Data

Found: also other UK laws that only permit disclosure of information under certain conditions, such as the Data

Found: the GDPR as retained EU law , through the European Union Withdrawal Act 2018, supplemented by the Data

Question to the Department of Health and Social Care:

To ask the Secretary of State for Health and Social Care, what steps his Department is taking to monitor NHS Trusts' adherence to (a) General Medical Council and (b) National Institute for Health and Care Excellence guidance on patient records.

Answered by Karin Smyth - Minister of State (Department of Health and Social Care)

Each National Health Service trust is a data controller under the Data Protection Act 2018, and therefore responsible for ensuring the accuracy and integrity of their records. To assist trusts in fulfilling these responsibilities, a range of guidance and assurance is in place.

For example, NHS England publishes a Code of Practice on Records Management for all NHS trusts to follow. This covers all aspects of records management, including the accuracy and reliability of medical records. Each trust is responsible for following the principles and guidance set out in the code, which may include local measures, such as a record keeping audit, or monitoring the availability of records.

In addition, in line with the Code of Practice, NHS trusts are responsible for ensuring they have appropriate policies and procedures in place to manage their records. This will usually be a standalone records management policy, with associated procedures, such as how to destroy records.

Furthermore, NHS England’s Data Security and Protection Toolkit (DSPT) requires NHS trusts to understand legal and professional obligations for records management. The DSPT involves a periodic audit in which trusts have to demonstrate they are adhering to this requirement.

Regulators also set out professional standards for health and care professionals. For example, the General Medical Council’s Good Medical Practice requires doctors to make sure that formal records of their work, including patients' records, are clear, accurate, contemporaneous, and legible.

The Care Quality Commission has powers, under section 63(2)(b) of the Health and Social Care Act 2008, to access records held by the service that they are inspecting, where necessary, as part of their regulatory functions.

Question to the Department of Health and Social Care:

To ask the Secretary of State for Health and Social Care, what steps he is taking to ensure that NHS Trusts adhere to national guidelines on the (a) accuracy and (b) reliability of medical records.

Answered by Karin Smyth - Minister of State (Department of Health and Social Care)

Each National Health Service trust is a data controller under the Data Protection Act 2018, and therefore responsible for ensuring the accuracy and integrity of their records. To assist trusts in fulfilling these responsibilities, a range of guidance and assurance is in place.

For example, NHS England publishes a Code of Practice on Records Management for all NHS trusts to follow. This covers all aspects of records management, including the accuracy and reliability of medical records. Each trust is responsible for following the principles and guidance set out in the code, which may include local measures, such as a record keeping audit, or monitoring the availability of records.

In addition, in line with the Code of Practice, NHS trusts are responsible for ensuring they have appropriate policies and procedures in place to manage their records. This will usually be a standalone records management policy, with associated procedures, such as how to destroy records.

Furthermore, NHS England’s Data Security and Protection Toolkit (DSPT) requires NHS trusts to understand legal and professional obligations for records management. The DSPT involves a periodic audit in which trusts have to demonstrate they are adhering to this requirement.

Regulators also set out professional standards for health and care professionals. For example, the General Medical Council’s Good Medical Practice requires doctors to make sure that formal records of their work, including patients' records, are clear, accurate, contemporaneous, and legible.

The Care Quality Commission has powers, under section 63(2)(b) of the Health and Social Care Act 2008, to access records held by the service that they are inspecting, where necessary, as part of their regulatory functions.

Question to the Department of Health and Social Care:

To ask the Secretary of State for Health and Social Care, what (a) policies and (b) procedures are in place across NHS Trusts to ensure that medical records are (i) accurate and (ii) evidence-based.

Answered by Karin Smyth - Minister of State (Department of Health and Social Care)

Each National Health Service trust is a data controller under the Data Protection Act 2018, and therefore responsible for ensuring the accuracy and integrity of their records. To assist trusts in fulfilling these responsibilities, a range of guidance and assurance is in place.

For example, NHS England publishes a Code of Practice on Records Management for all NHS trusts to follow. This covers all aspects of records management, including the accuracy and reliability of medical records. Each trust is responsible for following the principles and guidance set out in the code, which may include local measures, such as a record keeping audit, or monitoring the availability of records.

In addition, in line with the Code of Practice, NHS trusts are responsible for ensuring they have appropriate policies and procedures in place to manage their records. This will usually be a standalone records management policy, with associated procedures, such as how to destroy records.

