Found: additional compliance requirements associated with special category data under the General Data Protection Act

Found: not allowed to inspect, such as personal and personnel information, in accordance with the Data Protection Act

Found: not allowed to inspect, such as personal and personnel information, in accordance with the Data Protection Act

Found: of rights. 9 For example, the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act

Found: regulatory requirements, including the UK General Data Protection Regulation 2018 and the Data Protection Act

Found: All procedures complied with the UK GDPR and the Data Protection Act 2018.

Found: While GDPR and UK Data Protection Act include provisions for crime prevention, practical implementation

Found: Data Protection Advisor(s) to ensure that the processing of personal data complies with Data Protection Act

Question to the Department for Education:

To ask the Secretary of State for Education, whether Multi-Academy Trust boards are permitted to redact minutes of board meetings that relate to the use of public funds; what guidance her Department issues on transparency and redaction of trust governance documents; and what assessment she has made of the adequacy of current practices.

Answered by Georgia Gould - Minister of State (Education)

The Academy Trust Governance Guide outlines that the trust board is responsible for being open and transparent about its decisions and actions. This guide is accessible at: https://www.gov.uk/government/publications/academy-trust-governance-guide.

The Academy Trust Handbook and trust’s articles of association state that trusts must make available on request for inspection the agenda for board, local committees/governing bodies and committee meetings, approved minutes of each meeting, and any report, document or other paper considered at each meeting.

Trusts may exclude from its records material which, by reason of its nature, the trustees are satisfied should remain confidential, such as names of employees or pupils. The trust must comply with the Data Protection Act 2018 and UK General Data Protection Regulations.

To monitor financial oversight, trusts must submit an annual report and accounts in accordance with the Charity Commission’s Statement of Recommended Practice and the departments Accounts Direction to the department.

The requirements set out in the Academy Trust Handbook are reviewed annually.

Question to the Department for Digital, Culture, Media & Sport:

To ask the Secretary of State for Culture, Media and Sport, pursuant to the Answer of 25 April 2025 to Question 45800 on Press: Misconduct, what steps her Department is taking to help ensure that arbitration schemes operated by press regulators are available to provide timely and effective redress before the Government directs members of the public to them in guidance.

Answered by Ian Murray - Minister of State (Department for Science, Innovation and Technology)

The UK has a self-regulatory system for the press, which is independent from Government. This is vital to ensure the public has access to accurate and trustworthy information from a range of different sources. The Government therefore does not intervene in or evaluate the work of independent press regulators.

However, under Section 179 of the Data Protection Act every three years the Secretary of State must lay before Parliament a report on the use and effectiveness of alternative dispute resolution procedures, such as arbitration, in cases involving a failure or alleged failure by relevant media organisations to comply with data protection legislation. The most recent report was presented to Parliament in May 2024 and was carried independently of DCMS by David Rossington, as the Independent Reviewer. The report is published on the Gov.uk website:

https://assets.publishing.service.gov.uk/media/67d2ded5fb8db2176d5e97d0/Formatted_240312_SECOND_REPORT_UNDER_SECTION_179_OF_THE_DATA_PROTECTION_ACT_v3__FINAL__accessible.pdf.

Question to the Department for Science, Innovation & Technology:

To ask the Secretary of State for Science, Innovation and Technology, what safeguards are in place to ensure that automated analysis by private tech companies of the content of private email complies with the UK General Data Protection Regulation and the Data Protection Act 2018.

Answered by Ian Murray - Minister of State (Department for Science, Innovation and Technology)

The UK’s data protection legislation applies to any processing of personal data regardless of the technology being used. Technology companies that screen or analyse personal emails must identify an appropriate legal ground for doing so, such as obtaining user consent. Personal data must also be processed fairly and transparently so that people can make informed decisions about whether to use a service.

The data protection legislation is monitored and enforced independently of government by the Information Commissioner’s Office (ICO). The ICO has published guidance for organisations on automated decision making, profiling and artificial intelligence at: Automated decision-making and profiling | ICO and Artificial intelligence | ICO. It will also consider complaints about organisations that fail to comply with the legislation.

Question to the Department for Digital, Culture, Media & Sport:

To ask the Secretary of State for Culture, Media and Sport, how many civil servants employed by their Department work in roles primarily focused on (a) transgender policy, (b) diversity, (c) equity and (d) inclusion; and at what annual salary cost.

Answered by Ian Murray - Minister of State (Department for Science, Innovation and Technology)

We cannot provide the number and salary of staff who are employed in roles primarily focussed on a combination of diversity, equity and inclusion. Doing so would breach the Data Protection Act and risk identifying individual members of staff because the data is concerning five or less employees, and the information relates to someone other than the data subjects.

