Data Protection Act 2018 Alert Sample


Alert Sample

View the Parallel Parliament page for the Data Protection Act 2018

Information since 11 Jan 2025, 12:04 a.m.


Data Protection Act 2018 mentioned

Parliamentary Debates
Children’s Wellbeing and Schools Bill
135 speeches (32,144 words)
Thursday 22nd May 2025 - Lords Chamber
Department for International Development
Mentions:
1: Baroness Smith of Malvern (Lab - Life peer) could be used for research purposes, if this is authorised in accordance with UK GDPR and the Data Protection Act - Link to Speech

Data (Use and Access) Bill [HL]
100 speeches (25,584 words)
Consideration of Commons amendments and / or reasons
Monday 12th May 2025 - Lords Chamber
Department for Business and Trade
Mentions:
1: None section). (6) In this section, “the data protection legislation” has the same meaning as in the Data Protection Act - Link to Speech

Health and Social Care Information Standards (Procedure) Regulations 2025
11 speeches (2,656 words)
Monday 12th May 2025 - Grand Committee

Mentions:
1: Baroness Blake of Leeds (Lab - Life peer) These include provisions of the Data Protection Act 2018 and the UK general data protection regulation - Link to Speech

Border Security, Asylum and Immigration Bill
140 speeches (34,121 words)
Report stage
Monday 12th May 2025 - Commons Chamber
Home Office
Mentions:
1: Judith Cummins (Lab - Bradford South) status.New clause 20—Exemptions from the UK GDPR: illegal migration and foreign criminals—“(1) The Data Protection Act - Link to Speech

Crime and Policing Bill (Fourteenth sitting)
97 speeches (18,031 words)
Committee stage: 14th sitting
Thursday 8th May 2025 - Public Bill Committees
Home Office
Mentions:
1: Diana Johnson (Lab - Kingston upon Hull North and Cottingham) is already subject to safeguards, including, among others, the Human Rights Act 1998 and the Data Protection Act - Link to Speech



Select Committee Documents
Thursday 22nd May 2025
Special Report - 3rd Special Report - Screen time: Impacts on education and wellbeing: Government Response

Education Committee

Found: society services rely on this lawful ground to process personal data, the UK GDPR and the Data Protection Act

Wednesday 21st May 2025
Estimate memoranda - Ministry of Justice Main Estimate Memorandum 2025-26

Justice Committee

Found: claims against the core department, some of which involve possible financial liabilities. 5,050 Data Protection Act

Wednesday 21st May 2025
Estimate memoranda - Northern Ireland Office Main Estimate 2025-26

Northern Ireland Affairs Committee

Found: recovered or received for work done for other departments, freedom of information receipts, Data Protection Act

Wednesday 21st May 2025
Estimate memoranda - Main Estimate Memorandum (2025-26) Northern-Ireland

Northern Ireland Affairs Committee

Found: recovered or received for work done for other departments, freedom of information receipts, Data Protection Act

Tuesday 20th May 2025
Special Report - Large Print - 4th Special Report - Tackling non-consensual intimate image abuse: Government Response

Women and Equalities Committee

Found: Additionally, the UK General Data Protection Regulation and the Data Protection Act 2018 require all

Tuesday 20th May 2025
Special Report - 4th Special Report - Tackling non-consensual intimate image abuse: Government Response

Women and Equalities Committee

Found: Additionally, the UK General Data Protection Regulation and the Data Protection Act 2018 require all

Thursday 15th May 2025
Written Evidence - Justice
BSAI0027 - Border Security, Asylum and Immigration Bill

Border Security, Asylum and Immigration Bill - Human Rights (Joint Committee)

Found: of small boats arrivals was unlawful and the Home Office conceded it was a breach of the Data Protection Act

Thursday 15th May 2025
Written Evidence - Open Rights Group
BSAI0011 - Border Security, Asylum and Immigration Bill

Border Security, Asylum and Immigration Bill - Human Rights (Joint Committee)

Found: the Bill relies on existing oversight regimes (e.g. the Investigatory Powers Act 2016 and Data Protection Act

Thursday 15th May 2025
Written Evidence - Liberty
BSAI0003 - Border Security, Asylum and Immigration Bill

Border Security, Asylum and Immigration Bill - Human Rights (Joint Committee)

Found: Further, S37 of the Data Protection Act 2018 requires that personal data processed for law enforcement

Wednesday 14th May 2025
Correspondence - Correspondence from the Parliamentary Under-Secretary of State regarding the introduction of Victims and Courts Bill dated 6 May 2025

Human Rights (Joint Committee)

Found: provided to eligible victims under the VCS or through the Helpline must be compliant with the Data Protection Act

Monday 12th May 2025
Written Evidence - Hymans Robertson LLP
AIFS0032 - AI in financial services

Treasury Committee

Found: AI regulatory regime, we should leverage existing frameworks such as:AIFS0032  UK GDPR & Data Protection Act

Monday 12th May 2025
Written Evidence - UK Finance
AIFS0074 - AI in financial services

Treasury Committee

Found: Schedule 2 of the UK Data Protection Act 2018 outlines exemptions which can in some cases be relied

Monday 12th May 2025
Written Evidence - Cardiff University, School of Law and Politics
AIFS0082 - AI in financial services

Treasury Committee

Found: Services and Markets Act 2000, the Money Laundering Regulations 2017 (as amended), and UK GDPR/Data Protection Act

Monday 12th May 2025
Written Evidence - Durham Law School
AIFS0079 - AI in financial services

Treasury Committee

Found: market players is heavily restricted when it comes to social scoring (see the EU GDPR / UK Data Protection Act



Written Answers
Offenders
Asked by: James McMurdock (Reform UK - South Basildon and East Thurrock)
Monday 19th May 2025

Question to the Ministry of Justice:

To ask the Secretary of State for Justice, what plans her Department has to strengthen the protection of people with spent convictions, in the context of technological advancements in data sharing.

Answered by Nicholas Dakin - Government Whip, Lord Commissioner of HM Treasury

The Rehabilitation of Offenders Act 1974 (the ROA) sets out when an offender is considered to be ‘rehabilitated’ for the purposes of the Act and sets out the relevant rehabilitation periods for cautions and convictions, i.e. when a caution or conviction becomes ‘spent’. Where an offender is rehabilitated for the purposes of the ROA, the ROA provides that they are entitled to withhold the fact of, or information about their spent cautions or convictions. The Rehabilitation of Offenders Act 1974 (exceptions) order 1975 creates exceptions with the effect that in some circumstances, spent as well as unspent cautions and convictions must be disclosed and may be taken into account when assessing a person’s suitability for certain positions. This balances the protection of the public with allowing ex-offenders to move on with their lives. We are carefully assessing the evidence in this space before considering whether adjustments to the regime are necessary.

An individual can check if a conviction or caution is spent or unspent via the GOV.UK Disclosure Checker: Check if you need to tell someone about your criminal record: Check if your conviction or caution is spent - GOV.UK. We provide information, advice and guidance for employers, landlords and other entities on how they should implement the Rehabilitation of Offenders Act (ROA). This can be found on The GOV.UK guidance on the ROA. The guidance is clear that balanced judgements should be made and factors such as the person’s age at the time of the offence, the nature of the offence, how long ago the offence was committed, its relevance to the application or post in question, and what else is known about the persons conduct should be considered. We also provide good practice resources on hiring prison leavers via the New Futures Network. If an employer is unsure what check can be requested, they can contact the Disclosure and Barring Service.

As part of the Government's plan to Make Work Pay, the Employment Rights Bill is repealing the two-year qualifying period for unfair dismissal protection. By making this a ‘day one’ right, millions of employees will have protection against being arbitrarily fired by their employer. The Government is taking steps to support those with criminal convictions. Employees with spent convictions will be able claim unfair dismissal from day one (excluding those roles covered by the Exceptions Order). Reforms of unfair dismissal will take effect no sooner than autumn 2026.

Organisations in the UK that process personal data must comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA). Oversight and enforcement of these data protection laws are carried out independently of the government by the Information Commissioner’s Office (ICO). Under these laws, individuals have several rights concerning their personal data, including the right to request its erasure - commonly referred to as the ‘right to be forgotten’. The ICO, as the UK’s independent data protection regulator, provides comprehensive guidance on its website.

Offenders
Asked by: James McMurdock (Reform UK - South Basildon and East Thurrock)
Monday 19th May 2025

Question to the Ministry of Justice:

To ask the Secretary of State for Justice, what guidance her Department provides to (a) employers, (b) landlords and (c) other entities to ensure they properly understand and respect the rights of people with spent convictions.

Answered by Nicholas Dakin - Government Whip, Lord Commissioner of HM Treasury

The Rehabilitation of Offenders Act 1974 (the ROA) sets out when an offender is considered to be ‘rehabilitated’ for the purposes of the Act and sets out the relevant rehabilitation periods for cautions and convictions, i.e. when a caution or conviction becomes ‘spent’. Where an offender is rehabilitated for the purposes of the ROA, the ROA provides that they are entitled to withhold the fact of, or information about their spent cautions or convictions. The Rehabilitation of Offenders Act 1974 (exceptions) order 1975 creates exceptions with the effect that in some circumstances, spent as well as unspent cautions and convictions must be disclosed and may be taken into account when assessing a person’s suitability for certain positions. This balances the protection of the public with allowing ex-offenders to move on with their lives. We are carefully assessing the evidence in this space before considering whether adjustments to the regime are necessary.

An individual can check if a conviction or caution is spent or unspent via the GOV.UK Disclosure Checker: Check if you need to tell someone about your criminal record: Check if your conviction or caution is spent - GOV.UK. We provide information, advice and guidance for employers, landlords and other entities on how they should implement the Rehabilitation of Offenders Act (ROA). This can be found on The GOV.UK guidance on the ROA. The guidance is clear that balanced judgements should be made and factors such as the person’s age at the time of the offence, the nature of the offence, how long ago the offence was committed, its relevance to the application or post in question, and what else is known about the persons conduct should be considered. We also provide good practice resources on hiring prison leavers via the New Futures Network. If an employer is unsure what check can be requested, they can contact the Disclosure and Barring Service.

As part of the Government's plan to Make Work Pay, the Employment Rights Bill is repealing the two-year qualifying period for unfair dismissal protection. By making this a ‘day one’ right, millions of employees will have protection against being arbitrarily fired by their employer. The Government is taking steps to support those with criminal convictions. Employees with spent convictions will be able claim unfair dismissal from day one (excluding those roles covered by the Exceptions Order). Reforms of unfair dismissal will take effect no sooner than autumn 2026.

Organisations in the UK that process personal data must comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA). Oversight and enforcement of these data protection laws are carried out independently of the government by the Information Commissioner’s Office (ICO). Under these laws, individuals have several rights concerning their personal data, including the right to request its erasure - commonly referred to as the ‘right to be forgotten’. The ICO, as the UK’s independent data protection regulator, provides comprehensive guidance on its website.

Rehabilitation of Offenders Act 1974
Asked by: James McMurdock (Reform UK - South Basildon and East Thurrock)
Monday 19th May 2025

Question to the Ministry of Justice:

To ask the Secretary of State for Justice, whether she has made an assessment of the effectiveness of the Rehabilitation of Offenders Act 1974.

Answered by Nicholas Dakin - Government Whip, Lord Commissioner of HM Treasury

The Rehabilitation of Offenders Act 1974 (the ROA) sets out when an offender is considered to be ‘rehabilitated’ for the purposes of the Act and sets out the relevant rehabilitation periods for cautions and convictions, i.e. when a caution or conviction becomes ‘spent’. Where an offender is rehabilitated for the purposes of the ROA, the ROA provides that they are entitled to withhold the fact of, or information about their spent cautions or convictions. The Rehabilitation of Offenders Act 1974 (exceptions) order 1975 creates exceptions with the effect that in some circumstances, spent as well as unspent cautions and convictions must be disclosed and may be taken into account when assessing a person’s suitability for certain positions. This balances the protection of the public with allowing ex-offenders to move on with their lives. We are carefully assessing the evidence in this space before considering whether adjustments to the regime are necessary.

An individual can check if a conviction or caution is spent or unspent via the GOV.UK Disclosure Checker: Check if you need to tell someone about your criminal record: Check if your conviction or caution is spent - GOV.UK. We provide information, advice and guidance for employers, landlords and other entities on how they should implement the Rehabilitation of Offenders Act (ROA). This can be found on The GOV.UK guidance on the ROA. The guidance is clear that balanced judgements should be made and factors such as the person’s age at the time of the offence, the nature of the offence, how long ago the offence was committed, its relevance to the application or post in question, and what else is known about the persons conduct should be considered. We also provide good practice resources on hiring prison leavers via the New Futures Network. If an employer is unsure what check can be requested, they can contact the Disclosure and Barring Service.

As part of the Government's plan to Make Work Pay, the Employment Rights Bill is repealing the two-year qualifying period for unfair dismissal protection. By making this a ‘day one’ right, millions of employees will have protection against being arbitrarily fired by their employer. The Government is taking steps to support those with criminal convictions. Employees with spent convictions will be able claim unfair dismissal from day one (excluding those roles covered by the Exceptions Order). Reforms of unfair dismissal will take effect no sooner than autumn 2026.