Furthermore, NHS England’s Data Security and Protection Toolkit (DSPT) requires NHS trusts to understand legal and professional obligations for records management. The DSPT involves a periodic audit in which trusts have to demonstrate they are adhering to this requirement.

Regulators also set out professional standards for health and care professionals. For example, the General Medical Council’s Good Medical Practice requires doctors to make sure that formal records of their work, including patients' records, are clear, accurate, contemporaneous, and legible.

The Care Quality Commission has powers, under section 63(2)(b) of the Health and Social Care Act 2008, to access records held by the service that they are inspecting, where necessary, as part of their regulatory functions.

Found: persons with regard to the processing of personal data and on the free movement of such data(74) or the Data

Found: 2) In this regulation, “data protection legislation” has the same meaning as in section 3(9) of the Data

Found: to the act, so that any provisions in the act that provide for data sharing would be subject to the Data

Found: Protection Act 2018, ss 53 and 135 . 8 would have changed this to “vexatious or excessive”.16

Found: a fine. 20 (8) In this section— “data protection legislation” has the same meaning as in the Data

Found: a fine. 30 (8) In this section— “data protection legislation” has the same meaning as in the Data

Found: 15 (2) In subsection (1), “the data protection legislation” has the same meaning as in the Data

Found: to the act, so that any provisions in the act that provide for data sharing would be subject to the Data

Found: does not require the disclosure of personal data (within the meaning of section 3(2) of the Data

Found: does not require the disclosure of personal data (within the meaning of section 3(2) of the Data

Found: that, where there are provisions in the act which provide for data sharing, these are subject to the Data

Found: (3) In this section “the data protection legislation” has the same meaning as in the Data Protection

Found: (6) In this section “the data protection 5legislation” has the same meaning as in the Data Protection

Found: (6) 5In this section “the data protection legislation” has the same meaning as in the Data

Found: Protection Act 2018, ss 53 and 135 . 8 would have changed this to “vexatious or excessive”.16

Found: 646 Subsection (8) also defines the data protection legislation by reference to section 3(9) of the Data

Found: Exempts the processing of personal data for law enforcement purposes under Part 3 of the Data Protection

Found: UK businesses identify many benefits of the UK GDPR14 and the Data Protection Act 2018 (DPA 2018) for

Found: standards relating to interoperability lies in the General Data Protection Regulation (GDPR) and the Data

Found: Protection Act 2018 (“DPA 2018”), which regulates the processing of personal data.

Found: Regulations 2003 14 Changes to Part 3 and Part 4 of the Data Protection Act 2018 15 Information

Found: (2) In this Part “processing” has the same meaning as in the Data Protection Act 2018 (see section

Found: accordance with access to information law, such as : • the Freedom of Information Act 2000 (FOIA) • the Data

Found: following is to explain your rights and give you the information you are be entitled to under the Data

Found: requests made under the Freedom of Information Act 2000, the UK General Data Protection Regulation, the Data

Found: access to information regimes (these are primarily the Freedom of Information Act 2000 (FOIA), the Data

Found: standards relating to interoperability lies in the General Data Protection Regulation (GDPR) and the Data

Found: UK businesses identify many benefits of the UK GDPR14 and the Data Protection Act 2018 (DPA 2018) for

Found: Protection Act 1998) 09521 TEW Miscellaneous crimes against society 95 Disclosure, obstruction, false

Found: (Trustworthiness pillar, T6 Data governance) To comply with this and with the Data Protection Act of

Found: Figures fewer than 5 are supressed due to rounding to avoid disclosure required by the Data Protection

Found: Data Protection Act 2018 Ipsos is required to comply with the Data Protection Act 2018.

Found: access to information regimes (these are primarily the Freedom of Information Act 2000 (FOIA), the Data

Found: access to information regimes (these are primarily the Freedom of Information Act 2000 (FOIA), the Data

Found: information, may be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data

Found: information, may be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data

Found: The Home Office will process your personal data in accordance with the Data Protection Act and, in the

Found: The Home Office will process your personal data in accordance with the Data Protection Act and, in the

Found: information, may be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data

Found: information, may be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data

Found: information, may be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data

Found: information, may be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data

Found: by the UK Government as providing an adequate level of protection as set out in Section 17A of the Data

Found: disclosed to third parties only in compliance with the UK General Data Protection Regulation and the Data

Found: information, may be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data

Found: information, may be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data

Found: by the UK Government as providing an adequate level of protection as set out in Section 17A of the Data

Found: proportionate arrangements for collecting, storing, and sharing information, as set out in PSI 3/2018, The Data

Found: by the UK Government as providing an adequate level of protection as set out in Section 17A of the Data

Found: “Data Protection Legislation ” means (i) the UK GDPR, (ii) the Data Protection Act 2018 (‘DPA 2018’)

Found: “Data Protection Legislation ” means (i) the UK GDPR, (ii) the Data Protection Act 2018 (‘DPA 2018’)

Found: of technology and processes ensured that private data was not processed and the requirements of the Data

Found: Protection Act.