Question to the Department for Science, Innovation & Technology:

To ask the Secretary of State for Science, Innovation and Technology, what assessment she has made of the effectiveness of current obligations of tech companies to communicate to customers about how their data will be used.

Answered by Ian Murray - Minister of State (Department for Science, Innovation and Technology)

The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA) impose obligations on tech companies to process customers’ personal data lawfully, fairly, transparently and securely, unless certain limited exemptions apply. Organisations must only process personal data where there are legitimate grounds to do so, and be clear with people about how and why their data is being used, such as through privacy notices.

The data protection legislation is monitored and enforced independently of Government by the Information Commissioner’s Office (ICO). The ICO has published guidance on transparency requirements here: https://ico.org.uk/for-organisations/advice-and-services/audits/data-protection-audit-framework/toolkits/accountability/transparency/.

Question to the Department for Science, Innovation & Technology:

To ask His Majesty's Government, further to the Written Answer by Baroness Lloyd of Effra on 5 January [HL12970], whether the responsibilities in the Digital Economy Act 2017 Codes of Practice have been met; and whether that single entity named is required to have a current registration with the ICO for Data Protection Act purposes.

Answered by Baroness Lloyd of Effra - Baroness in Waiting (HM Household) (Whip)

The Digital Economy Act 2017 requires all persons who are involved in disclosing or using information under the public service delivery, debt and fraud powers to have due regard to the Code of Practice for public authorities disclosing information under Chapters 1, 3 and 4 (Public Service Delivery, Debt and Fraud) of Part 5 of the Digital Economy Act 2017 in so far as they are relevant, when they disclose or use information under these powers.

It is also a legal requirement for many organisations including government bodies and agencies that process personal data, to register with the Information Commissioner’s Office in accordance with the Data Protection (Charges and Information) Regulations 2018 unless they are exempt.

Question to the Department for Science, Innovation & Technology:

To ask the Secretary of State for Science, Innovation and Technology, if she will made an assessment of the potential impact of SARs not being disclosed by NHS hospital trusts within the statutory one month timeframe.

Answered by Ian Murray - Minister of State (Department for Science, Innovation and Technology)

The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA) provide individuals with the right to access their personal data, subject to relevant exemptions. A subject access request must be responded to within one month of receiving the request. The response time may be extended by a further two months if the request is complex, or if the individual has submitted a number of requests, provided the organisation informs the requestor within the one-month period and provides reasons for the delay.

NHS England has produced guidance for patients and service users on making a Subject Access Request (SAR), and for professionals to ensure they can respond to requests in a timely manner. It can be found here: https://transform.england.nhs.uk/information-governance/guidance/subject-access-requests/

The Information Commissioner’s Office (ICO) is responsible for monitoring and enforcing the data protection legislation independently of government, and is accountable to Parliament.

Question to the Department for Science, Innovation & Technology:

To ask the Secretary of State for Science, Innovation and Technology, what steps her Department is taking to ensure the ICO's statutory duty to enforce SAR disclosures are met within a one month timeframe.

Answered by Ian Murray - Minister of State (Department for Science, Innovation and Technology)

The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA) provide individuals with the right to access their personal data, subject to relevant exemptions. A subject access request must be responded to within one month of receiving the request. The response time may be extended by a further two months if the request is complex, or if the individual has submitted a number of requests, provided the organisation informs the requestor within the one-month period and provides reasons for the delay.

The Information Commissioner’s Office (ICO) is responsible for monitoring and enforcing the data protection legislation independently of government, and is accountable to Parliament.

Question to the Home Office:

To ask the Secretary of State for the Home Department, what recent assessment she has made of the potential impact of live facial recognition surveillance on the rights to privacy, freedom of assembly, and freedom of expression.

Answered by Sarah Jones - Minister of State (Home Office)

Passport photographs are not being enrolled into biometric databases accessible for live facial recognition searches. However, His Majesty’s Passport Office (HMPO) may conduct retrospective facial recognition searches against the passport database, on behalf of police forces, in relation to serious cases e.g. sexual offences, violent offences, serious and organised crime, or those that are of a national security interest. Guidance on this practice, and an Equality Impact Assessment has been published on the GOV.UK site.

When deploying facial recognition technology, police forces must comply with existing legislation including the Human Rights Act 1998, Equality Act 2010, Data Protection Act 2018, Police and Criminal Evidence Act 1984, as well as their own published policies. For live facial recognition, police forces must also follow the College of Policing’s Authorised Professional Practice (APP) on Live Facial Recognition. Forces also need to comply with the Surveillance Camera Code of Practice, which is supplemented by published policing policies.

