Data Protection Act 2018

Alert Sample

View the Parallel Parliament page for the Data Protection Act 2018

Information since 10 Oct 2025, 10:02 p.m.

Data Protection Act 2018 mentioned

Parliamentary Debates
Short-term Let Accommodation (Data Sharing Requirements) 6 speeches (1,788 words) 1st reading Wednesday 11th February 2026 - Commons Chamber Mentions: 1: Rachel Blake (LAB - Cities of London and Westminster) relating to the short-term letting of accommodation with regulatory authorities; to amend the Data Protection Act - Link to Speech
Crime and Policing Bill 187 speeches (42,503 words) Committee stage Thursday 5th February 2026 - Lords Chamber Home Office Mentions: 1: Lord Katz (Lab - Life peer) recognised globally for having one of the most robust data protection regimes, anchored in the Data Protection Act - Link to Speech
Cyber Security and Resilience (Network and Information Systems) Bill (Second sitting) 125 speeches (27,382 words) Committee stage: 2nd sitting Tuesday 3rd February 2026 - Public Bill Committees Department for Science, Innovation & Technology Mentions: 1: Chris Vince (LAB - Harlow) now, in the UK, they do not need to rely only on access to critical infrastructure; under the Data Protection Act - Link to Speech 2: Tim Roca (Lab - Macclesfield) worry that there might be more legitimate access to data than there is right now under the Data Protection Act - Link to Speech
Children’s Wellbeing and Schools Bill 80 speeches (21,393 words) Tuesday 3rd February 2026 - Lords Chamber Department for Work and Pensions Mentions: 1: None because of the new general data protection override in section 183A and effect of 183B of the Data Protection Act - Link to Speech
Crime and Policing Bill 85 speeches (20,334 words) Committee stage: Part 2 Monday 2nd February 2026 - Lords Chamber Northern Ireland Office Mentions: 1: None is no longer needed because of the general data protection override in section 183A of the Data Protection Act - Link to Speech