Organisations in the UK that process personal data must comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA). Oversight and enforcement of these data protection laws are carried out independently of the government by the Information Commissioner’s Office (ICO). Under these laws, individuals have several rights concerning their personal data, including the right to request its erasure - commonly referred to as the ‘right to be forgotten’. The ICO, as the UK’s independent data protection regulator, provides comprehensive guidance on its website.

Offenders: Discrimination
Asked by: James McMurdock (Reform UK - South Basildon and East Thurrock)
Monday 19th May 2025

Question to the Ministry of Justice:

To ask the Secretary of State for Justice, what steps her Department is taking to ensure that organisations do not discriminate against people with spent convictions.

Answered by Nicholas Dakin - Government Whip, Lord Commissioner of HM Treasury

The Rehabilitation of Offenders Act 1974 (the ROA) sets out when an offender is considered to be ‘rehabilitated’ for the purposes of the Act and sets out the relevant rehabilitation periods for cautions and convictions, i.e. when a caution or conviction becomes ‘spent’. Where an offender is rehabilitated for the purposes of the ROA, the ROA provides that they are entitled to withhold the fact of, or information about their spent cautions or convictions. The Rehabilitation of Offenders Act 1974 (exceptions) order 1975 creates exceptions with the effect that in some circumstances, spent as well as unspent cautions and convictions must be disclosed and may be taken into account when assessing a person’s suitability for certain positions. This balances the protection of the public with allowing ex-offenders to move on with their lives. We are carefully assessing the evidence in this space before considering whether adjustments to the regime are necessary.

An individual can check if a conviction or caution is spent or unspent via the GOV.UK Disclosure Checker: Check if you need to tell someone about your criminal record: Check if your conviction or caution is spent - GOV.UK. We provide information, advice and guidance for employers, landlords and other entities on how they should implement the Rehabilitation of Offenders Act (ROA). This can be found on The GOV.UK guidance on the ROA. The guidance is clear that balanced judgements should be made and factors such as the person’s age at the time of the offence, the nature of the offence, how long ago the offence was committed, its relevance to the application or post in question, and what else is known about the persons conduct should be considered. We also provide good practice resources on hiring prison leavers via the New Futures Network. If an employer is unsure what check can be requested, they can contact the Disclosure and Barring Service.

As part of the Government's plan to Make Work Pay, the Employment Rights Bill is repealing the two-year qualifying period for unfair dismissal protection. By making this a ‘day one’ right, millions of employees will have protection against being arbitrarily fired by their employer. The Government is taking steps to support those with criminal convictions. Employees with spent convictions will be able claim unfair dismissal from day one (excluding those roles covered by the Exceptions Order). Reforms of unfair dismissal will take effect no sooner than autumn 2026.

Organisations in the UK that process personal data must comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA). Oversight and enforcement of these data protection laws are carried out independently of the government by the Information Commissioner’s Office (ICO). Under these laws, individuals have several rights concerning their personal data, including the right to request its erasure - commonly referred to as the ‘right to be forgotten’. The ICO, as the UK’s independent data protection regulator, provides comprehensive guidance on its website.

Criminal Records
Asked by: James McMurdock (Reform UK - South Basildon and East Thurrock)
Monday 19th May 2025

Question to the Ministry of Justice:

To ask the Secretary of State for Justice, what steps her Department is taking to ensure that spent convictions are not considered once spent.

Answered by Nicholas Dakin - Government Whip, Lord Commissioner of HM Treasury

The Rehabilitation of Offenders Act 1974 (the ROA) sets out when an offender is considered to be ‘rehabilitated’ for the purposes of the Act and sets out the relevant rehabilitation periods for cautions and convictions, i.e. when a caution or conviction becomes ‘spent’. Where an offender is rehabilitated for the purposes of the ROA, the ROA provides that they are entitled to withhold the fact of, or information about their spent cautions or convictions. The Rehabilitation of Offenders Act 1974 (exceptions) order 1975 creates exceptions with the effect that in some circumstances, spent as well as unspent cautions and convictions must be disclosed and may be taken into account when assessing a person’s suitability for certain positions. This balances the protection of the public with allowing ex-offenders to move on with their lives. We are carefully assessing the evidence in this space before considering whether adjustments to the regime are necessary.

An individual can check if a conviction or caution is spent or unspent via the GOV.UK Disclosure Checker: Check if you need to tell someone about your criminal record: Check if your conviction or caution is spent - GOV.UK. We provide information, advice and guidance for employers, landlords and other entities on how they should implement the Rehabilitation of Offenders Act (ROA). This can be found on The GOV.UK guidance on the ROA. The guidance is clear that balanced judgements should be made and factors such as the person’s age at the time of the offence, the nature of the offence, how long ago the offence was committed, its relevance to the application or post in question, and what else is known about the persons conduct should be considered. We also provide good practice resources on hiring prison leavers via the New Futures Network. If an employer is unsure what check can be requested, they can contact the Disclosure and Barring Service.

As part of the Government's plan to Make Work Pay, the Employment Rights Bill is repealing the two-year qualifying period for unfair dismissal protection. By making this a ‘day one’ right, millions of employees will have protection against being arbitrarily fired by their employer. The Government is taking steps to support those with criminal convictions. Employees with spent convictions will be able claim unfair dismissal from day one (excluding those roles covered by the Exceptions Order). Reforms of unfair dismissal will take effect no sooner than autumn 2026.

Organisations in the UK that process personal data must comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA). Oversight and enforcement of these data protection laws are carried out independently of the government by the Information Commissioner’s Office (ICO). Under these laws, individuals have several rights concerning their personal data, including the right to request its erasure - commonly referred to as the ‘right to be forgotten’. The ICO, as the UK’s independent data protection regulator, provides comprehensive guidance on its website.

Medical Records: Artificial Intelligence
Asked by: Lord Taylor of Warwick (Non-affiliated - Life peer)
Tuesday 13th May 2025

Question to the Department of Health and Social Care:

To ask His Majesty's Government what assessment they have made of artificial intelligence technology being trained on real patient data, and whether they intend to introduce regulation around the use of health records in training artificial intelligence

Answered by Baroness Merron - Parliamentary Under-Secretary (Department of Health and Social Care)

There are strict safeguards in place throughout the National Health Service to protect data. All providers of services which handle patient data must protect that data in line with the UK General Data Protection Regulation (UK GDPR), and the Data Protection Act 2018, and every health organisation is required to appoint a Caldicott Guardian to advise on the protection of people’s health and care data, and ensure it is used properly. This includes where artificial intelligence (AI) is used in relation to patient records.

The NHS AI Lab and Sciencewise, part of UK Research and Innovation, held a public dialogue on how the public feels decisions should be made about access to their personal health data for AI purposes. The AI Lab conducted a discovery exercise to design approaches based on insights from the public, which is now informing broader data stewardship initiatives, for example, as part of the Secure Data Environments.

To mitigate the likelihood and severity of any potential harm to individuals arising from the use of data in AI, the Information Commissioners Office has developed detailed AI guidance which provides an overarching view of data protection, including Data Protection Impact Assessments and UK GDPR. They have also produced an AI toolkit to support organisations auditing compliance of their AI-based technologies. NHS bodies are expected to make use of this guidance and toolkit.



Parliamentary Research
Mental Health Bill [HL] 2024-25 - CBP-10260
May. 14 2025

Found: , so that any provisions in the act that provide for data sharing would be subject to the Data Protection Act



Bill Documents
Jun. 02 2025
Notices of Amendments as at 2 June 2025
Crime and Policing Bill 2024-26
Amendment Paper

Found: (2) For the purposes of Article 6(1) of the UK GDPR, section 35 of the Data Protection Act 2018 (“

May. 30 2025
Notices of Amendments as at 30 May 2025
Crime and Policing Bill 2024-26
Amendment Paper

Found: (2) For the purposes of Article 6(1) of the UK GDPR, section 35 of the Data Protection Act 2018 (“

May. 30 2025
HL Bill 81-VI Sixth Marshalled list for Committee
Employment Rights Bill 2024-26
Amendment Paper

Found: (3) Paragraph 4 of Schedule 2 to the Data Protection Act 2018 shall not apply to personal data to

May. 30 2025
HL Bill 96 Running list of amendments – 30 May 2025
Public Authorities (Fraud, Error and Recovery) Bill 2024-26
Amendment Paper

Found: within any paragraph of subsection (9) makes a request to a bank under section 45(1) of the Data Protection Act

May. 29 2025
HL Bill 96 Running list of amendments – 29 May 2025
Public Authorities (Fraud, Error and Recovery) Bill 2024-26
Amendment Paper

Found: within any paragraph of subsection (9) makes a request to a bank under section 45(1) of the Data Protection Act

May. 29 2025
Product Regulation and Metrology Bill [HL]: progress of the bill
Product Regulation and Metrology Bill [HL] 2024-26
Briefing papers

Found: costs 136 Under clause 7(6), data protection law would have the same meaning as in the Data Protection Act

May. 28 2025
HL Bill 96 Running list of amendments – 28 May 2025
Public Authorities (Fraud, Error and Recovery) Bill 2024-26
Amendment Paper

Found: within any paragraph of subsection (9) makes a request to a bank under section 45(1) of the Data Protection Act

May. 23 2025
Bill 250 2024-25 (as amended in Public Bill Committee)
Planning and Infrastructure Bill 2024-26
Bill

Found: (7) In subsection (6), “the data protection legislation” has the same meaning as in the Data Protection Act

May. 23 2025
Bill 250 2024-25 (as amended in Public Bill Committee) - large print
Planning and Infrastructure Bill 2024-26
Bill

Found: 2016. (7) In subsection (6), “the data protection legislation” has the same meaning as in the Data Protection Act

May. 23 2025
Notices of Amendments as at 23 May 2025
Crime and Policing Bill 2024-26
Amendment Paper

Found: (2) For the purposes of Article 6(1) of the UK GDPR, section 35 of the Data Protection Act 2018 (“

May. 22 2025
Notices of Amendments as at 22 May 2025
Crime and Policing Bill 2024-26
Amendment Paper

Found: (2) For the purposes of Article 6(1) of the UK GDPR, section 35 of the Data Protection Act 2018 (“

May. 21 2025
HL Bill 84-II Second Marshalled list for Committee
Children’s Wellbeing and Schools Bill 2024-26
Amendment Paper

Found: section “the data protection legislation” and “processing” have the same meaning as in the Data Protection Act

May. 21 2025
Notices of Amendments as at 21 May 2025
Crime and Policing Bill 2024-26
Amendment Paper

Found: (2) For the purposes of Article 6(1) of the UK GDPR, section 35 of the Data Protection Act 2018 (“

May. 20 2025
HL Bill 81-V Fifth Marshalled list for Committee
Employment Rights Bill 2024-26
Amendment Paper

Found: (3) Paragraph 4 of Schedule 2 to the Data Protection Act 2018 shall not apply to personal data to

May. 20 2025
Notices of Amendments as at 20 May 2025
Crime and Policing Bill 2024-26
Amendment Paper

Found: (2) For the purposes of Article 6(1) of the UK GDPR, section 35 of the Data Protection Act 2018 (“

May. 19 2025
HL Bill 84-I(Rev) Revised marshalled list for Committee
Children’s Wellbeing and Schools Bill 2024-26
Amendment Paper

Found: section “the data protection legislation” and “processing” have the same meaning as in the Data Protection Act

May. 19 2025
Notices of Amendments as at 19 May 2025
Crime and Policing Bill 2024-26
Amendment Paper

Found: (2) For the purposes of Article 6(1) of the UK GDPR, section 35 of the Data Protection Act 2018 (“

May. 16 2025
HL Bill 84-I Marshalled list for Committee
Children’s Wellbeing and Schools Bill 2024-26
Amendment Paper

Found: section “the data protection legislation” and “processing” have the same meaning as in the Data Protection Act

May. 16 2025
HL Bill 81-IV(Corrected) Fourth Marshalled list for Committee
Employment Rights Bill 2024-26
Amendment Paper

Found: (3) Paragraph 4 of Schedule 2 to the Data Protection Act 2018 shall not apply to personal data to

May. 16 2025
Notices of Amendments as at 16 May 2025
Crime and Policing Bill 2024-26
Amendment Paper

Found: (2) For the purposes of Article 6(1) of the UK GDPR, section 35 of the Data Protection Act 2018 (“

May. 15 2025
HL Bill 84 Running list of amendments - 15 May 2025
Children’s Wellbeing and Schools Bill 2024-26
Amendment Paper

Found: section “the data protection legislation” and “processing” have the same meaning as in the Data Protection Act

May. 15 2025
HL Bill 81-IV Fourth Marshalled list for Committee
Employment Rights Bill 2024-26
Amendment Paper

Found: (3) Paragraph 4 of Schedule 2 to the Data Protection Act 2018 shall not apply to personal data to