On 4 December the Government launched a consultation on law enforcement use of biometrics, facial recognition and similar technologies. We are consulting on a new legal framework to create consistent, durable rules and appropriate safeguards for biometrics and facial recognition. This framework will aim to strike the right balance between public protection and privacy.

Question to the Home Office:

To ask the Secretary of State for the Home Department, whether passport photographs are being enrolled into biometric databases accessible for live facial recognition searches; and what assessment she has made of the privacy implications of this policy.

Answered by Sarah Jones - Minister of State (Home Office)

Passport photographs are not being enrolled into biometric databases accessible for live facial recognition searches. However, His Majesty’s Passport Office (HMPO) may conduct retrospective facial recognition searches against the passport database, on behalf of police forces, in relation to serious cases e.g. sexual offences, violent offences, serious and organised crime, or those that are of a national security interest. Guidance on this practice, and an Equality Impact Assessment has been published on the GOV.UK site.

When deploying facial recognition technology, police forces must comply with existing legislation including the Human Rights Act 1998, Equality Act 2010, Data Protection Act 2018, Police and Criminal Evidence Act 1984, as well as their own published policies. For live facial recognition, police forces must also follow the College of Policing’s Authorised Professional Practice (APP) on Live Facial Recognition. Forces also need to comply with the Surveillance Camera Code of Practice, which is supplemented by published policing policies.

On 4 December the Government launched a consultation on law enforcement use of biometrics, facial recognition and similar technologies. We are consulting on a new legal framework to create consistent, durable rules and appropriate safeguards for biometrics and facial recognition. This framework will aim to strike the right balance between public protection and privacy.

Question to the Cabinet Office:

To ask the Minister for the Cabinet Office, whether the 2017 Memorandum of Understanding between HMRC and the Cabinet Office has been updated since the introduction of the Data Protection Act 2018; and on what basis data transfers for honours probity checks continues.

Answered by Nick Thomas-Symonds - Paymaster General and Minister for the Cabinet Office

As noted in our answer to PQ 92590, the Memorandum of Understanding between the Cabinet Office and HMRC was last updated in 2023. The Memorandum of Understanding, which is published in full on gov.uk, sets out the legal and lawful basis by which data is transferred.

The 2023 Memorandum of Understanding is available at the following link:

https://www.gov.uk/government/publications/sharing-hmrc-information-to-assist-honours-committees-recommendations/memorandum-of-understanding-accessing-hmrc-information-to-assist-honours-committees-in-making-recommendations-about-awarding-honours-to-individ

Question to the Home Office:

To ask the Secretary of State for the Home Department, on what statutory basis live facial recognition technology is deployed by police forces in England and Wales; and whether her Department plans to introduce primary legislation before any expansion of its use.

Answered by Sarah Jones - Minister of State (Home Office)

There is an established basis for the police to use live facial recognition technology. When deploying facial recognition technology, police forces must comply with existing legislation including the Human Rights Act 1998, Equality Act 2010, Data Protection Act 2018, Police and Criminal Evidence Act 1984, as well as their own published policies. For live facial recognition, police forces must also follow the College of Policing’s Authorised Professional Practice (APP) on Live Facial Recognition. Forces also need to comply with the Surveillance Camera Code of Practice, which is supplemented by published policing policies.

On 4 December the Government launched a consultation on law enforcement use of biometrics, facial recognition and similar technologies. Although there is a legal basis for police use of facial recognition, the current legal framework is complicated, inflexible and difficult to understand, which in turn limits the extent to which facial recognition and similar technologies can be confidently used.

That is why the government is consulting on a new legal framework to inform potential legislation.

Question to the Home Office:

To ask the Secretary of State for the Home Department, what plans she has to allow for Parliamentary scrutiny of proposals to expand the use of live facial recognition technology.

Answered by Sarah Jones - Minister of State (Home Office)

There is an established basis for the police to use live facial recognition technology. When deploying facial recognition technology, police forces must comply with existing legislation including the Human Rights Act 1998, Equality Act 2010, Data Protection Act 2018, Police and Criminal Evidence Act 1984, as well as their own published policies. For live facial recognition, police forces must also follow the College of Policing’s Authorised Professional Practice (APP) on Live Facial Recognition. Forces also need to comply with the Surveillance Camera Code of Practice, which is supplemented by published policing policies.

On 4 December the Government launched a consultation on law enforcement use of biometrics, facial recognition and similar technologies. Although there is a legal basis for police use of facial recognition, the current legal framework is complicated, inflexible and difficult to understand, which in turn limits the extent to which facial recognition and similar technologies can be confidently used.