Found: This is to ensure compliance with the Data Protection Act.

Found: Information Sharing will follow the principles in the Data Protection Act 2018 including that it should

Found: of the report and the supplementary information in a safe and secure place in accordance with the Data

Found: “Data Protection Legislation” means (i) the UK GDPR, (ii) the Data Protection Act 2018 (‘DPA 2018’)

Found: “Data Protection Legislation ” means (i) the UK GDPR, (ii) the Data Protection Act 2018 (‘DPA 2018’)

Found: Data protection legislation (the Data Protection Act 2018 (the DPA 2018) and UK General Data Protection

Found: The UK General Data Protection Regulation (UK GDPR) and the UK Data Protection Act 2018 (DPA) Ipsos

Found: compensation for miscarriages of justice, and refusal to provide legal aid funding 0.2 0.4 Headquarters Data

Found: be in breach of our statutory obligations under the UK General Data Protection Regulation and/or the Data

Found: been applied to some of the information in order to protect personal information as governed by the Data

Found: been applied to some of the information in order to protect personal information as governed by the Data

Found: been ap plied to some of the information in order to protect personal information as governed by the Data

Found: been applied to some of the information in order to protect personal information as governed by the Data

Found: been applied to some of the information in order to pro tect personal information as governed by the Data

Found: another individual is exempt if its disclosure would breach any of the data protection principles in the Data

Found: The UK General Data Protection Regulation (GDPR) and the UK Data Protection Act (DPA) 2018 Ipsos

Found: The UK General Data Protection Regulation (GDPR) and the UK Data Protection Act (DPA) 2018 Ipsos

Found: The UK General Data Protection Regulation (GDPR) and the UK Data Protection Act (DPA) 2018 Ipsos

Found: The UK General Data Protection Regulation (GDPR) and the UK Data Protection Act (DPA) 2018 Ipsos

Found: Low numbers are suppressed to prevent disclosure in accordance with the Data Protection Act, 2018.

Found: Low numbers are suppressed to prevent disclosure in accordance with the Data Protection Act, 2018.

Found: Low numbers are suppressed to prevent disclosure in accordance with the Data Protection Act, 1998.

Found: wide Responsible for Information training and they understand their responsibilities under the Data

Found: wide Security and Data Protection training and they understand their responsibilities under the Data

Found: compliance with the Principles; and (e) appropriate arrangements for ensuring compliance with the Data

Found: independent audit of security; (iv) are compliant with the Principles; and (v) are compliant with the Data

Found: proportionate arrangements for collecting, storing, and sharing information, as set out in PSI 3/2018, The Data

Found: Detail on UK General Data Protection Regulations ( GDPR) and the lawful basis according to the Data

Found: The National Dental Epidemiology Programme and the General Data Protection Regulation/Data Protection

Found: The General Data Protection Regulations (GDPR) and Data Protection Act 2018 (DPA 2018) • The statutory

Found: relating to the processing of personal data and privacy, including but not limited to: (1) UK GDPR; (2) Data

Found: Information Sharing will follow the principles in the Data Protection Act 2018 including that it should

Found: accordance with our responsibilities under His Majesty’s Government (HMG) Security Policy Framework and the Data

Found: handled in accordance with the CMA’s obligations under the UK General Data Protection Regulation and the Data

Found: (DPO), supported by an Information Governance Manager, overseeing our responsibilities under the Data

Found: (DPO), supported by an Information Governance Manager, overseeing our responsibilities under the Data

Found: Your rights under the UK General Data Protection Regulation and the UK Data Protection Act 2018 apply

Found: (like your contact details), we comply with data protection law, as set out in the UK GDPR and the Data

Found: This legislation is the General Data Protection Regulation 2016 (GDPR) and the Data Protection Act 2

Found: information, may be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data

Found: Protection Act 2018. 9.