May. 15 2025
HL Bill 103 (as amended in Committee)
Renters' Rights Bill 2024-26
Bill

Found: fine. 30(8) In this section— “data protection legislation” has the same meaning as in the Data Protection Act

May. 15 2025
Bill 245 2024-25 (as amended in Public Bill Committee) - large print
Product Regulation and Metrology Bill [HL] 2024-26
Bill

Found: section— “the data protection legislation” and “processing” have the same meanings as in the Data Protection Act

May. 15 2025
Bill 245 2024-25 (as amended in Public Bill Committee)
Product Regulation and Metrology Bill [HL] 2024-26
Bill

Found: section— 15 “the data protection legislation” and “processing” have the same meanings as in the Data Protection Act

May. 15 2025
Notices of Amendments as at 15 May 2025
Crime and Policing Bill 2024-26
Amendment Paper

Found: (2) For the purposes of Article 6(1) of the UK GDPR, section 35 of the Data Protection Act 2018 (“

May. 14 2025
Bill 234 2024-25 (as introduced)
Immigration and Visas Bill 2024-26
Bill

Found: Kingdom of certain persons including foreign national offenders; to create exemptions from the Data Protection Act

May. 14 2025
Border Security, Asylum and Immigration Bill: Delegated Powers Memorandum
Border Security, Asylum and Immigration Bill 2024-26
Delegated Powers Memorandum

Found: data will be subject to the requirements in the UK General Data Protection Regulation and the Data Protection Act

May. 14 2025
HL Bill 84 Running list of amendments - 14 May 2025
Children’s Wellbeing and Schools Bill 2024-26
Amendment Paper

Found: section “the data protection legislation” and “processing” have the same meaning as in the Data Protection Act

May. 14 2025
Mental Health Bill [HL] 2024-25
Mental Health Bill [HL] 2024-26
Briefing papers

Found: , so that any provisions in the act that provide for data sharing would be subject to the Data Protection Act

May. 14 2025
Bill 235 2024-25 (as amended in Public Bill Committee)
Crime and Policing Bill 2024-26
Bill

Found: same meaning as in section 104; “data protection legislation” has the same meaning as in the Data Protection Act

May. 14 2025
Bill 235 2024-25 (as amended in Public Bill Committee) - large print
Crime and Policing Bill 2024-26
Bill

Found: “the data protection legislation” and 15 “processing” have the same meanings as in the Data Protection Act

May. 13 2025
HL Bill 101 Explanatory Notes
Border Security, Asylum and Immigration Bill 2024-26
Explanatory Notes

Found: Exclusion of application to the armed forces 18 Clause 11: Amendment of Schedule 7 to the Data Protection Act

May. 13 2025
HL Bill 84 Running list of amendments - 13 May 2025
Children’s Wellbeing and Schools Bill 2024-26
Amendment Paper

Found: section “the data protection legislation” and “processing” have the same meaning as in the Data Protection Act

May. 13 2025
HL Bill 101 (as brought from the Commons)
Border Security, Asylum and Immigration Bill 2024-26
Bill

Found: of State 10 Exclusion of application to the armed forces 11 Amendment of Schedule 7 to the Data Protection Act

May. 13 2025
All proceedings up to 13 May 2025 at Public Bill Committee Stage
Crime and Policing Bill 2024-26
Bill proceedings: Commons

Found: (2) For the purposes of Article 6(1) of the UK GDPR, section 35 of the Data Protection Act 2018 (“

May. 13 2025
Written evidence submitted by UK Safer Internet Centre (UKSIC) and South West Grid for Learning (SWGfL) (CPB128)
Crime and Policing Bill 2024-26
Written evidence

Found: infliction of emotional distress, defamation, breach of confidence, harassment or breach of the Data Protection Act

May. 13 2025
Public Bill Committee Amendments as at 13 May 2025
Crime and Policing Bill 2024-26
Amendment Paper

Found: (2) For the purposes of Article 6(1) of the UK GDPR, section 35 of the Data Protection Act 2018 (“

May. 12 2025
Consideration of Bill Amendments as at 12 May 2025 - large print
Border Security, Asylum and Immigration Bill 2024-26
Amendment Paper

Found: following Clause— “Exemptions from the UK GDPR: illegal migration and foreign criminals (1) The Data Protection Act

May. 12 2025
Consideration of Bill Amendments as at 12 May 2025
Border Security, Asylum and Immigration Bill 2024-26
Amendment Paper

Found: following Clause— “Exemptions from the UK GDPR: illegal migration and foreign criminals (1) The Data Protection Act

May. 12 2025
Report Stage Proceedings as at 12 May 2025
Border Security, Asylum and Immigration Bill 2024-26
Bill proceedings: Commons

Found: following Clause— “Exemptions from the UK GDPR: illegal migration and foreign criminals (1) The Data Protection Act

May. 12 2025
Notices of Amendments as at 12 May 2025
Crime and Policing Bill 2024-26
Amendment Paper

Found: (2) For the purposes of Article 6(1) of the UK GDPR, section 35 of the Data Protection Act 2018 (“

May. 09 2025
Notices of Amendments as at 9 May 2025
Border Security, Asylum and Immigration Bill 2024-26
Amendment Paper

Found: following Clause— “Exemptions from the UK GDPR: illegal migration and foreign criminals (1) The Data Protection Act

May. 09 2025
HL Bill 81-III Third Marshalled list for Committee
Employment Rights Bill 2024-26
Amendment Paper

Found: (3) Paragraph 4 of Schedule 2 to the Data Protection Act 2018 shall not apply to personal data to

May. 09 2025
Notices of Amendments as at 9 May 2025
Crime and Policing Bill 2024-26
Amendment Paper

Found: (2) For the purposes of Article 6(1) of the UK GDPR, section 35 of the Data Protection Act 2018 (“

May. 08 2025
Notices of Amendments as at 8 May 2025
Border Security, Asylum and Immigration Bill 2024-26
Amendment Paper

Found: following Clause— “Exemptions from the UK GDPR: illegal migration and foreign criminals (1) The Data Protection Act

May. 08 2025
HL Bill 81-II(a) Amendments for Committee (Supplementary to the Second Marshalled List)
Employment Rights Bill 2024-26
Amendment Paper

Found: (3) Paragraph 4 of Schedule 2 to the Data Protection Act 2018 shall not apply to personal data to

May. 08 2025
Public Bill Committee Amendments as at 8 May 2025
Crime and Policing Bill 2024-26
Amendment Paper

Found: (2) For the purposes of Article 6(1) of the UK GDPR, section 35 of the Data Protection Act 2018 (“



Department Publications - Transparency
Thursday 29th May 2025
HM Treasury
Source Page: Whole of Government Accounts 2024 to 2025: guidance for preparers
Document: (PDF)

Found: system and explains your rights under the General Data Protection Regulation (GDPR) and the Data Protection Act

Wednesday 21st May 2025
Attorney General
Source Page: AGO Report and Business Plan 2024-2026
Document: (PDF)

Found: Management principles to protect, manage and retain corporate memory and compliance with the Data Protection Act

Thursday 15th May 2025
HM Treasury
Source Page: Main Supply Estimates 2025 to 2026
Document: (PDF)

Found: claims against the core department, some of which involve possible financial liabilities. 5,050 Data Protection Act

Thursday 15th May 2025
HM Treasury
Source Page: Main Supply Estimates 2025 to 2026
Document: (PDF)

Found: claims against the core department, some of which involve possible financial liabilities. 5,050 Data Protection Act



Department Publications - Guidance
Thursday 29th May 2025
Department for Digital, Culture, Media & Sport
Source Page: Privacy notice for the Creative Foundations Fund
Document: Privacy notice for the Creative Foundations Fund (webpage)

Found: obligations as set out in Article 13 of UK General Data Protection Regulation (UK GDPR) and the Data Protection Act

Saturday 24th May 2025
Department for Environment, Food and Rural Affairs
Source Page: Standards of modern zoo practice
Document: (PDF)

Found: Legal requirements as per the Data Protection Act 2018 must be followed for all cases where sensitive

Friday 23rd May 2025
Ministry of Housing, Communities and Local Government
Source Page: Privacy notice for the Leasehold and Commonhold Reform Programme Evaluation Scoping Study
Document: Privacy notice for the Leasehold and Commonhold Reform Programme Evaluation Scoping Study (webpage)

Found: and more information When we ask you for information, we will keep to the law, including the Data Protection Act

Wednesday 21st May 2025
Cabinet Office
Source Page: Legislative Reform (Disclosure of Adult Social Care Data) Order 2025
Document: (PDF)

Found: Data Protection Act 2018).

Wednesday 21st May 2025
Department for Energy Security & Net Zero
Source Page: Community benefits and shared ownership for low carbon energy infrastructure
Document: (PDF)

Found: may be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Tuesday 20th May 2025
Department for Education
Source Page: DfE education and skills agreements and accountability agreements: 2025 to 2026
Document: (PDF)

Found: Data; “Data Protection Legislation” (i) the UK GDPR as amended from time to time; (ii) the Data Protection Act

Tuesday 20th May 2025
Department for Education
Source Page: DfE education and skills agreements and accountability agreements: 2025 to 2026
Document: (PDF)

Found: Data; “Data Protection Legislation” (i) the UK GDPR as amended from time to time; (ii) the Data Protection Act

Tuesday 20th May 2025
Department for Education
Source Page: DfE education and skills agreements and accountability agreements: 2025 to 2026
Document: (PDF)

Found: Data; “Data Protection Legislation” (i) the UK GDPR as amended from time to time; (ii) the Data Protection Act

Tuesday 20th May 2025
Department for Education
Source Page: DfE education and skills agreements and accountability agreements: 2025 to 2026
Document: (PDF)

Found: Data; “Data Protection Legislation” (i) the UK GDPR as amended from time to time; (ii) the Data Protection Act

Tuesday 20th May 2025
Department for Education
Source Page: DfE education and skills agreements and accountability agreements: 2025 to 2026
Document: (PDF)

Found: Data; “Data Protection Legislation” (i) the UK GDPR as amended from time to time; (ii) the Data Protection Act

Tuesday 20th May 2025
Department for Education
Source Page: DfE education and skills agreements and accountability agreements: 2025 to 2026
Document: (PDF)

Found: Data; “Data Protection Legislation” (i) the UK GDPR as amended from time to time; (ii) the Data Protection Act

Tuesday 20th May 2025
Department for Education
Source Page: DfE education and skills agreements and accountability agreements: 2025 to 2026
Document: (PDF)

Found: Data; “Data Protection Legislation” (i) the UK GDPR as amended from time to time; (ii) the Data Protection Act

Friday 16th May 2025
Department for Energy Security & Net Zero
Source Page: UK International Climate Finance (ICF) gender equality, disability and social inclusion guidance
Document: (PDF)

Found: by HMG should comply with laws under The General Data Protection Regulation (GDPR) and the Data Protection Act

Friday 9th May 2025
Ministry of Justice
Source Page: Independent Sexual Violence Adviser Statutory Guidance
Document: (PDF)

Found: professionals and ISVAs are bound by the UK General Data Protection Regulation (GDPR) and Data Protection Act

Friday 9th May 2025
Ministry of Justice
Source Page: Independent Domestic Violence Adviser Statutory Guidance
Document: (PDF)

Found: professionals and IDVAs are bound by the UK General Data Protection Regulation (GDPR) and Data Protection Act



Department Publications - Consultations
Wednesday 28th May 2025
Home Office
Source Page: Amends to legislation on vehicle removal, storage and disposal
Document: (PDF)

Found: are completing this section voluntarily; your details will be held securely according to the Data Protection Act

Tuesday 27th May 2025
Department for Energy Security & Net Zero
Source Page: Allocation Round 7: potential eligibility changes for fixed-bottom offshore wind
Document: (PDF)

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Wednesday 21st May 2025
Ministry of Justice
Source Page: Proposal on the future of Lancaster Crown Court
Document: (PDF)

Found: information regimes (these are primarily the Freedom of Information Act 2000 (FOIA), the Data Protection Act

Friday 9th May 2025
Ministry of Justice
Source Page: Criminal Legal Aid: proposals for solicitor fee scheme reform
Document: (PDF)

Found: to information regimes (these are primarily the Freedom of Information Act 2000 (FOIA), the Data Protection Act



Department Publications - Policy and Engagement
Monday 19th May 2025
HM Treasury
Source Page: Consultation on Consumer Credit Act 1974 (CCA) Reform
Document: (PDF)

Found: inconsistent with the requirements of UK General Data Protection Regulation 2016 (GDPR) and the Data Protection Act



Department Publications - Statistics
Friday 16th May 2025
Home Office
Source Page: Report 2: offensive weapons homicide review, South Wales
Document: (PDF)

Found: students in the University. 19.24 Following the second strand of Intelligence, SWP put in a Data Protection Act



Department Publications - Policy paper
Wednesday 7th May 2025
Ministry of Justice
Source Page: Victims and Courts Bill
Document: (PDF)

Found: Furthermore, any information provided to eligible victims must comply with the Data Protection Act 2018



Non-Departmental Publications - Statistics
May. 29 2025
HM Revenue & Customs
Source Page: Understanding Child Benefit take-up rates
Document: (webpage)
Statistics

Found: ISO 27001:2013Interviewer Quality Control Scheme (IQCS) Member CompanyRegistered under the Data Protection Act

May. 28 2025
HM Revenue & Customs
Source Page: HMRC Mileage Rates Research
Document: (webpage)
Statistics

Found: be awarded this in August 2008.The UK General Data Protection Regulation (GDPR) and the UK Data Protection Act

May. 22 2025
Planning Inspectorate
Source Page: Planning Inspectorate Ministerial Measures - Experimental Statistics 22 May 2025
Document: (PDF)
Statistics

Found: Responsible for Information training and they understand their responsibilities under the Data Protection Act

May. 15 2025
HM Prison and Probation Service
Source Page: HM Prison and Probation Service workforce quarterly: March 2025
Document: (ODS)
Statistics

Found: Low numbers are suppressed to prevent disclosure in accordance with the Data Protection Act, 2018.