That is why the government is consulting on a new legal framework to inform potential legislation.

Question to the Home Office:

To ask the Secretary of State for the Home Department, whether she plans to prevent the expansion of live facial recognition technology beyond counter-terrorism and serious crime into routine policing, retail monitoring, or crowd surveillance.

Answered by Sarah Jones - Minister of State (Home Office)

Live facial recognition technology, which involves processing live video footage of people passing a camera, is used in England and Wales to help locate people who are wanted by the police, in public spaces. The College of Policing has produced national guidance in the form of an Authorised Professional Practice (APP), setting out when the police can use live facial recognition and the categories of people they can look for. These include individuals wanted by the police or the courts, suspects, missing or vulnerable people, or those posing a risk of harm to themselves or others. In each case, inclusion on a watchlist must be justified and authorised, and must pass the tests of necessity, proportionality and use for a policing purpose.

On 4 December the Government launched a consultation on establishing a new legal framework which focuses on the use of facial recognition and similar technologies by law enforcement organisations, for a law enforcement purpose.

The consultation seeks views on whether seriousness of harm should be a factor to decide how and when law enforcement organisations can acquire, retain, and use biometrics, facial recognition, and similar technology. The consultation also asks for views on what factors are relevant to consider when assessing ‘seriousness’ of harm and for which purposes should law enforcement organisations be allowed to use these technologies.

The consultation also explains that the new legal framework will apply to law enforcement organisations. This would include all police forces in England and Wales, and national and specialist law enforcement agencies like the British Transport Police and National Crime Agency and for law enforcement activity by other public bodies such as the Environment Agency, HMRC or Border Force.

We are aware that facial recognition and similar technologies are used more broadly across the public and private sectors. For example, we know that nightclubs use it to help identify barred patrons. Where that is the case they must comply with all relevant existing legislation including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 and guidance, with the Information Commissioner’s Office (ICO) as the principal regulator.

Through the consultation we will therefore also consider whether public and private sector organisations ought to have due regard to the new legal framework and especially to any best practice established as a result.

Question to the Home Office:

To ask the Secretary of State for the Home Department, whether she plans to expand the use of live facial recognition technology for non-criminal matters.

Answered by Sarah Jones - Minister of State (Home Office)

Live facial recognition technology, which involves processing live video footage of people passing a camera, is used in England and Wales to help locate people who are wanted by the police, in public spaces. The College of Policing has produced national guidance in the form of an Authorised Professional Practice (APP), setting out when the police can use live facial recognition and the categories of people they can look for. These include individuals wanted by the police or the courts, suspects, missing or vulnerable people, or those posing a risk of harm to themselves or others. In each case, inclusion on a watchlist must be justified and authorised, and must pass the tests of necessity, proportionality and use for a policing purpose.

On 4 December the Government launched a consultation on establishing a new legal framework which focuses on the use of facial recognition and similar technologies by law enforcement organisations, for a law enforcement purpose.

The consultation seeks views on whether seriousness of harm should be a factor to decide how and when law enforcement organisations can acquire, retain, and use biometrics, facial recognition, and similar technology. The consultation also asks for views on what factors are relevant to consider when assessing ‘seriousness’ of harm and for which purposes should law enforcement organisations be allowed to use these technologies.

The consultation also explains that the new legal framework will apply to law enforcement organisations. This would include all police forces in England and Wales, and national and specialist law enforcement agencies like the British Transport Police and National Crime Agency and for law enforcement activity by other public bodies such as the Environment Agency, HMRC or Border Force.

We are aware that facial recognition and similar technologies are used more broadly across the public and private sectors. For example, we know that nightclubs use it to help identify barred patrons. Where that is the case they must comply with all relevant existing legislation including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 and guidance, with the Information Commissioner’s Office (ICO) as the principal regulator.

Through the consultation we will therefore also consider whether public and private sector organisations ought to have due regard to the new legal framework and especially to any best practice established as a result.

Question to the Home Office:

To ask the Secretary of State for the Home Department, whether her Department will review the classification of neighbour harassment involving intrusive CCTV surveillance.

Answered by Sarah Jones - Minister of State (Home Office)

The police have a range of powers to deal with any behaviour that causes harassment, alarm or distress to others. The Government fully supports the police in their use of these powers to maintain public order and keep communities safe.

Individuals that use CCTV to film outside their property boundary have to comply fully with the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018. The Information Commissioner’s Office (ICO) has published guidance which details the obligations the CCTV user will need to comply with: https://ico.org.uk/for-the-public/home-cctv-systems/.