Select Committee Documents
Thursday 26th February 2026 Written Evidence - Oliver Sanders KC NITB0017 - Legislative Scrutiny: Northern Ireland Troubles Bill Legislative Scrutiny: Northern Ireland Troubles Bill - Human Rights (Joint Committee) Found: §5 (“sensitive information”); and the Freedom of Information Act 2000 (“FOIA”), s.24 and Data Protection Act
Thursday 26th February 2026 Correspondence - Correspondence from Sarah Jones, Minister of State for Policing and Crime, relating to the use of facial recognition technology by police, 09 February 2026 Human Rights (Joint Committee) Found: Police use of the technology is currently governed by a legal framework which includes the Data Protection Act
Thursday 12th February 2026 Special Report - 3rd Special Report - The Government’s new approach to addressing the legacy of the past in Northern Ireland: Government Response Northern Ireland Affairs Committee Found: understanding directly with the Inquiry, issuing regulations (under section 2B of the Irish Data Protection Act
Wednesday 11th February 2026 Written Evidence - Information Commissioner's Office RAG0114 - Regulators and growth Regulators and growth - Industry and Regulators Committee Found: includes responsibilities under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act
Wednesday 11th February 2026 Estimate memoranda - Northern Ireland Office Supplementary Estimates Memorandum 2025-26 - Annex B Northern Ireland Affairs Committee Found: recovered or received for work done for other departments, freedom of information receipts, Data Protection Act
Wednesday 11th February 2026 Correspondence - Correspondence from Minister of State for Digital Government and Data, re: Information Commissioner name amendment, 2 February 2026 Science, Innovation and Technology Committee Found: The SI additionally makes three other minor and technical consequential amendments to the Data Protection Act
Wednesday 11th February 2026 Written Evidence - Handley Gill Limited RAI0070 - Human Rights and the Regulation of AI Human Rights and the Regulation of AI - Human Rights (Joint Committee) Found: legislation, for example:  restrictions on the territorial and material scope of the UK GDPR and Data Protection Act
Wednesday 11th February 2026 Written Evidence - Marcomms By Leena RAI0063 - Human Rights and the Regulation of AI Human Rights and the Regulation of AI - Human Rights (Joint Committee) Found: The Data Protection Act 2018 and UK GDPR regulate privacy and provide some rights related to automated
Wednesday 11th February 2026 Written Evidence - Middlesex University London RAI0062 - Human Rights and the Regulation of AI Human Rights and the Regulation of AI - Human Rights (Joint Committee) Found: Kingdom’s legal framework, namely, the Human Rights Act 1998, the Equality Act 2010, and the Data Protection Act
Wednesday 11th February 2026 Written Evidence - Information Law & Policy Centre, Institute of Advanced Legal Studies, University of London RAI0060 - Human Rights and the Regulation of AI Human Rights and the Regulation of AI - Human Rights (Joint Committee) Found: in practice, i.e. how it meets the relevant principles and safeguards as required under the Data Protection Act
Wednesday 11th February 2026 Written Evidence - European University Institute RAI0059 - Human Rights and the Regulation of AI Human Rights and the Regulation of AI - Human Rights (Joint Committee) Found: UK GDPR and the Data Protection Act 2018 remain the baseline, now updated by the Data (Use and Access
Wednesday 11th February 2026 Written Evidence - Dr Ayca Atabey, Dr Kim Sylwander, and Professor Sonia Livingstone RAI0058 - Human Rights and the Regulation of AI Human Rights and the Regulation of AI - Human Rights (Joint Committee) Found: Equality Act 2010, Online Safety Act 2023, UK General Data Protection Regulation (UK GDPR), Data Protection Act
Wednesday 11th February 2026 Written Evidence - University of Essex RAI0056 - Human Rights and the Regulation of AI Human Rights and the Regulation of AI - Human Rights (Joint Committee) Found: Act 2010, the Human Rights Act 1998, and the UK General Data Protection Regulation and the Data Protection Act
Wednesday 11th February 2026 Written Evidence - University of Aberdeen, University of Aberdeen, University of Aberdeen, University of Aberdeen, University of Aberdeen, University of Aberdeen, University of Aberdeen, University of Aberdeen, University of Aberdeen, and University of Aberdeen RAI0048 - Human Rights and the Regulation of AI Human Rights and the Regulation of AI - Human Rights (Joint Committee) Found: the Human Rights Act 1998 (HRA), the Scotland Act 1998 (SA), the Equality Act 2010 (EA), the Data Protection Act
Wednesday 11th February 2026 Written Evidence - Essex Law School, Essex Law School, Essex Law School, and Essex Law School RAI0047 - Human Rights and the Regulation of AI Human Rights and the Regulation of AI - Human Rights (Joint Committee) Found: such as privacy and data usage protected under the Human Rights Act 1998 (HRA)15 and the UK Data Protection Act
Wednesday 11th February 2026 Written Evidence - Privacy International RAI0044 - Human Rights and the Regulation of AI Human Rights and the Regulation of AI - Human Rights (Joint Committee) Found: Ireland by virtue of section 3 of the European Union (Withdrawal) Act 2018 (UK GDPR) and the Data Protection Act
Tuesday 10th February 2026 Estimate memoranda - Ministry of Justice Supplementary Estimate Memorandum 2025-26 Justice Committee Found: Tribunals: The department is currently defending a number of Employment Tribunal claims. 2.1 1.5 Data Protection Act
Tuesday 10th February 2026 Written Evidence - Music Publishers Association RAI0039 - Human Rights and the Regulation of AI Human Rights and the Regulation of AI - Human Rights (Joint Committee) Found: 1998 (Article 8: Right to Privacy) AI developers must observe data protection rules under the Data Protection Act
Tuesday 10th February 2026 Written Evidence - Global Network Initiative RAI0034 - Human Rights and the Regulation of AI Human Rights and the Regulation of AI - Human Rights (Joint Committee) Found: regulatory tools relevant to AI and its possible human rights impacts, including: ● UK GDPR and the Data Protection Act
Tuesday 10th February 2026 Written Evidence - University of Sheffield RAI0033 - Human Rights and the Regulation of AI Human Rights and the Regulation of AI - Human Rights (Joint Committee) Found: This finding is also applicable to specialised legal frameworks, such as the Data Protection Act, which
Tuesday 10th February 2026 Written Evidence - School of Law, University of Leeds RAI0032 - Human Rights and the Regulation of AI Human Rights and the Regulation of AI - Human Rights (Joint Committee) Found: The UK GDPR and Data Protection Act 2018 regulate data processing across the AI lifecycle, requiring
Wednesday 4th February 2026 Oral Evidence - Creative Industries Independent Standards Authority, and Can't Buy My Silence Misogyny in music: follow up - Women and Equalities Committee Found: limited exemptions around data protection with reference to schedule 2, paragraph 11 of the Data Protection Act
Tuesday 3rd February 2026 Written Evidence - UK Finance FIS0094 - Financial Inclusion Strategy Treasury Committee Found: additional compliance requirements associated with special category data under the General Data Protection Act
Monday 2nd February 2026 Scrutiny evidence - Promoter's Materials in support of evidence commencing on 4 February 2026 Malvern Hills Bill [HL] Committee Found: not allowed to inspect, such as personal and personnel information, in accordance with the Data Protection Act
Monday 2nd February 2026 Scrutiny evidence - Part 1 of Promoter's Materials in support of evidence commencing on 4 February 2026 Malvern Hills Bill [HL] Committee Found: not allowed to inspect, such as personal and personnel information, in accordance with the Data Protection Act