May. 15 2025
HM Prison and Probation Service
Source Page: HM Prison and Probation Service workforce quarterly: March 2025
Document: (ODS)
Statistics

Found: Low numbers are suppressed to prevent disclosure in accordance with the Data Protection Act, 2018.

May. 15 2025
HM Prison and Probation Service
Source Page: HM Prison and Probation Service workforce quarterly: March 2025
Document: (ODS)
Statistics

Found: Low numbers are suppressed to prevent disclosure in accordance with the Data Protection Act, 1998.



Non-Departmental Publications - Guidance and Regulation
May. 29 2025
Arts Council England
Source Page: Privacy notice for the Creative Foundations Fund
Document: Privacy notice for the Creative Foundations Fund (webpage)
Guidance and Regulation

Found: obligations as set out in Article 13 of UK General Data Protection Regulation (UK GDPR) and the Data Protection Act

May. 27 2025
Public Sector Fraud Authority
Source Page: Practitioners Standard for Fraud Detection
Document: (PDF)
Guidance and Regulation

Found: the Data Controller and in compliance with the organisation’s responsibilities under the Data Protection Act

May. 21 2025
Public Sector Fraud Authority
Source Page: Legislative Reform (Disclosure of Adult Social Care Data) Order 2025
Document: (PDF)
Guidance and Regulation

Found: Data Protection Act 2018).

May. 21 2025
Office of Financial Sanctions Implementation
Source Page: General licence – INT/2022/1834876
Document: (PDF)
Guidance and Regulation

Found: to third parties only in compliance with the UK General Data Protection Regulation and the Data Protection Act

May. 20 2025
Office of Financial Sanctions Implementation
Source Page: OFSI General licence INT/2025/6275812
Document: (PDF)
Guidance and Regulation

Found: to third parties only in compliance with the UK General Data Protection Regulation and the Data Protection Act

May. 20 2025
Office of Financial Sanctions Implementation
Source Page: OFSI General licence INT/2025/6279615
Document: (PDF)
Guidance and Regulation

Found: to third parties only in compliance with the UK General Data Protection Regulation and the Data Protection Act

May. 15 2025
UK Health Security Agency
Source Page: Mpox: prisons and places of detention
Document: Health Technical Memorandum 07:01 ‘Safe Management of Healthcare Waste (PDF)
Guidance and Regulation

Found: waste Compliance with the General Data Protection Regulation (transposed into UK law by the Data Protection Act

May. 13 2025
Defence and Security Accelerator
Source Page: Competition: Defence Innovation Loans FY25/26 Cycle 2
Document: (PDF)
Guidance and Regulation

Found: We particularly draw to your attention the Bribery Act 2010, the Data Protection Act 2018, the Fraud

May. 12 2025
Department for Levelling Up, Housing and Communities
Source Page: Making an application
Document: Making an application (webpage)
Guidance and Regulation

Found: information in this paragraph does not refer to data which is personal data for the purposes of the Data Protection Act



Non-Departmental Publications - Transparency
May. 23 2025
The Insolvency Service
Source Page: Insolvency Service spend - April 2025 to March 2026
Document: Insolvency Service spend - April 2025 to March 2026 (webpage)
Transparency

Found: Where details of a payment to an individual is protected by The Data Protection Act it has not been published

May. 21 2025
Civil Nuclear Constabulary
Source Page: CNPA Board minutes - May 2021
Document: (PDF)
Transparency

Found: Security, including Cyber Security, the General Data Protection Regulation (GDPR) and the Data Protection Act

May. 21 2025
Civil Nuclear Constabulary
Source Page: CNPA Board minutes - January 2021
Document: (PDF)
Transparency

Found: and Security, including Cyber Security, the General Data Protection Regulation (GDPR) and Data Protection Act

May. 20 2025
Civil Nuclear Constabulary
Source Page: CNPA Board minutes - November 2020
Document: (PDF)
Transparency

Found: Securit y, including Cyber Security, the General Data Pro tection Regulation (G DPR) and the Data Protection Act

May. 20 2025
Civil Nuclear Constabulary
Source Page: CNPA Board minutes - July 2020
Document: (PDF)
Transparency

Found: and Security, including Cyber Security, the G eneral Data Protection Regulatio n (GDPR) and Data Protection Act



Non-Departmental Publications - News and Communications
May. 22 2025
Environment Agency
Source Page: LS26 8AB, Yorkshire Water Services Limited: permit surrender issued - EPR/KP3036LW/S004
Document: (PDF)
News and Communications

Found: this message and any reply to it public if asked to under the Freedom of Information Act, Data Protection Act



Arms Length Bodies Publications
May. 28 2025
NHS England
Source Page: Independent patient choice and procurement panel review of a proposed contract award: Intermediate Minor Oral Surgery Services for Yorkshire and the Humber
Document: Independent patient choice and procurement panel review of a proposed contract award: Intermediate Minor Oral Surgery Services for Yorkshire and the Humber (webpage)
Report

Found: “For the avoidance of doubt, there is nothing within the Data Protection Act 2018 that prohibits the

May. 09 2025
NHS England
Source Page: NHS FDP product data protection impact assessment – Antimicrobial resistance (AMR) – pseudonymised/de-identified data
Document: FDP product data protection impact assessment - Antimicrobial resistance (AMR) - pseudonymised/de-identified data (PDF)
Regulatory

Found: Psychological Therapies Directions 2021 - NHS England Digital Legal basis under UK GDPR & Data Protection Act



Deposited Papers
Friday 9th May 2025
Ministry of Justice
Source Page: I. Independent Domestic Violence Adviser Guidance: Statutory Guidance. 39p. II. Independent Sexual Violence Adviser: Statutory Guidance. 35p.
Document: IDVA_Guidance_final_version_070525.docx (webpage)

Found: Relevant professionals and IDVAs are bound by the UK General Data Protection Regulation (GDPR) and Data Protection Act

Friday 9th May 2025
Ministry of Justice
Source Page: I. Independent Domestic Violence Adviser Guidance: Statutory Guidance. 39p. II. Independent Sexual Violence Adviser: Statutory Guidance. 35p.
Document: ISVA_Guidance_final_version_070525.docx (webpage)

Found: Relevant professionals and ISVAs are bound by the UK General Data Protection Regulation (GDPR) and Data Protection Act




Data Protection Act 2018 mentioned in Scottish results


Scottish Government Publications
Friday 23rd May 2025
Digital Directorate
Source Page: Open Market Review into Superfast, Ultrafast and Gigabit Capable Broadband Infrastructure in Scotland. Request for Information May 2025
Document: Standard Form Contractor Licence (webpage)

Found: protection and privacy legislation in force from time to time in the UK including: a) the Data Protection Act

Thursday 22nd May 2025
Safer Communities Directorate
Source Page: Understanding family support needs of people in prison custody: literature review
Document: Literature Review: Understanding Family Support Needs of People in Prison Custody (PDF)

Found: gathered, held, processed or to be shared requires a clear purpose and lawful basis under the Data Protection Act

Wednesday 21st May 2025

Source Page: Social Security Scotland privacy measures and personal data breaches: FOI release
Document: Social Security Scotland privacy measures and personal data breaches: FOI release (webpage)

Found: breaches arising from noncompliance with UK General Data Protection Regulation (UK GDPR) and the Data Protection Act

Tuesday 20th May 2025
Economic Development Directorate
Source Page: Background Notes for Deputy First Minister Portfolio Questions: FOI release
Document: Background Notes for Deputy First Minister Portfolio Questions: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 20th May 2025
Constitution Directorate
Source Page: Building a New Scotland independence paper on energy meetings: FOI release
Document: Building a New Scotland independence paper on energy meetings: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 20th May 2025
Agriculture and Rural Economy Directorate
Source Page: First Minister at National Farmers Union, Scotland (NFU) and Orkney: EIR release
Document: First Minister at National Farmers Union, Scotland (NFU) and Orkney: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 15th May 2025
Economic Development Directorate
Source Page: Scottish Government engagement with GFG Alliance regarding Dalzell Steel Plant: FOI release
Document: FOI 202500455118 - Information Released - Annex A (PDF)

Found: principles in Article 5(1) of the General Data Protection Regul ation and in section 34(1) of the Data Protection Act

Thursday 15th May 2025
Marine Directorate
Source Page: Correspondence involving the Private Office of the First Minister which includes the word “ScotWind”: EIR release
Document: EIR 202500455139 - Information Released - Annex A and B (PDF)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 14th May 2025
Justice Directorate
Source Page: Testing Scotland's Proposed Domestic Homicide and Suicide Review Model: Phase One Report and Scottish Government Response Report commissioned by the Scottish Government
Document: Testing Scotland’s Proposed Domestic Homicide and Suicide Review Model: Phase One Report (PDF)

Found: to provide information facilitates a lawful basis for processing under section 8(c) of the Data Protection Act

Tuesday 13th May 2025
Energy and Climate Change Directorate
Source Page: Scotland’s Renewables Future debate: EIR release
Document: Scotland’s Renewables Future debate: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 13th May 2025
Marine Directorate
Source Page: Correspondence between Scottish Government and SalMar Aker Ocean: EIR release
Document: Correspondence between Scottish Government and SalMar Aker Ocean: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 13th May 2025
Population Health Directorate
Source Page: Decision making process for 2017 misoprostol approval: FOI release
Document: Decision making process for 2017 misoprostol approval: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and section 34(1) of the Data Protection Act

Tuesday 13th May 2025
Energy and Climate Change Directorate
Source Page: Deputy First Minister and Cabinet Secretary for Economy and Gaelic correspondence regarding zonal pricing: FOI release
Document: FOI 202500457230 - Information Released - Annex A and B (PDF)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 13th May 2025
Education Reform Directorate
Source Page: Centre for Teaching Excellence applications: FOI release
Document: FOI 202500452260 - Information Released - Attachments (PDF)

Found: individuals with regard to the processing of Personal Data to which a Party is subject including the Data Protection Act

Tuesday 13th May 2025
Local Government and Housing Directorate
Source Page: Thistle Phase 3 & 4 Estate development project funding: FOI release
Document: FOI 202500458657 - Information Released - Annex (PDF)

Found: as a breach of this agreement 6.3 The Grantee shall ensure that all requirements of the Data Protection Act

Monday 12th May 2025
Communications and Ministerial Support Directorate
Source Page: Communications in regards to FOI responses to 202500447375 and 202500452341: FOI release
Document: FOI 202500455247 - Information Released - Annex A to D (PDF)

Found: are the data subject, and so it is subject to the General Data Protection Regulation and the Data Protection Act

Monday 12th May 2025
Energy and Climate Change Directorate
Source Page: Environmental Impact Assessment (EIA) screening process: EIR release
Document: Environmental Impact Assessment (EIA) screening process: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 12th May 2025
Communications and Ministerial Support Directorate
Source Page: Queries about FOI review responses issued by the Scottish Government: FOI release
Document: Queries about FOI review responses issued by the Scottish Government: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 8th May 2025
Environment and Forestry Directorate
Source Page: Kinloch Castle Study: Final report
Document: Kinloch Castle Study: Final report (PDF)

Found: are collecting this data in the performance of a public task, under Article 6(1)(e) of the Data Protection Act

Thursday 8th May 2025
Environment and Forestry Directorate
Source Page: Kinloch Castle Study: Final report
Document: Round 1 invitation pack (PDF)

Found: are collecting this data in the performance of a public task, under Article 6(1)(e) of the Data Protection Act

Thursday 8th May 2025
Propriety and Ethics Directorate
Source Page: Footnote 5.2 of the 2024 Ministerial Code queries: FOI Review
Document: Footnote 5.2 of the 2024 Ministerial Code queries: FOI Review (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 8th May 2025
Learning Directorate
Children and Families Directorate
Early Learning and Childcare Directorate
Equality, Inclusion and Human Rights Directorate
Source Page: Guidance on appropriate qualifications and teacher competencies for teachers of children and young people who are blind or partially sighted, deaf, or deafblind.
Document: Guidance on appropriate qualifications and teacher competencies for teachers of children and young people who are blind or partially sighted, deaf, or deafblind (PDF)