Where there is sufficient evidence of harassment or stalking from a domestic camera system, this may lead to prosecution for a criminal offence of harassment or stalking under the Protection from Harassment Act 1997. In addition to the Protection from Harassment Act 1997, another potential remedy in civil law is the tort of private nuisance, which is a common law tort that relates to a person’s private rights in relation to land.

Question to the Department for Science, Innovation & Technology:

To ask His Majesty's Government what steps they are taking to ensure robust governance, safety evaluation and transparency in their announced partnership with Google DeepMind, including the planned automated science laboratory and access to its AI models for public services.

Answered by Baroness Lloyd of Effra - Baroness in Waiting (HM Household) (Whip)

The non‑binding Memorandum of Understanding between DSIT and Google DeepMind establishes a partnership for collaboration to support delivery on this government’s AI Opportunities Action Plan. This includes concrete initiatives such as priority access for UK scientists to AI tools; deepening collaboration with the AI Security Institute on AI safety and security research; and support for the development of AI-ready datasets in strategically important domains such as fusion energy.

The automated lab announced alongside the MoU is an independent Google DeepMind initiative, fully funded by Google DeepMind. The UK Government is not involved in operating or funding the lab.

The partnership with Google DeepMind will support DSIT’s efforts to explore how AI can improve productivity and service delivery across government. However, any use of AI in public services will be subject to the highest standards of safety and security, including the Data Protection Act 2018 and UK GDPR, the Government’s Data Ethics Framework, and relevant departmental assurance and security processes.

Question to the Home Office:

To ask His Majesty's Government what plans they have to restrict the circumstances in which children may be added to facial recognition watchlists.

Answered by Lord Hanson of Flint - Minister of State (Home Office)

Facial recognition is a crucial tool that helps the police locate missing people, suspects, and those wanted by the courts.

In some cases, under the existing legal framework this includes vulnerable individuals such as missing children. When using facial recognition technology, police forces must comply with legislation including the Human Rights Act 1998, Equality Act 2010, Data Protection Act 2018, Police and Criminal Evidence Act 1984, as well as their own published policies. For live facial recognition, police forces must also follow the College of Policing’s Authorised Professional Practice (APP) on Live Facial Recognition.

This sets out the categories of people who may be included on a watchlist. These include individuals wanted by the police or the courts, suspects, missing or vulnerable people, or those posing a risk of harm to themselves or others. In each case, inclusion on a watchlist must be justified and authorised, and must pass the tests of necessity, proportionality and use for a policing purpose.

On 4^th December the Government launched a consultation on a new legal framework for law enforcement use of biometrics, facial recognition and similar technologies. During the consultation we want to hear views on when and how biometrics, facial recognition and similar technologies should be used, and what safeguards and oversight are needed.

Question to the Home Office:

To ask His Majesty's Government whether they plan to introduce limits on the circumstances in which police forces can add children to facial recognition watchlists.

Answered by Lord Hanson of Flint - Minister of State (Home Office)

Facial recognition is a crucial tool that helps the police locate missing people, suspects, and those wanted by the courts.

In some cases, under the existing legal framework this includes vulnerable individuals such as missing children. When using facial recognition technology, police forces must comply with legislation including the Human Rights Act 1998, Equality Act 2010, Data Protection Act 2018, Police and Criminal Evidence Act 1984, as well as their own published policies. For live facial recognition, police forces must also follow the College of Policing’s Authorised Professional Practice (APP) on Live Facial Recognition.

This sets out the categories of people who may be included on a watchlist. These include individuals wanted by the police or the courts, suspects, missing or vulnerable people, or those posing a risk of harm to themselves or others.In each case, inclusion on a watchlist must be justified and authorised, and must pass the tests of necessity, proportionality and use for a policing purpose.

On 4^th December the Government launched a consultation on a new legal framework for law enforcement use of biometrics, facial recognition and similar technologies. During the consultation we want to hear views on when and how biometrics, facial recognition and similar technologies should be used, and what safeguards and oversight are needed.

Question to the Home Office:

To ask His Majesty's Government what steps they are taking to ensure that any use of live facial recognition cameras by law enforcement bodies is subject to clear safeguards to protect privacy and human rights.

Answered by Lord Hanson of Flint - Minister of State (Home Office)

When deploying facial recognition technology, police forces must comply with existing legislation including the Human Rights Act 1998, Equality Act 2010, Data Protection Act 2018, Police and Criminal Evidence Act 1984, as well as their own published policies. For live facial recognition, police forces must also follow the College of Policing’s Authorised Professional Practice (APP) on Live Facial Recognition. Forces must also give due regard to the Surveillance Camera Code of Practice, which is supplemented by published policing policies.