Written Answers
HM Courts and Tribunals Service: Data Protection Asked by: Kieran Mullan (Conservative - Bexhill and Battle) Friday 27th February 2026 Question to the Ministry of Justice: To ask the Secretary of State for Justice, what data protection safeguards are in place in relation to court lists containing home addresses and dates of birth of individuals, being provided to individuals and organisations by HM Courts & Tribunals Service, either centrally or via individual courts. Answered by Sarah Sackman - Minister of State (Ministry of Justice) Home addresses and dates of birth of individuals are not included in Crown Court, County Court, Family Court, High Court, lists of hearings, nor in lists of hearings in the Tribunals. Standard Lists produced by the Magistrates Court do contain the home addresses and dates of birth of individuals due to appear in court and these lists are only available to approved accredited members of the media, criminal justice partners and other government departments with legitimate reasons for requiring such information. Standard lists do contain Special Category Data as defined by Data Protection Act 2018. This information is intended to assist the accurate reporting of court proceedings and should be handled appropriately by legal professionals and members of the media. HMCTS will immediately cease the sharing of this data, if there is concern about how it will be used. Such data is held subject to licencing and can only be shared in agreement with licencing agreements; abiding by those licencing agreements is part of data protection.
Ministry of Justice: Personnel Management Asked by: Joshua Reynolds (Liberal Democrat - Maidenhead) Thursday 26th February 2026 Question to the Ministry of Justice: To ask the Secretary of State for Justice, how many directors with responsibility for human resources are employed across their department and its executive agencies; and how many of those directors hold professional HR qualifications from the Chartered Institute of Personnel and Development or equivalent professional bodies. Answered by Jake Richards - Assistant Whip As the number of individuals is five or fewer, the Ministry of Justice is unable to disclose the figure. This is to protect against the risk that individuals could be identified, in line with our obligations under the UK GDPR and Data Protection Act 2018.
Electronic Government: Artificial Intelligence Asked by: Lord Taylor of Warwick (Non-affiliated - Life peer) Wednesday 11th February 2026 Question to the Department for Science, Innovation & Technology: To ask His Majesty's Government what steps they are taking to ensure that partnerships with AI companies to develop pilot tools for Gov.uk services deliver benefits for users while protecting data privacy. Answered by Baroness Lloyd of Effra - Baroness in Waiting (HM Household) (Whip) His Majesty’s Government is implementing artificial intelligence partnerships through a phased, test-and-learn approach that embeds data protection from the outset while testing transformational capabilities before committing significant public funds. Working with the Commercial Innovation Hub, the Government has developed procurement approaches tailored to AI’s unique characteristics, including the National AI Tender for GOV.UK and the Planning Transformation Accelerator for AI-assisted decision-making, ensuring procurement methods are appropriate for evaluating frontier technologies. All procurement frameworks require GDPR compliance as a mandatory qualification criterion, with partnerships operating under the UK Data Protection Act 2018 and comprehensive privacy-by-design principles. Pilots are deployed in controlled environments with oversight from departmental information security teams and data protection officers, with government retaining intellectual property ownership to prevent vendor lock-in. Decisions to scale are contingent on pilots demonstrating measurable user benefits and full compliance with data protection standards through defined evaluation criteria and contractual break clauses, ensuring AI capabilities can be advanced while maintaining robust privacy safeguards.
Prisoners: Transgender People Asked by: Kieran Mullan (Conservative - Bexhill and Battle) Wednesday 11th February 2026 Question to the Ministry of Justice: To ask the Secretary of State for Justice, how many prisoners who are biologically (a) male and (b) female are housed in prisons designated for the opposite sex. Answered by Jake Richards - Assistant Whip As of 1 February 2026, there were seven prisoners on E Wing, the separate unit for transgender women at HMP Downview. The information requested cannot be provided for the general female or male prison estates without breaching our legal obligations under data protection legislation. Where a request is made for statistical information and the total figure amounts to five or fewer, we must consider whether this would be likely to lead to the identification of individuals, and whether disclosure of this information would be in breach of our statutory obligations under the General Data Protection Regulation and the Data Protection Act 2018. Transgender women with birth genitalia and/or any history of violent or sexual offending cannot be placed in the general women’s estate except in exceptional circumstances, where an exemption has been granted by Ministers. No transgender women have received such an exemption under this Government.