Found: This also sets out your rights under the Data Protection Act 2018 and explains how you can access your

Found: carrying out functions on its behalf; Data Protection Legislation means (i) the GDPR ; (ii) the Data

Found: Protection Act 2018 The Forestry Commission is required to collect a number of personal details

Found: may be disclosed to third parties in accordance with the Freedom of Information Act 2000 and t he Data

Found: Code of Practice Care Act 2014 Health and Care Act 2022 Equality Act 2010 Human Rights Act 1998 (HRA) Data

Found: persons with regard to the processing of personal data and on the free movement of such data(74) or the Data

Found: information, may be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data

Found: The Home Office will process your personal data in accordance with the Data Protection Act and, in the

Found: The Home Office will process your personal data in accordance with the Data Protection Act and, in

Found: The personal data on PND is processed in accordance with the provisions of the Data Protection Act (

Found: the development, provision and use of Cerberus services will be primarily in accordance with Part 3 Data

Found: under the Freedom of Information Act 2000 , the Environmental Information Regulations 2004 or the Data

Found: The UK General Data Protection Regulation (UK GDPR) and the UK Data Protection Act 2018 (DPA) Ipsos

Found: request for information is received by either party under the Freedom of Information Act 2000, or the Data

Found: request for information is received by either party under the Freedom of Information Act 2000, or the Data

Found: reviewed service designs, processes and supporting products to ensure we remain compliant with GDPR/UK Data

Found: reviewed service designs, processes and supporting products to ensure we remain compliant with GDPR/UK Data

Found: reviewed service designs, processes and supporting products to ensure we remain compliant with GDPR/UK Data

Found: reviewed service designs, processes and supporting products to ensure we remain compliant with GDPR/UK Data

Found: reviewed service designs, processes and supporting products to ensure we remain compliant with GDPR/UK Data

Found: the recording and monitoring strategies that will be used for management purposes in line with the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: judgment of a relevant court of law, or directives or requirements of any regulatory body including the Data

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: ion principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: ion principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: my office in line with the requirements of the UK General Data Protection Regulation (UK GDPR) and Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: and (b) regulate the relationship between FOISA, the UK General Data Protection Regulation and the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: principles in Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in Section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: Minister, Potential Breach of: - ECHR, the Human Rights Act 1998 and the Scotland Act 1998, The Data

Found: principles in Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: Protection Act 2018?

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: third party and disclosing it would contravene the data protection principles in Schedule 1 to the Data

Found: third party and disclosing it would contravene the data protection principles in Schedule 1 to the Data

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: third party and disclosing it would contravene the data protection principles in Schedule 1 to the Data

Found: third party and disclosing it would contravene the data protection principles in Schedule 1 to the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: individuals with regard to the processing of Personal Data to which a Party is subject including the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: Protection Act 2018 (“the 2018 Act”)3 and in particular t he provision for data controllers to ensure

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: and audit purposes.Where this is the case, the processing will be in accordance with the UK GDPR and Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: Review V SCOTTISH MINISTERS Salmon Net Fishing Association the Scottish Ministers and Opinion on the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: Minutes may be redacted only so as to ensure compliance with any relevant legislation (e.g. the Data

Found: Minutes may be redacted only so as to ensure compliance with any relevant legislation (e.g. the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: personal data in line with their obligations under the General Data Protection Regulation and the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: principles in Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: These obligations include the General Data Protection Regulation, the UK Data Protection Act, and other

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: principles in Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data

Found: principles in Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: principles in Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: This 4 includes the Data Protection Act 2018, as well as the European Parliament General Data Protection

Found: principles in Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: protection principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data

Question

To ask the Scottish Government, in light of the findings in the report, The Ethical Basis of the Scottish Health and Wellbeing Census, 2021-22, by Lindsay Paterson, Emeritus Professor of Education Policy at the University of Edinburgh, which outlines ethical failings in how data was gathered, how it will give all children and families the right to request deletion of their data, and whether it will commit to deleting all data gathered, in light of the reported concerns that it is unfit to be used by ethical researchers.

Answered by Gilruth, Jenny - Cabinet Secretary for Education and Skills

The Scottish Government takes the privacy of citizen’s data very seriously and is committed to ensuring that the personal data we hold complies with the Data Protection Act and the UK General Data Protection Regulation (UK GDPR).

The UK GDPR gives individuals the right to have personal data erased, and requests for deletion can be made to the data controller(s) of the personal data. However, the right is not absolute and only applies in certain circumstances.

The right to erasure does not apply if processing is necessary for some specific purposes, including for the performance of a task carried out in the public interest or in the exercise of official authority, or for archiving purposes in the public interest, scientific research, historical research or statistical purposes where erasure is likely to render impossible or seriously impair the achievement of that processing.