On 4 December the Government launched a 10 week public consultation on law enforcement use of biometrics, facial recognition and similar technologies. We are consulting on a new legal framework to create consistent, durable rules and appropriate safeguards for biometrics and facial recognition. This framework will aim to strike the right balance between public protection and privacy. The consultation will close week commencing 9 Feb 2026.

Found: The Data Protection Act 201823.—(1) The Data Protection Act 2018(28) is amended as follows. (2) In each

Found: Orders) (England) Regulations 2001(27), as a relevant authority; (e)for the purposes of the Data Protection Act

Found: Offi ce reporting In accordance with UK General Data Protection Regulation (UK GDPR) and the Data Protection Act

Found: may be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Found: may be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Found: may be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Found: service providers must do so effectively and in accordance with their obligations under the Data Protection Act

Found: These are primarily the Freedom of Information Act 2000 (FOIA), the Data Protection Act 2018 (DPA),

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Found: may be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Found: may be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Found: to information regimes (these are primarily the Freedom of Information Act 2000 (FOIA), the Data Protection Act

Found: to information regimes (these are primarily the Freedom of Information Act 2000 (FOIA), the Data Protection Act

Found: The department will process your personal data in accordance with the Data Protection Act 2018 (DPA)

Found: June 2024 MPSNW Review Officer, Specialist Crime Review Group (SCRG) Short reports Data Protection Act

Found: DLRM Decommissioning and Legacy Risks Mitigation DMD Disclosure Management Document DPA 2018 Data Protection Act

Found: thorniest operational issue of [their] inspection’.392 Due to the CPS’s interpretation of the Data Protection Act

Found: (Trustworthiness, Manage data responsibly)” To comply with this and with the Data Protection Act of 1998

Found: misleading statements 09520 09520 - Obstructing the inspection of overseas information systems (Data Protection Act

Found: The 2021 amendment to Singapore’s Personal Data Protection Act (PDPA) introduced a ‘Data Portability

Found: understanding.Data protection:All personal data must be collected and processed in line with Kenya’s Data Protection Act

Found: “DPA 2018” means the Data Protection Act 2018“Default” means any breach of the obligations of the Supplier

Found: In this clause, "data protection legislation" has the same meaning as in the Data Protection Act 2018

Found: transparently, and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act

Found: Freedom of Information Act 2000 and the Environmental Information Regulations 2004 (if the Data Protection Act

Found: individual recorded as a consequence of this framework will be processed in accordance with the Data Protection Act

Found: software or system that the Supplier is required to develop under this Contract; "DPA 2018" the Data Protection Act

Found: h) ‘Data Protection Legislation’ means • the UK GDPR • the Data Protection Act 2018 • all applicable

Found: protection and data sharing 8 Legal duties under the UK General Data Protection Regulation and Data Protection Act

Found: “DPA 2018” means the Data Protection Act 2018“Default” means any breach of the obligations of the Supplier

Found: statutory obligations relating to the management of personal data in LEDS arising from the Data Protection Act

Found: statutory obligations relating to the management of personal data in LEDS arising from the Data Protection Act

Found: “DPA 2018” means the Data Protection Act 2018“Default” means any breach of the obligations of the Supplier

Found: “DPA 2018” means the Data Protection Act 2018“Default” means any breach of the obligations of the Supplier

Found: special severance payments conflicting with a legal obligation arising as a result of the Data Protection Act

Found: (2) For the purposes of section 8(c) of the Data Protection Act 2018 (lawfulness of processing: public

Found: This also sets out your rights under the Data Protection Act 2018 and explains how you can access your

Found: for information is received by either party under the Freedom of Information Act 2000, the Data Protection Act

Found: information is received by either party under the Freedom of Information Act 2000, or the Data Protection Act

Found: Under the UK GDPR and Data Protection Act 2018 if there is a subject access request the party receiving

Found: The SDA measures its maturity against the UK Data Protection Act 2018 annually, an activity governed

Found: consistent with the requirements of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act

Found: , including but not limited to Charities Act 2011, Equality Act 2010, Bribery Act 2010 and Data Protection Act

Found: accountable to the public, it is important we respond to formal requests for information (Data Protection Act

Found: In this clause, "data protection legislation" has the same meaning as in the Data Protection Act 2018

Found: complain-about-hmrc How we use your information For more information, go to www.gov.uk/government/collections/data-protection-act

Found: complain-about-hmrc How we use your information For more information, go to www.gov.uk/government/collections/data-protection-act

Found: In this clause, "data protection legislation" has the same meaning as in the Data Protection Act 2018

Found: We particularly draw to your attention the Bribery Act 2010, the Data Protection Act 2018, the Fraud