Found: Nations Convention of the Rights of Persons with Disabilities; Education (Scotland) Act 2016; Data Protection Act

Wednesday 7th May 2025
Energy and Climate Change Directorate
Source Page: SSEN meeting minutes and briefing information: EIR release
Document: EIR 202500461035 - Information Released - Annex A and B (PDF)

Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act

Tuesday 6th May 2025

Source Page: Scottish Pubs Adjudicator: complaints form for tied pub tenants
Document: Scottish Pubs Adjudicator: complaints form for tied pub tenants (webpage)

Found: information given to us about you and your complaint for its intended purpose and in line with Data Protection Act

Tuesday 6th May 2025
Legal Services (Solicitor to the Scottish Government)
Source Page: A guide to planning appeals in Scotland
Document: A Guide to Planning Appeals in Scotland.pdf (PDF)

Found: For compliance with the Data Protection Act 1998, personal information such as people’s telephone numbers

Tuesday 6th May 2025
Legal Services (Solicitor to the Scottish Government)
Source Page: A guide to planning appeals in Scotland
Document: A guide to planning appeals in Scotland (webpage)

Found: ; and also to view the decision on the appeal once it has been made.For compliance with the Data Protection Act

Thursday 1st May 2025

Source Page: A82 Tarbet to Inverarnan - Analysis and design of cycleway/mixed path: EIR release
Document: A82 Tarbet to Inverarnan - Analysis and design of cycleway/mixed path: EIR release (webpage)

Found: party and disclosing it would contravene the data protection principles in Schedule 1 to the Data Protection Act

Thursday 1st May 2025
Communications and Ministerial Support Directorate
Source Page: Activities and communications of the Cabinet Secretary for Finance and Local Government: FOI release
Document: Activities and communications of the Cabinet Secretary for Finance and Local Government: FOI release (webpage)

Found: contravene the data protection principles in Article 5(1) of the UK GDPR (or section 34(1) of the Data Protection Act

Wednesday 30th April 2025
Energy and Climate Change Directorate
Source Page: Clean Power 2030 Action Plan briefing documents: EIR release
Document: EIR 202500452601 - Information released - Annex A (PDF)

Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act

Wednesday 30th April 2025
Environment and Forestry Directorate
Source Page: Galloway National Park correspondence with various organisations: EIR release
Document: EIR 202500453720 - Information released - Annex (PDF)

Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act

Wednesday 30th April 2025
Communications and Ministerial Support Directorate
Source Page: Copy of information referenced in the Scottish Information Commissioner’s Decision Notice 186/2024: FOI release
Document: FOI 202500454839 - Information released - Annex A (PDF)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 30th April 2025
Agriculture and Rural Economy Directorate
Source Page: Proposed ban on owning cats in new housing developments in rural areas: EIR release
Document: Proposed ban on owning cats in new housing developments in rural areas: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 30th April 2025
Economic Development Directorate
Source Page: Plans for the site of the former McVities factory in Tollcross: FOI release
Document: Plans for the site of the former McVities factory in Tollcross: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 30th April 2025
Energy and Climate Change Directorate
Source Page: Clean Power 2030 report briefing documents: EIR release
Document: EIR 202500452602 - Information released - Annex A (PDF)

Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act

Wednesday 30th April 2025

Source Page: ScotRail’s alcohol survey results: FOI release
Document: ScotRail’s alcohol survey results: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 30th April 2025

Source Page: Contract and planting plan map for previous request (202500450951): EIR release
Document: Contract and planting plan map for previous request (202500450951): EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 30th April 2025
Chief Operating Officer, NHS Scotland Directorate
Source Page: Documentation about sending surplus NHS equipment to Ukraine: FOI release
Document: FOI 202500451642 - Information released - Exemptions (PDF)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 30th April 2025

Source Page: Contract and planting plan map for previous request (202500450951): EIR release
Document: EIR 202500455863 - Information released - Contract Document (PDF)

Found: of Information (Scotland) Act 2002 (FOISA), the UK General Data Protection Regulation, the Data Protection Act

Monday 28th April 2025
Social Security Directorate
Source Page: Social Security (Amendment) (Scotland) Bill: data protection impact assessment - updated April 2025
Document: Social Security (Amendment) (Scotland) Bill - updated 2025: Data Protection Impact Assessment (PDF)

Found: organisation a public authority or body as set out in Part 2, Chapter 2, section 7 of the Data Protection Act

Thursday 24th April 2025
Tackling Child Poverty and Social Justice Directorate
Source Page: Scottish landlord register and private rental levels: FOI release
Document: Scottish landlord register and private rental levels: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 23rd April 2025
Population Health Directorate
Source Page: Correspondence regarding Professor of Global Public Health: FOI release
Document: Correspondence regarding Professor of Global Public Health: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 22nd April 2025
Energy and Climate Change Directorate
Source Page: Correspondence relating to Kendoon to Tongland 132KV reinforcement project: EIR release
Document: Correspondence relating to Kendoon to Tongland 132KV reinforcement project: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 22nd April 2025
Local Government and Housing Directorate
Source Page: Tenancy deposit schemes: FOI release
Document: Tenancy deposit schemes: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 22nd April 2025
Environment and Forestry Directorate
Source Page: Correspondence between Scottish Government and Scottish Parliament regarding Galloway National Park: EIR release
Document: EIR 202500453718 - Information Released - Annex A & B (PDF)

Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act

Tuesday 22nd April 2025
Environment and Forestry Directorate
Source Page: Galloway National Park correspondence with council officials: EIR release
Document: EIR 202500453716 - Information Released - Annex A and B (PDF)

Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act

Wednesday 16th April 2025

Source Page: Low Emission Zone (LEZ) information: EIR release
Document: Low Emission Zone (LEZ) information: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 16th April 2025
Safer Communities Directorate
Source Page: Short life working group minutes regarding misuse of pyrotechnics at football: FOI release
Document: Short life working group minutes regarding misuse of pyrotechnics at football: FOI release (webpage)

Found: protection principles in the UK General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 16th April 2025
Legal Services (Solicitor to the Scottish Government)
Source Page: Flamingo Land plans for Loch Lomond: EIR release
Document: Flamingo Land plans for Loch Lomond: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 16th April 2025
Scottish Procurement and Property Directorate
Source Page: Procurement contracts: terms and conditions
Document: Model ICT services contract - concession contracts April 2025 (webpage)

Found: Computer Misuse Act 1990, the Network and Information Systems Regulations 2018, the UK GDPR or the Data Protection Act

Wednesday 16th April 2025
Scottish Procurement and Property Directorate
Source Page: Procurement contracts: terms and conditions
Document: Terms and conditions 4: conditions of contract for the supply of goods and services February 2025 (PDF)

Found: individuals with regard to the processing of Personal Data to which a Party is subject including the Data Protection Act

Wednesday 16th April 2025
Scottish Procurement and Property Directorate
Source Page: Procurement contracts: terms and conditions
Document: Terms and conditions 5: conditions of contract for the sale of goods (PDF)

Found: the Trade Union and Labour Relations (Consolidation) Act 1992, or commit any breach of the Data Protection Act

Wednesday 16th April 2025
Scottish Procurement and Property Directorate
Source Page: Procurement contracts: terms and conditions
Document: Terms and conditions 1: conditions of contract for the purchase of goods - February 2025 (PDF)

Found: individuals with regard to the processing of Personal Data to which a Party is subject including the Data Protection Act

Wednesday 16th April 2025
Safer Communities Directorate
Source Page: Correspondence relating to right wing extremist groups: FOI release
Document: Correspondence relating to right wing extremist groups: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 16th April 2025
Scottish Procurement and Property Directorate
Source Page: Procurement contracts: terms and conditions
Document: Model services contract - April 2025 (webpage)

Found: individuals with regard to the processing of Personal Data to which a Party is subject including the Data Protection Act

Wednesday 16th April 2025
Local Government and Housing Directorate
Source Page: Public health supplement documentation: FOI release
Document: Public health supplement documentation: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 16th April 2025
Scottish Procurement and Property Directorate
Source Page: Procurement contracts: terms and conditions
Document: Terms and conditions 3: conditions of contract for consultancy services February 2025 (PDF)

Found: individuals with regard to the processing of Personal Data to which a Party is subject including the Data Protection Act

Wednesday 16th April 2025
Scottish Procurement and Property Directorate
Source Page: Procurement contracts: terms and conditions
Document: Terms and conditions 2: conditions of contract for the purchase of services February 2025 (PDF)

Found: individuals with regard to the processing of Personal Data to which a Party is subject including the Data Protection Act

Wednesday 16th April 2025
Scottish Procurement and Property Directorate
Source Page: Procurement contracts: terms and conditions
Document: ICT services model contract - April 2025 (webpage)

Found: Computer Misuse Act 1990, the Network and Information Systems Regulations 2018, the UK GDPR or the Data Protection Act

Wednesday 16th April 2025
Propriety and Ethics Directorate
Source Page: Information regarding handling of Freedom of Information response 202400443239: FOI release
Document: Information regarding handling of Freedom of Information response 202400443239: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 16th April 2025

Source Page: Social Security Scotland and Secretary of State (DWP) information sharing agreements: FOI release
Document: FOI 202500453728 - Information Released - Annex (PDF)

Found: Date of Birth D.O.D Date of Death DPA Data Protection Act 2018 DPIA Data Protection Impact Assessment

Wednesday 16th April 2025
Energy and Climate Change Directorate
Source Page: Carbon Capture Fund as part of the Scottish Government’s Emerging Energy Technologies Fund: EIR release
Document: Carbon Capture Fund as part of the Scottish Government’s Emerging Energy Technologies Fund: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 14th April 2025
Local Government and Housing Directorate
Source Page: Open Market Shared Equity Scheme: administrative procedures
Document: Open Market Shared Equity Scheme: Administrative Procedures (PDF)

Found: You will duly observe your obligations under the Data Protection Act 2018 and the General Data Protection

Friday 11th April 2025

Source Page: Public Sector Pay Policy Technical Guide - April 2025
Document: Public Sector Pay Policy Technical Guide (PDF)

Found: and in particular the principles of the General Data Protection Regulation (GDPR) and the Data Protection Act

Thursday 10th April 2025
Energy and Climate Change Directorate
Source Page: Emerging Energy Technologies Fund correspondence: EIR release
Document: Emerging Energy Technologies Fund correspondence: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 10th April 2025
Energy and Climate Change Directorate
Source Page: Carbon Capture Fund correspondence: EIR release
Document: Carbon Capture Fund correspondence: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 10th April 2025
Marine Directorate
Source Page: Live cleaner fish movements: EIR release
Document: Live cleaner fish movements: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 10th April 2025
Offshore Wind Directorate
Source Page: First Minister and Deputy First Minister offshore renewable investor discussions: EIR release
Document: First Minister and Deputy First Minister offshore renewable investor discussions: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 10th April 2025
Learning Directorate
Source Page: Materials and communications related to funding made available to local authorities: FOI release
Document: Materials and communications related to funding made available to local authorities: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 9th April 2025

Source Page: City of Edinburgh Council’s proposed Supplementary Guidance on Developer Contributions and Infrastructure Delivery for City Plan 2030 information: EIR release
Document: City of Edinburgh Council’s proposed Supplementary Guidance on Developer Contributions and Infrastructure Delivery for City Plan 2030 information: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 9th April 2025
Safer Communities Directorate
Source Page: Far-right/neo Nazi activity correspondence: FOI release
Document: Far-right/neo Nazi activity correspondence: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 9th April 2025
Culture and Major Events Directorate
Source Page: Commonwealth Games cost documentation: FOI release
Document: Commonwealth Games cost documentation: FOI release (webpage)

Found: individuals, and disclosing it would contravene the data protection principles in Schedule 1 of the Data Protection Act

Wednesday 9th April 2025
Energy and Climate Change Directorate
Source Page: Eskdalemuir Seismic Array contract: FOI release
Document: Eskdalemuir Seismic Array contract: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 9th April 2025
Constitution Directorate
Source Page: Independence spending in the Budget documentation: FOI release
Document: Independence spending in the Budget documentation: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 9th April 2025
External Affairs Directorate
Source Page: Details of First Minister's meeting with the Speaker of Lok Sabha, India: FOI release
Document: Details of First Minister's meeting with the Speaker of Lok Sabha, India: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 8th April 2025
Marine Directorate
Source Page: National Marine Plan 2 (NMP2) consultation minutes: EIR release
Document: National Marine Plan 2 (NMP2) consultation minutes: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1)  of the Data Protection Act

Tuesday 8th April 2025
Safer Communities Directorate
Source Page: Correspondence which relate to right wing extremist groups: FOI release
Document: FOI 202400421592 - Information Released - Annex A (PDF)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 8th April 2025
Communications and Ministerial Support Directorate
Source Page: Former First Minister's trip to Qatar: FOI release
Document: Former First Minister's trip to Qatar: FOI release (webpage)