Found: and that guidelines for security of patient data are followed (NHS Digital Cyber security & Data Protection Act

Found: confidentiality under an agreement; and (f) ‘personal data’ has the same meaning given to it in the Data Protection Act

Found: the data in the IDSR, you must recognise the privacy of that data and always comply with the Data Protection Act

Found: residents (2011 Bristol Core Strategy), let alone any references to the core principles of the Data Protection Act

Found: individual recorded as a consequence of this framework will be processed in accordance with the Data Protection Act

Found: 7The Advisory Committee handles personal information provided to it in accordance with the Data Protection Act

Found: adheres to the Market Research Society Code of Conduct and the General Data Protection Regulation/Data Protection Act

Found: “DPA 2018” the Data Protection Act 2018.

Found: “DPA 2018” the Data Protection Act 2018.

Found: “DPA 2018” the Data Protection Act 2018.

Found: GDPR, and any applicable national implementing Laws as amended from time to time; (ii) the Data Protection Act

Found: “DPA 2018” the Data Protection Act 2018.

Found: “DPA 2018” the Data Protection Act 2018.

Found: “DPA 2018” the Data Protection Act 2018.

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Found: The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 protect individuals

Found: This legislation is the General Data Protection Regulation 2016 and the Data Protection Act 2018.

Found: (2) For the purposes of section 8(c) of the Data Protection Act 2018 (lawfulness of processing: public

Found: The register is fully compliant with GDPR/Data Protection Act 2018 Data specification A data dictionary

Found: The register is fully compliant with GDPR/Data Protection Act 2018 Data specification A data dictionary

Found: The register is fully compliant with GDPR/Data Protection Act 2018 Data specification A data dictionary

Found: The Data Protection Act 201823.—(1) The Data Protection Act 2018(28) is amended as follows. (2) In each

Found: Orders) (England) Regulations 2001(27), as a relevant authority; (e)for the purposes of the Data Protection Act

Found: DLRM Decommissioning and Legacy Risks Mitigation DMD Disclosure Management Document DPA 2018 Data Protection Act

Found: thorniest operational issue of [their] inspection’.392 Due to the CPS’s interpretation of the Data Protection Act

Found: is received by either party under the Freedom of Information Act 2000, or the Data Protection Act

Found: is received by either party under the Freedom of Information Act 2000, or the Data Protection Act

Found: process your personal data in accordance DVSA Policy team consultations@dvsa.gov.ukwith the Data Protection Act

Found: The department will process your personal data in accordance with the Data Protection Act 2018 (DPA)

Found: information is received by either party under the Freedom of Information Act 2000, or the Data Protection Act

Found: to information regimes (these are primarily the Freedom of Information Act 2000 (FOIA), the Data Protection Act

Found: generally be mindful of statutory obligations under the UK General Data Protection Regulation and Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: individuals, and disclosing this would contravene the data protection principles on Schedule 1 of the Data Protection Act

Found: individuals with regard to the processing of Personal Data to which a Party is subject including the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principes in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: Please note that these rights are not absolute, and may be subject to exemptions under the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: Panel members must ensure that they are aware of their obligations under the Data Protection Act 1998

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: party and disclosing it would contravene the data protection principles in Schedule 1 to the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: contravene data protection principles set out in the UK General Data Protection Regulation and the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and section 34(1) of the Data Protection Act

Found: are the data subject, and so it is subject to the General Data Protection Regulation and the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: organisation a public authority or body as set out in Part 2, Chapter 2, Section 7 of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act

Found: out in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: protection principles in the UK General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles inArticle 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: individuals with regard to the processing of Personal Data to which a Party is subject including the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: the data protection principles in Article 5(1) of the UK GDPR and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: the data subject, and so it is subject to the General Data Protection Regulation and the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act

Found: principles in Articl e 5(1) of the General Data Protection Regulation and in Section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: that more support could be required regarding data sharing, for example in relation to the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: Information (Scotland) Act 2002 (FOISA), the UK General Data Protection Regulation and the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: out in Article 5(1) of the UK General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: regulate the relationship between FOISA, the UK General Data Protection Regulation and the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: contravene the data-protection principles in Article 5(1) of the UK GDPR and section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: protection principles outlined in the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act

Found: individuals with regard to the processing of Personal Data to which a Party is subject including the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the UK General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: protection principles in Article 5(1)of the General Data Protection Regulation and in S.34(1) of the Data Protection Act

Found: out in Article 5(1) of the UK General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act

Found: (4) In this section, “the data protection legislation” has the same meaning as in the Data Protection Act

Found: (4) In this section, “the data protection legislation” has the same meaning as in the Data Protection Act