Found: contravene the data protection principles in Article 5(1) of the UK GDPR (or section 34(1) of the Data Protection Act

Monday 7th April 2025
Marine Directorate
Source Page: Evaluation of Regional Inshore Fisheries Group
Document: Digital media - Evaluation of Regional Inshore Fisheries Group (PDF)

Found: information I give will be treated confidentially and securely, in accordance with the terms of the Data Protection Act

Monday 7th April 2025
Energy and Climate Change Directorate
Source Page: Ministerial correspondence relating to Kendoon to Tongland Reinforcement Project: EIR release
Document: Ministerial correspondence relating to Kendoon to Tongland Reinforcement Project: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Friday 4th April 2025
Agriculture and Rural Economy Directorate
Source Page: Animals and Wildlife (Penalties, Protections and Powers) (Scotland) Act 2020 - A Review Of Provisions And Requirements For Additional Animal Welfare, Animal Health And Wildlife Offences
Document: Animals and Wildlife (Penalties, Protections and Powers) (Scotland) Act 2020 (PDF)

Found: fulfilled its duty; however as this information relates to living persons, the provisions of the Data Protection Act

Tuesday 1st April 2025
Justice Directorate
Source Page: Service Leavers Database - Scotland: privacy notice
Document: Service Leavers Database - Scotland: privacy notice (webpage)

Found: Section 2 Part 6 Para 27 of the Data Protection Act 2018 allows for exemptions to UK GDPR Article 5 1

Monday 31st March 2025
Agriculture and Rural Economy Directorate
Source Page: Data Protection Impact Assessment (DPIA) for the Crofting Consultation 2024 and Consultation Analysis
Document: Data Protection Impact Assessment (DPIA) for the Crofting Bill Consultation 2024 and Consultation Analysis (PDF)

Found: regard to the processing of Personal Data to which a Party is subject including the 3 Data Protection Act

Friday 28th March 2025
Marine Directorate
Source Page: Weekly fishing landings and landed value data for Orkney: EIR release
Document: Weekly fishing landings and landed value data for Orkney: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Friday 28th March 2025
Social Security Directorate
Source Page: Chief Executive of Social Security Scotland and Cabinet Secretary for Social Justice correspondence: FOI release
Document: Chief Executive of Social Security Scotland and Cabinet Secretary for Social Justice correspondence: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Friday 28th March 2025
Constitution Directorate
Source Page: First Minister and Prime Minister correspondence: FOI release
Document: FOI 202500452857 - Information released - Annex B (PDF)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Friday 28th March 2025
Chief Economist Directorate
Source Page: Minister for Public Finance and Scotonomics documentation: FOI release
Document: FOI 202500453113 - Information released - Point 1 (PDF)

Found: under the requirements of the General Data Protection Regulation (EU) 2016/679 (the GDPR), the Data Protection Act

Friday 28th March 2025

Source Page: UK Government Treasury/Chancellor correspondence: FOI release
Document: UK Government Treasury/Chancellor correspondence: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 27th March 2025
Scottish Procurement and Property Directorate
Source Page: Social Security Scotland Quality Assurance Testing Services tender contract: FOI release
Document: FOI 202500452760 - Information released - Documents 8 - 22 (PDF)

Found: bound by confidentiality and data protection clauses which align to standards set by the Data Protection Act

Thursday 27th March 2025

Source Page: Bus and travel demand management report documentation: EIR release
Document: Bus and travel demand management report documentation: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 27th March 2025

Source Page: Bus and travel demand management report documentation: EIR release
Document: EIR 202500452179 - Information released - Annex A, B and C (PDF)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 27th March 2025

Source Page: Planning Hubs and Planning apprenticeships information: EIR release
Document: EIR 202500447903 - Information Released - Documents (PDF)

Found: individuals with regard to the processing of Personal Data to which a Party is subject including the Data Protection Act

Thursday 27th March 2025
Social Care and National Care Service Development
Source Page: Documentation on discussions with Scottish Care regarding Anne's Law: FOI release
Document: Documentation on discussions with Scottish Care regarding Anne's Law: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 27th March 2025
Population Health Directorate
Source Page: Correspondence regarding restriction on promotions of food high in fat, salt and sugar: FOI release
Document: Correspondence regarding restriction on promotions of food high in fat, salt and sugar: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 27th March 2025

Source Page: Planning Hubs and Planning apprenticeships information: EIR release
Document: Planning Hubs and Planning apprenticeships information: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 27th March 2025
Environment and Forestry Directorate
Source Page: South Kinross Flood Protection Scheme objections: EIR release
Document: EIR 202500454394 - Information released - Annex A & Annex B (PDF)

Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act

Thursday 27th March 2025
Local Government and Housing Directorate
Source Page: Reinforced autoclaved aerated concrete (RAAC) costs and correspondence: EIR release
Document: Reinforced autoclaved aerated concrete (RAAC) costs and correspondence: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 27th March 2025

Source Page: Native woodland scheme at Schiehallion correspondence: EIR release
Document: Native woodland scheme at Schiehallion correspondence: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 27th March 2025

Source Page: Social Security Scotland staff disciplinary action statistics: FOI release
Document: Social Security Scotland staff disciplinary action statistics: FOI release (webpage)

Found: This is because under UK General Data Protection Regulation (UK GDPR) and the Data Protection Act (DPA

Wednesday 26th March 2025
Marine Directorate
Source Page: Green Volt Project correspondence: FOI release
Document: Green Volt Project correspondence: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 26th March 2025
Energy and Climate Change Directorate
Source Page: Material related to the overhead line from Spittal to Beauly: EIR release
Document: Material related to the overhead line from Spittal to Beauly: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 26th March 2025
Children and Families Directorate
Local Government and Housing Directorate
Mental Health Directorate
Social Care and National Care Service Development
Source Page: Trauma Responsive Social Work Services Programme Data Protection Impact Assessment
Document: Trauma Responsive Social Work Services Programme: Data protection impact assessment (PDF)

Found: organisation a public authority or body as set out in Part 2, Chapter 2, Section 7 of the Data Protection Act

Wednesday 26th March 2025
Population Health Directorate
Source Page: Documentation regarding the Cass report: FOI release
Document: FOI 202500452272 - Information released - ANNEX B (PDF)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 26th March 2025
Constitution Directorate
Source Page: Westminster's Scottish Affairs Committee correspondence: FOI release
Document: FOI 202500452271 - Information released - Annex B (PDF)

Found: nciples in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 26th March 2025
Energy and Climate Change Directorate
Source Page: Correspondence and documentation that include the phrase "return on capital": FOI release
Document: Correspondence and documentation that include the phrase "return on capital": FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 26th March 2025
Environment and Forestry Directorate
Source Page: Copy of correspondence in relation to Montrose beach stability and dredging: EIR release
Document: EIR 202500454881 - Information Released - Annex A (PDF)

Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act

Wednesday 26th March 2025
Environment and Forestry Directorate
Source Page: Vehicle idling details in specific areas: EIR release
Document: Vehicle idling details in specific areas: EIR release (webpage)

Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act

Tuesday 25th March 2025
Propriety and Ethics Directorate
Source Page: Legal advice given to the Scottish Government/ministers in reference to The Scottish Ministers v The Scottish Information Commissioner: FOI release
Document: FOI 202400438168 - Information released - Annex A (PDF)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 25th March 2025
Environment and Forestry Directorate
Source Page: Call for Evidence: Reducing the Landfilling of Biodegradable and Other Wastes
Document: Call for Evidence: Reducing the Landfilling of Biodegradable and Other Wastes (PDF)

Found: The legal basis for processing this data is ‘public task’ (Data Protection Act 2018 Article 6 (1) (e

Tuesday 25th March 2025
Environment and Forestry Directorate
Source Page: Strengthening approach to household recycling collection services
Document: Strengthening approach to household recycling collection services (PDF)

Found: The legal basis for processing this data is ‘public task’ (Data Protection Act 2018 Article 6 (1) (e

Tuesday 25th March 2025
Communications and Ministerial Support Directorate
Source Page: Legal advice in response to Scottish Information Commissioner’s decision 193/2024: FOI release
Document: Legal advice in response to Scottish Information Commissioner’s decision 193/2024: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 25th March 2025
Communications and Ministerial Support Directorate
Source Page: Information regarding the decision not to give the Scottish Information Commissioner legal advice: FOI release
Document: Information regarding the decision not to give the Scottish Information Commissioner legal advice: FOI release (webpage)

Found: are the data subject, and so it is subject to the General Data Protection Regulation and the Data Protection Act

Tuesday 25th March 2025
Propriety and Ethics Directorate
Source Page: Queries regarding access to secretariat members email accounts: FOI Review
Document: FOI 202500449874 - Information released - Annex (PDF)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 25th March 2025
Propriety and Ethics Directorate
Source Page: James Hamilton QC's secretariat communications: FOI Review
Document: FOI 202500448736 - Information released - Annex (PDF)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 25th March 2025
Communications and Ministerial Support Directorate
Source Page: Documents and legal advise relating to decision notice (193/2024): FOI release
Document: Documents and legal advise relating to decision notice (193/2024): FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 25th March 2025
Propriety and Ethics Directorate
Source Page: Correspondence between former First Minister Nicola Sturgeon and James Hamilton: FOI release
Document: FOI 202400438682 - Information released - Annex (PDF)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 25th March 2025
Tackling Child Poverty and Social Justice Directorate
Source Page: Former Chief Social Policy Adviser WhatsApp messages during Covid-19 pandemic: FOI release
Document: Former Chief Social Policy Adviser WhatsApp messages during Covid-19 pandemic: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 25th March 2025
Energy and Climate Change Directorate
Source Page: Deputy Director of Future Environment WhatsApp messages during Covid-19 pandemic: FOI release
Document: FOI 202400439464 - Information Released - Annex A and B (PDF)

Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act

Tuesday 25th March 2025
Communications and Ministerial Support Directorate
Source Page: Former Minister for Mental Health WhatsApp messages from February 2020 to February 2021: FOI release
Document: Former Minister for Mental Health WhatsApp messages from February 2020 to February 2021: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 25th March 2025
Communications and Ministerial Support Directorate
Source Page: Former Director General for Education and Justice WhatsApp messages during Covid-19 pandemic: FOI release
Document: FOI 202400439469 - Information Released - Attachment A (PDF)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 25th March 2025
Economic Development Directorate
Source Page: Director of Economic Development WhatsApp messages during the Covid-19 pandemic: FOI release
Document: Director of Economic Development WhatsApp messages during the Covid-19 pandemic: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 25th March 2025
Communications and Ministerial Support Directorate
Source Page: Mairi McAllan's WhatsApp messages during the Covid-19 pandemic: FOI Review
Document: Mairi McAllan's WhatsApp messages during the Covid-19 pandemic: FOI Review (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 25th March 2025

Source Page: Director General for Net Zero WhatsApp messages during Covid-19 pandemic: FOI release
Document: Director General for Net Zero WhatsApp messages during Covid-19 pandemic: FOI release (webpage)

Found: Personal data is defined in the Data Protection Act 2018 as information relating to an identified or

Tuesday 25th March 2025
Communications and Ministerial Support Directorate
Source Page: Director General for Strategy & External Affairs WhatsApp messages during Covid-19 pandemic: FOI release
Document: Director General for Strategy & External Affairs WhatsApp messages during Covid-19 pandemic: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 25th March 2025
Covid Inquiries Response Directorate
Source Page: Former Director General of Economy WhatsApp messages during Covid-19 pandemic: FOI release
Document: Former Director General of Economy WhatsApp messages during Covid-19 pandemic: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act



Scottish Written Answers
S6W-37428
Asked by: Balfour, Jeremy (Scottish Conservative and Unionist Party - Lothian)
Monday 12th May 2025

Question

To ask the Scottish Government whether it has plans to make the Scottish Kept Birds Register publicly searchable, and, if not, for what reason. 

Answered by Fairlie, Jim - Minister for Agriculture and Connectivity

The Scottish Government has no plans to make the Scottish Kept Birds Register publicly searchable.

The Scottish Kept Bird Register is a mandatory register for bird keepers in Scotland under the Avian Influenza (Preventive Measures) (Scotland) Amendment Order 2024. It was established to allow Scottish Government and its deliver body, the Animal and Plant Health Agency, to send vital biosecurity information to bird keepers to minimise the risk of the spread of notifiable avian diseases, particularly highly pathogenic avian influenza. The register also supports mandatory surveillance activities during disease outbreaks. The information has also been used to help support public health response in the offer of vaccinations to poultry keepers.

In accordance with Data Protection Act 2018 a commitment was made to those registering, in the Scottish Kept Bird Register Privacy Notice, as to how the data collected would be used. This can be summarised as to determine the size and location of the kept bird population in Scotland, for communication and disease control activities during notifiable avian disease outbreaks, and for promoting bird welfare and public health.

To make this data public would be in breach of the Data Protection Act of 2018, as the Scottish Government would be unable to control the uses to which the data was being put. The Scottish Government is legally required to make arrangements to ensure that the data collected is retained securely and protected from data breach. This is in common with registers for other animals and livestock across Scotland held by Scottish Government.




Data Protection Act 2018 mentioned in Welsh results


Welsh Committee Publications
Friday 7th February 2025
PDF - Marshalled List of Amendments - 7 February 2025

Inquiry: Report on the Welsh Language and Education (Wales) Bill


Found: ending on 31 August, ( ) “data protection legislation” has the same meaning as in the Data Protection Act

Wednesday 5th February 2025
PDF - Notice of Amendments (v3) - 5 February 2025

Inquiry: Report on the Welsh Language and Education (Wales) Bill


Found: ending on 31 August, ( ) “data protection legislation” has the same meaning as in the Data Protection Act

Tuesday 21st January 2025
PDF - Welsh Government Response - 21 January 2025

Inquiry: Children on the Margins


Found: share information in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act



Welsh Government Publications
Friday 4th July 2025

Source Page: Distribution Sub Group meeting: 4 July 2025
Document: Paper 09 (PDF)

Found: Data was supplied via postcodes and handled in accordance with the 1998 Data Protection Act with special

Tuesday 20th May 2025

Source Page: FOI release 24539: Free School Meals
Document: Free School Meals (PDF)

Found: Education Act 1996 and that their processing of personal data is in line with UK GDPR and the Data Protection Act

Monday 19th May 2025

Source Page: Small Grants – Environment (water): general rules booklet 2025
Document: Small Grants – Environment (water): general rules booklet 2025 (webpage)

Found: in accordance with the obligations and duties under the Freedom of Information Act 2000, the Data Protection Act

Monday 19th May 2025

Source Page: FOI release 23214: River Basin Management Plans
Document: River Basin Management Plans (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Monday 19th May 2025

Source Page: Rights, respect, equality anti-bullying guidance
Document: Rights, respect, equality: statutory guidance for schools and settings (draft) (PDF)

Found: protection legislation, such as the EU General Data Protection Regulation (GDPR) and the UK Data Protection Act

Monday 19th May 2025

Source Page: Development management manual
Document: Development management manual (without annexes) (PDF)

Found: However, under the Data Protection Act 1998, the addresses and other contact information of private

Thursday 15th May 2025

Source Page: Commons Act 2006: apply under section 38
Document: Commons Act 2006: apply under section 38 (PDF)

Found: Organisation (if applicable) Date You must keep a copy of your completed form Data Protection Act

Wednesday 14th May 2025

Source Page: Welsh Government’s standard conditions for the supply of services
Document: Standard conditions for the supply of services (PDF)

Found: this Contract in respect of which such Party is liable to the other; DPA 2018 means the Data Protection Act

Monday 12th May 2025

Source Page: Partnership arrangements for care and support: guidance
Document: Part 9 statutory guidance: partnership arrangements (PDF)

Found: other duties, including its duties under the General Data Protection Regulations 2018, the Data Protection Act

Thursday 8th May 2025

Source Page: Assets Collaboration Programme Wales Phase 3 (ACPW3): grant offer letter
Document: Grant offer letter (webpage)

Found: Information Act 2000 (the “FOIA”), the Environmental Information Regulations 2004 (the “EIR”), the Data Protection Act

Wednesday 7th May 2025

Source Page: Access Broadband Cymru: sample standard grant letter
Document: Access Broadband Cymru: sample standard grant letter (webpage)

Found: Information Act 2000 (the “FOIA”), the Environmental Information Regulations 2004 (the “EIR”), the Data Protection Act

Tuesday 6th May 2025

Source Page: Attendance of pupils in maintained schools: 2 September 2024 to 25 April 2025
Document: Attendance of pupils in maintained schools: 2 September 2024 to 25 April 2025 (webpage)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Monday 28th April 2025

Source Page: Iaith Athrawon Yfory Incentive Scheme: guidance for ITE partnerships from 2023 and 2024
Document: Iaith Athrawon Yfory Incentive Scheme: guidance for ITE partnerships from 2023 and 2024 (webpage)

Found: Information Regulations 2004 (the “EIR”) the General Data Protection Regulation (GDPR) and Data Protection Act

Monday 28th April 2025

Source Page: National multi-agency practice framework for children’s services
Document: National multi-agency practice framework for children’s services (webpage)

Found: their legal obligations, namely the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act

Thursday 24th April 2025

Source Page: FOI release 24584: Ceredigion Local Development Plan
Document: Doc 1 (PDF)

Found: Under the UK GDPR, Data Protection Act 2018 and the Freedom of Information Act 2000 the contents of

Thursday 24th April 2025

Source Page: FOI release 24584: Ceredigion Local Development Plan
Document: Ceredigion Local Development Plan (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Tuesday 22nd April 2025

Source Page: Attendance of pupils in maintained schools: 2 September 2024 to 11 April 2025
Document: Attendance of pupils in maintained schools: 2 September 2024 to 11 April 2025 (webpage)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Wednesday 16th April 2025

Source Page: Bus Services (Wales) Bill 2020 (withdrawn): integrated impact assessment
Document: Bus Services (Wales) Bill 2020 (withdrawn): integrated impact assessment (PDF)

Found: will process personal data, or require another organisation to do so, must comply with the Data Protection Act

Monday 14th April 2025

Source Page: FOI release 24421: Swansea maternity services
Document: Swansea maternity services (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)

Friday 11th April 2025

Source Page: Standard for digital health identity verification in primary care
Document: The NHS Wales digital health identity standard for primary care (NHS login) (PDF)

Found: have a legal requirement: • to adhere to the General Data Protection Regulation (GDPR), Data Protection Act

Thursday 10th April 2025

Source Page: Young people not in education, employment or training (NEET): 2024
Document: Young people not in education, employment or training (NEET): 2024 (webpage)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Tuesday 8th April 2025

Source Page: Attendance of pupils in maintained schools: 2 September 2024 to 28 March 2025
Document: Attendance of pupils in maintained schools: 2 September 2024 to 28 March 2025 (webpage)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Monday 7th April 2025

Source Page: FOI release 24503: Godre'r Graig Primary School
Document: Doc 2 (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)

Wednesday 2nd April 2025

Source Page: FOI release 23323: Tertiary Education
Document: Tertiary Education (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)

Friday 28th March 2025

Source Page: FOI release 24464: Hendy Wind Farm
Document: Hendy Wind Farm (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Friday 28th March 2025

Source Page: Food Business Accelerator scheme: pre-qualification form
Document: Food Business Accelerator scheme: pre-qualification form (PDF)

Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004, Data Protection Act

Friday 28th March 2025

Source Page: Welsh Revenue Authority equality report 2025
Document: Welsh Revenue Authority equality report 2025 (webpage)

Found: great importance on protecting people’s privacy and their data in full compliance with the Data Protection Act

Friday 28th March 2025

Source Page: FOI release 24479: Misoprostol
Document: Misoprostol (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)

Thursday 27th March 2025

Source Page: Relative income poverty: April 2023 to March 2024
Document: Relative income poverty: April 2023 to March 2024 (webpage)

Found: are presented impartially and objectively and are in accordance with the requirements of the Data Protection Act

Wednesday 26th March 2025

Source Page: Eliminating profit from the care of looked after children: data protection impact assessment
Document: Data protection impact assessment (PDF)

Found: In our view the requirements of section 10 of and paragraph 1 of Schedule 1 to the Data Protection Act

Tuesday 25th March 2025

Source Page: FOI release 24554: Brilliant Basics Grant
Document: Brilliant Basics Grant (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Tuesday 25th March 2025

Source Page: FOI release 24487: Wildlife poisoning
Document: Wildlife poisoning (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Tuesday 25th March 2025

Source Page: Attendance of pupils in maintained schools: 2 September 2024 to 14 March 2025
Document: Attendance of pupils in maintained schools: 2 September 2024 to 14 March 2025 (webpage)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Monday 17th March 2025

Source Page: Food Business Accelerator scheme (window 2): general rules booklet
Document: Food Business Accelerator scheme (window 2): general rules booklet (webpage)

Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004, Data Protection Act

Thursday 13th March 2025

Source Page: Participation of young people in education and the labour market: 2022 and 2023 (provisional)
Document: Participation of young people in education and the labour market: 2022 and 2023 (provisional) (webpage)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Wednesday 12th March 2025

Source Page: FOI release 24353: A470 access road
Document: A470 access road (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Tuesday 11th March 2025

Source Page: Attendance of pupils in maintained schools: 2 September 2024 to 28 February 2025
Document: Attendance of pupils in maintained schools: 2 September 2024 to 28 February 2025 (webpage)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Monday 10th March 2025

Source Page: Scoping study for mixed attainment teaching practice in schools in Wales: report
Document: Scoping study for mixed attainment teaching practice in schools in Wales (PDF)

Found: The information you provide will be handled in accordance with the UK Data Protection Act 1998, which

Thursday 6th March 2025

Source Page: Ffermio Bro - Farming in Designated Landscapes (stage 1): rules booklet
Document: Ffermio Bro - Farming in Designated Landscapes (stage 1): rules booklet (webpage)

Found: obligations under the Freedom of Information Act 2000, the Environmental Information Act 2004 or the Data Protection Act

Thursday 6th March 2025

Source Page: FOI release 23347: Grooming Gangs
Document: Grooming Gangs (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)

Thursday 6th March 2025

Source Page: FOI release 23347: Grooming Gangs
Document: Doc 3 (PDF)

Found: The present study complied with the 2018 Data Protection Act, which allows sensitive study data to be

Tuesday 4th March 2025

Source Page: Attendance and absence from schools: September 2023 to August 2024
Document: Attendance and absence from schools: September 2023 to August 2024 (webpage)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Friday 28th February 2025

Source Page: Small Grants – Woodland Creation (windows 7, 8 and 9): rules booklet
Document: Small Grants – Woodland Creation (windows 7, 8 and 9): rules booklet (webpage)

Found: in accordance with the obligations and duties under the Freedom of Information Act 2000, the Data Protection Act

Friday 28th February 2025

Source Page: FOI release 23327: Physician associate students
Document: Physician associate students (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)

Friday 28th February 2025

Source Page: Woodland Creation Grant (window 5): rules booklet
Document: Woodland Creation Grant (window 5): rules booklet (webpage)

Found: in accordance with the obligations and duties under the Freedom of Information Act 2000, the Data Protection Act

Wednesday 26th February 2025

Source Page: FOI release 23335: Ainon Welsh Baptist Chapel, Treorchy
Document: Ainon Welsh Baptist Chapel, Treorchy (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Wednesday 26th February 2025

Source Page: Small Grants – Efficiency (window 4): general rules booklet
Document: Small Grants – Efficiency (window 4): general rules booklet (webpage)

Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004 or the Data Protection Act

Tuesday 25th February 2025

Source Page: FOI release 23329: Protocols
Document: Protocols (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Tuesday 25th February 2025

Source Page: Attendance of pupils in maintained schools: 2 September 2024 to 14 February 2025
Document: Attendance of pupils in maintained schools: 2 September 2024 to 14 February 2025 (webpage)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Monday 24th February 2025

Source Page: FOI release 23301: Brilliant Basics Grant for Llansteffan North Carpark
Document: Brilliant Basics Grant for Llansteffan North Carpark (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Monday 24th February 2025

Source Page: FOI release 23294: Ty Llwyd Quarry
Document: Doc 1 (PDF)

Found: Information Act 2000 (the “FOIA”), the Environmental Information Regulations 2004 (the “EIR”), the Data Protection Act

Wednesday 19th February 2025

Source Page: Single Application Form (SAF) 2025: rules booklet
Document: Single Application Form (SAF) 2025: rules booklet (PDF)

Found: accordance with its obligations and duties under the: • Freedom of Information Act 2000 • The Data Protection Act

Thursday 13th February 2025

Source Page: FOI release 23265: Tŷ Llwyd Quarry
Document: Doc 1 (PDF)

Found: Information Act 2000 (the “FOIA”), the Environmental Information Regulations 2004 (the “EIR”), the Data Protection Act

Wednesday 12th February 2025

Source Page: FOI release 23211: Special Advisers
Document: Special Advisers (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)

Wednesday 12th February 2025

Source Page: FOI release 23253: Cafcass policies
Document: Cafcass policies (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Tuesday 11th February 2025

Source Page: Contracting authority onboarding
Document: Contracting authority onboarding (webpage)

Found: It is a requirement under Article 26 of Data Protection Act 2018 and is quite commonly used in Central

Tuesday 11th February 2025

Source Page: Attendance of pupils in maintained schools: 2 September 2024 to 31 January 2025
Document: Attendance of pupils in maintained schools: 2 September 2024 to 31 January 2025 (webpage)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Monday 10th February 2025

Source Page: FOI release 23243: E Harley Street Primary Care Solutions
Document: E Harley Street Primary Care Solutions (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)

Tuesday 28th January 2025

Source Page: Attendance of pupils in maintained schools: 2 September 2024 to 17 January 2025
Document: Attendance of pupils in maintained schools: 2 September 2024 to 17 January 2025 (webpage)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Monday 20th January 2025