Found: (5) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements

Found: (5) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements

Found: (4) In this section, “the data protection legislation” has the same meaning as in the Data Protection Act

Found: The amendment replaces subsection (8) to refer to new section 183A of the Data Protection Act 2018 (

Found: purpose for which it is disclosed, and (b) handled and stored in accordance with— (i) the Data Protection Act

Found: Section 61, page 49, leave out lines 24 to 27 and insert— ‘(8) But see also section 183A of the Data Protection Act

Found: purpose for which it is disclosed, and (b) handled and stored in accordance with— (i) the Data Protection Act

Found: Irranca-Davies 16 Section 24, page 12, after line 21, insert— ‘( ) But see also section 183A of the Data Protection Act

Found: purpose for which it is disclosed, and (b) handled and stored in accordance with— (i) the Data Protection Act

Found: protection of prohibitions and restrictions etc on processing: relevant enactments) of the Data Protection Act

Found: Irranca-Davies 16 Section 24, page 12, after line 21, insert— ‘( ) But see also section 183A of the Data Protection Act

Found: Irranca-Davies 16 Section 24, page 12, after line 21, insert— ‘( ) But see also section 183A of the Data Protection Act

Found: However, the provisions under section 39 need to be read alongside section 183A of the Data Protection Act

Found: Housing Registers as they are no longer required as a consequence of section 183A of the Data Protection Act

Found: longer needed as a result of the general data protection override in section 183A of the Data Protection Act

Found: no longer necessary because of the general data protection override in section 183A of the Data Protection Act

Found: (5) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements

Found: Housing Registers as they are no longer required as a consequence of section 183A of the Data Protection Act

Found: Housing Registers as they are no longer required as a consequence of section 183A of the Data Protection Act

Found: Irranca-Davies 16 Section 24, page 12, after line 21, insert— ‘( ) But see also section 183A of the Data Protection Act

Found: Irranca-Davies 16 Section 24, page 12, after line 21, insert— ‘( ) But see also section 183A of the Data Protection Act

Found: protection of prohibitions and restrictions etc on processing: relevant enactments) of the Data Protection Act

Found: However, the provisions under section 39 need to be read alongside section 183A of the Data Protection Act

Found: However, the provisions under section 39 need to be read alongside section 183A of the Data Protection Act

Found: Irranca-Davies 16 Section 24, page 12, after line 21, insert— ‘( ) But see also section 183A of the Data Protection Act

Found: purpose for which it is disclosed, and (b) handled and stored in accordance with— (i) the Data Protection Act

Found: purpose for which it is disclosed, and (b) handled and stored in accordance with— (i) the Data Protection Act

Found: Section 61, page 49, leave out lines 24 to 27 and insert— ‘(8) But see also section 183A of the Data Protection Act

Found: (2) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements

Found: (2) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements

Found: The amendment replaces subsection (8) to refer to new section 183A of the Data Protection Act 2018 (

Found: (2) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements

Found: (2) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements

Found: (2) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements

Found: (4) In this section, “the data protection legislation” has the same meaning as in the Data Protection Act

Found: letter adds that the provisions under section 39 need to be read alongside section 183A of the Data Protection Act

Found: Education Act 2002 3 • The Academies Act 2010 • School Standards and Framework Act 1998 • Data Protection Act

Found: (5) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements

Found: (5) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements

Found: (4) In this section, “the data protection legislation” has the same meaning as in the Data Protection Act

Found: Information Commissioner's Office (ICO) is the independent regulatory office dealing with the Data Protection Act

Found: (5) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements

Found: (5) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements

Found: (4) In this section, “the data protection legislation” has the same meaning as in the Data Protection Act

Found: (5) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements

Found: (5) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements

Found: personal data underlying these statistics is processed in accordance with the requirements of the Data Protection Act

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Found: with such services, in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Found: Commissioner's Data Sharing Code of Practice of May 2011 1.1.5 Data Protection Legislation : (i) the Data Protection Act

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Found: Freedom of Information Act 2000, the 28 Environmental Information Regulations 2004 and the Data Protection Act

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Found: in accordance with the obligations and duties under the Freedom of Information Act 2000, the Data Protection Act

Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004 or the Data Protection Act

Found: The Data Protection Act 2018, Freedom of Information Act 2000 and the Environmental Information Regulations

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Found: used by the Welsh Government in accordance with its obligations and duties under the: • The Data Protection Act

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Found: supplied by you in this form, is in accordance with the terms of our registration under the Data Protection Act

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Found: personal data underlying these statistics is processed in accordance with the requirements of the Data Protection Act