Source Page: FOI release 23209: Aberpergwm coal mine
Document: Aberpergwm coal mine (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Monday 20th January 2025

Source Page: FOI release 23206: Palestine
Document: Palestine (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Monday 20th January 2025

Source Page: Call for evidence: shore-based netting in Wales
Document: Call for evidence: shore-based netting in Wales (PDF)

Found: document is also available in Welsh UK General Data Protection Regulation (UK GDPR) and the Data Protection Act

Tuesday 14th January 2025

Source Page: Attendance of pupils in maintained schools: 2 September to 20 December 2024
Document: Attendance of pupils in maintained schools: 2 September to 20 December 2024 (webpage)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Monday 13th January 2025

Source Page: General funding round window 2 (Welsh Marine and Fisheries Scheme): guidance
Document: General funding round window 2 (Welsh Marine and Fisheries Scheme): guidance (webpage)

Found: the Freedom of Information Act 2000, the Environmental Information Regulations 2004 and the Data Protection Act

Monday 13th January 2025

Source Page: Proposals to make the food environment healthier
Document: Annex 1: draft statutory instrument (PDF)

Found: data” and “ the data protection legislation” have the same meanings as in section 3 of the Data Protection Act

Thursday 9th January 2025

Source Page: School Governors' guide to the law
Document: 4: Governing Body Procedures and Meetings (PDF)

Found: personal data is handled in accordance with the General Data Protection Regulation and the Data Protection Act

Thursday 9th January 2025

Source Page: School Governors' guide to the law
Document: 10: Staffing (PDF)

Found: regard to and comply with the requirements of the Freedom of Information Act 2000 and the Data Protection Act

Thursday 9th January 2025

Source Page: School Governors' guide to the law
Document: 6: Providing Information (PDF)

Found: to parents; • pupils’ educational records and pupil reports; • information covered by the Data Protection Act

Thursday 9th January 2025

Source Page: School Governors' guide to the law
Document: Annex 3: Glossary (PDF)

Found: D Data Protection Act 1998 (DPA) - an Act making provision for the regulation of the processing of

Thursday 9th January 2025

Source Page: Small Grants - Environment (landscape and pollinators): general rules booklet 2025
Document: Small Grants - Environment (landscape and pollinators): general rules booklet 2025 (webpage)

Found: in accordance with the obligations and duties under the Freedom of Information Act 2000, the Data Protection Act

Wednesday 8th January 2025

Source Page: Advertisement consent and discontinuance notice appeal form
Document: Advertisement consent and discontinuance notice appeal form (PDF)

Found: supplied by you in this form, is in accordance with the terms of our registration under the Data Protection Act

Tuesday 7th January 2025

Source Page: Diversity and inclusion guidance for registered political parties
Document: Draft guidance (webpage)

Found: Compliance with relevant legislation Political parties are reminded of their obligations under the Data Protection Act

Thursday 2nd January 2025

Source Page: Woodland Creation Planning Scheme (January 2025): rules booklet
Document: Woodland Creation Planning Scheme (January 2025): rules booklet (webpage)

Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004 or the Data Protection Act

Monday 30th December 2024

Source Page: Draft Senedd Cymru (Representation of the People) Order
Document: The Senedd Cymru (Representation of the People) Order 2025 (webpage)

Found: In this paragraph, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018

Tuesday 24th December 2024

Source Page: FOI release 23147: Wildlife poisoning
Document: Wildlife poisoning (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Friday 20th December 2024

Source Page: Allocation of accommodation and homelessness: guidance for local authorities
Document: Allocation of accommodation and homelessness: guidance for local authorities (PDF)

Found: administering allocation schemes, Local Authorities must comply with the provisions of the Data Protection Act

Thursday 19th December 2024

Source Page: Woodland Restoration Scheme (window 3) - Forest Management Plan: template
Document: Woodland Restoration Scheme - Forest Management Plan: template (webpage)

Found: in accordance with the obligations and duties under the Freedom of Information Act 2000, the Data Protection Act

Thursday 19th December 2024

Source Page: Managing technology that manages people
Document: Managing technology that manages people: a Social Partnership approach to algorithmic management systems in the Welsh public sector (PDF)

Found: Act 1974, • the Human Rights Act 1998, • the Equality Act 2010, 10 • the Data Protection Act

Wednesday 18th December 2024

Source Page: FOI release 21984: Dublin office
Document: Dublin office (PDF)

Found: We believe that releasing this information would be in breach of the Data Protection Act.

Wednesday 18th December 2024

Source Page: Integrated Natural Resources Scheme: project delivery plan guidance
Document: Integrated Natural Resources Scheme: project delivery plan guidance (webpage)

Found: obligations under the Freedom of Information Act 2000, the Environmental Information Act 2004 or the Data Protection Act

Tuesday 17th December 2024

Source Page: Absenteeism from primary schools: September 2023 to August 2024
Document: Absenteeism from primary schools: September 2023 to August 2024 (webpage)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Tuesday 17th December 2024

Source Page: Attendance of pupils in maintained schools: 2 September to 6 December 2024
Document: Attendance of pupils in maintained schools: 2 September to 6 December 2024 (webpage)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Monday 16th December 2024

Source Page: FOI release 22105: Physician associates
Document: Physician associates (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)

Friday 13th December 2024

Source Page: FOI release 22095: Pandemic preparedness
Document: Pandemic preparedness (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)

Monday 9th December 2024

Source Page: FOI release 22088: Eating disorder review
Document: Eating disorder review (PDF)

Found: Information Act, as it is personal data protected by the General Data Protection Regulation and Data Protection Act

Monday 9th December 2024

Source Page: The Disused Mine and Quarry Tips (Wales) Bill
Document: Data protection impact assessment (PDF)

Found: The Authority is a competent authority (within the meaning of section 30(1)(b) of the Data Protection Act

Thursday 5th December 2024

Source Page: FOI release 22128: Call-in Planning application
Document: Call-in Planning application (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Thursday 5th December 2024

Source Page: Examination results: September 2023 to August 2024
Document: Examination results: September 2023 to August 2024 (webpage)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Tuesday 3rd December 2024

Source Page: FOI release 22067: Phonics
Document: Phonics (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)

Tuesday 3rd December 2024

Source Page: Single Unified Safeguarding Review: statutory guidance
Document: Statutory guidance (PDF)

Found: Data protection, privacy and confidentiality considerations 10.9 The Data Protection Act 2018 and the

Tuesday 3rd December 2024

Source Page: Attendance of pupils in maintained schools: 2 September to 22 November 2024
Document: Attendance of pupils in maintained schools: 2 September to 22 November 2024 (webpage)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Monday 25th November 2024

Source Page: Electric vehicle charging infrastructure procurement: technical advice note
Document: Electric vehicle charging infrastructure procurement: technical advice note (PDF)

Found: Data protection All systems and parties must comply with the Data Protection Act 2018 (UK GDPR).

Monday 25th November 2024

Source Page: Visitor Accommodation (Register and Levy) Etc. (Wales) Bill: data protection impact assessment
Document: Data protection impact assessment (webpage)

Found: new power, local authorities must have regard to their existing statutory duties under the Data Protection Act

Thursday 21st November 2024

Source Page: FOI release 22050: CRI services
Document: CRI services (PDF)

Found: Personal data protected by the General Data Protection Regulation and Data Protection Act 2018.

Tuesday 19th November 2024

Source Page: Attendance of pupils in maintained schools: 2 September to 8 November 2024
Document: Attendance of pupils in maintained schools: 2 September to 8 November 2024 (webpage)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Monday 18th November 2024

Source Page: FOI release 22032: Planning application
Document: Planning application (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Friday 15th November 2024

Source Page: Iaith Athrawon Yfory Incentive Scheme: guidance for students 2025 to 2026
Document: Iaith Athrawon Yfory Incentive Scheme: guidance for students 2025 to 2026 (webpage)

Found: Information Regulations 2004 (the “EIR”) the General Data Protection Regulation (GDPR) and Data Protection Act

Thursday 14th November 2024

Source Page: Welsh Government retention and disposal schedule
Document: Retention and disposal schedule (PDF)

Found: For sensitive information, including that covered by the Data Protection Act 2018 (which replaced the

Wednesday 13th November 2024

Source Page: Digital submission of planning application forms and associated consents
Document: Digital submission of planning application forms and associated consents (PDF)

Found: In accordance with the Data Protection Act 2018, Welsh Government is the data controller for personal

Monday 11th November 2024

Source Page: Listed building and conservation area enforcement notice appeal form
Document: Listed building enforcement and conservation area enforcement appeal form (PDF)

Found: supplied by you in this form, is in accordance with the terms of our registration under the Data Protection Act

Monday 11th November 2024

Source Page: Listed building and conservation area consent appeal form
Document: Listed building consent or conservation area consent appeal form (PDF)

Found: supplied by you in this form, is in accordance with the terms of our registration under the Data Protection Act

Monday 11th November 2024

Source Page: FOI release 21937: International Engagement budget
Document: Internal review (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Monday 11th November 2024

Source Page: Enforcement notice appeal form
Document: Enforcement notice appeal form (PDF)

Found: supplied by you in this form, is in accordance with the terms of our registration under the Data Protection Act

Monday 11th November 2024

Source Page: FOI release 22005: Pig Registration
Document: Pig Registration (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Monday 11th November 2024

Source Page: Woodland Restoration Scheme (window 3): rules booklet
Document: Woodland Restoration Scheme (window 3): rules booklet (webpage)

Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004 or the Data Protection Act

Tuesday 5th November 2024

Source Page: FOI release 22013: Flying Start
Document: Flying Start (PDF)

Found: Contact name and email address are considered personal data as defined in the Data Protection Act 2018

Tuesday 5th November 2024

Source Page: Attendance of pupils in maintained schools: 2 September to 25 October 2024
Document: Attendance of pupils in maintained schools: 2 September to 25 October 2024 (webpage)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Monday 4th November 2024

Source Page: FOI release 21993: Physician Associates
Document: Physician Associates (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)

Monday 4th November 2024

Source Page: Agricultural Diversification and Horticulture Scheme: rules booklet
Document: Agricultural Diversification and Horticulture Scheme: rules booklet (webpage)

Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004 or the Data Protection Act

Monday 4th November 2024

Source Page: Growing for the environment: rules booklet
Document: Growing for the environment: rules booklet (window 6) (webpage)

Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004 or the Data Protection Act

Monday 4th November 2024

Source Page: Growing for the environment: rules booklet
Document: Growing for the environment: rules booklet (window 4) (webpage)

Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004 or the Data Protection Act

Monday 4th November 2024

Source Page: Growing for the environment: rules booklet
Document: Growing for the environment: rules booklet (window 5) (webpage)

Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004 or the Data Protection Act

Monday 4th November 2024

Source Page: Growing for the environment: rules booklet
Document: Growing for the environment: rules booklet (window 2) (webpage)

Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004 or the Data Protection Act

Monday 4th November 2024

Source Page: Growing for the environment: rules booklet
Document: Growing for the environment: rules booklet (window 3) (webpage)

Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004 or the Data Protection Act

Monday 4th November 2024

Source Page: Growing for the environment: rules booklet
Document: Growing for the environment: rules booklet (window 1) (webpage)

Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004 or the Data Protection Act

Monday 4th November 2024

Source Page: Small Grants – Horticulture Start Up (window 3): rules booklet
Document: Small Grants – Horticulture Start Up (window 3): rules booklet (webpage)

Found: obligations under the Freedom of Information Act 2000, the Environmental Information Act 2004 or the Data Protection Act

Monday 28th October 2024

Source Page: Open government report: 2023
Document: Open government report: 2023 (PDF)

Found: Information Act 2000 (FOIA), the Environmental Information Regulations 2004 (EIRs) and the Data Protection Act

Friday 25th October 2024

Source Page: Safeguarding people: an introduction
Document: Working together to safeguard people volume 1: introduction and overview (PDF)

Found: Practitioners must share information in accordance with the Data Protection Act 1998 and the common

Thursday 24th October 2024

Source Page: Attendance of pupils in maintained schools: 2 September to 18 October 2024
Document: Attendance of pupils in maintained schools: 2 September to 18 October 2024 (webpage)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Wednesday 23rd October 2024

Source Page: FOI release 21970: Aberaeron Library
Document: Aberaeron Library (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)

Wednesday 23rd October 2024

Source Page: FOI release 21970: Aberaeron Library
Document: Doc 2 (PDF)

Found: Under the UK GDPR, Data Protection Act 2018 and the Freedom of Information Act 2000 the contents of



Welsh Written Answers
WQ96336
Asked by: Gareth Davies (Welsh Conservative Party - Vale of Clwyd)
Friday 2nd May 2025

Question

What Welsh Government guidance is provided to GP practices regarding charging patients for accessing their medical records?

Answered by Cabinet Secretary for Health and Social Care

The General Data Protection Regulations and the Data Protection Act 2018 were made by the UK government and apply to the four nations of the UK. GP practices cannot charge patients for reasonable access to their medical record. Guidance for GPs has been issued by the BMA to help practices in understanding their statutory obligations. bma-access-to-health-records-nov-19.pdf