Internet: Data Protection Asked by: Lord Taylor of Warwick (Non-affiliated - Life peer) Monday 9th February 2026 Question to the Department for Science, Innovation & Technology: To ask Her Majesty's Government what steps they are taking to ensure that online platforms operating in the UK comply with data access and privacy requirements, in light of recent regulatory scrutiny of messaging services. Answered by Baroness Lloyd of Effra - Baroness in Waiting (HM Household) (Whip) All organisations in the UK that provide online and messaging services to their customers have to comply with the requirements of UK’s data protection and privacy framework, as set out in the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA) and the Privacy and Electronic Communications Regulations 2003 (PECR). The UK GDPR and the DPA also apply to online platforms based outside of the UK that are processing UK residents’ data for the purposes of providing goods and services or monitoring behaviour. As such, the handling of people’s data by online platforms should be lawful, fair, transparent and secure. The data protection legislation gives people the right to be informed about the collection and use of their personal data, as well as rights to request access to their data, object to its processing or seek its erasure. The Information Commissioner, the UK’s independent regulator for data protection, publishes a range of guidance to help organisations comply with the legislation and has the power to investigate and impose penalties for non-compliance.
Multi-academy Trusts: Corporate Governance Asked by: Sarah Edwards (Labour - Tamworth) Friday 6th February 2026 Question to the Department for Education: To ask the Secretary of State for Education, whether Multi-Academy Trust boards are permitted to redact minutes of board meetings that relate to the use of public funds; what guidance her Department issues on transparency and redaction of trust governance documents; and what assessment she has made of the adequacy of current practices. Answered by Georgia Gould - Minister of State (Education) The Academy Trust Governance Guide outlines that the trust board is responsible for being open and transparent about its decisions and actions. This guide is accessible at: https://www.gov.uk/government/publications/academy-trust-governance-guide. The Academy Trust Handbook and trust’s articles of association state that trusts must make available on request for inspection the agenda for board, local committees/governing bodies and committee meetings, approved minutes of each meeting, and any report, document or other paper considered at each meeting. Trusts may exclude from its records material which, by reason of its nature, the trustees are satisfied should remain confidential, such as names of employees or pupils. The trust must comply with the Data Protection Act 2018 and UK General Data Protection Regulations. To monitor financial oversight, trusts must submit an annual report and accounts in accordance with the Charity Commission’s Statement of Recommended Practice and the departments Accounts Direction to the department. The requirements set out in the Academy Trust Handbook are reviewed annually.
Press: Misconduct Asked by: Kevin Hollinrake (Conservative - Thirsk and Malton) Wednesday 4th February 2026 Question to the Department for Digital, Culture, Media & Sport: To ask the Secretary of State for Culture, Media and Sport, pursuant to the Answer of 25 April 2025 to Question 45800 on Press: Misconduct, what steps her Department is taking to help ensure that arbitration schemes operated by press regulators are available to provide timely and effective redress before the Government directs members of the public to them in guidance. Answered by Ian Murray - Minister of State (Department for Science, Innovation and Technology) The UK has a self-regulatory system for the press, which is independent from Government. This is vital to ensure the public has access to accurate and trustworthy information from a range of different sources. The Government therefore does not intervene in or evaluate the work of independent press regulators. However, under Section 179 of the Data Protection Act every three years the Secretary of State must lay before Parliament a report on the use and effectiveness of alternative dispute resolution procedures, such as arbitration, in cases involving a failure or alleged failure by relevant media organisations to comply with data protection legislation. The most recent report was presented to Parliament in May 2024 and was carried independently of DCMS by David Rossington, as the Independent Reviewer. The report is published on the Gov.uk website: https://assets.publishing.service.gov.uk/media/67d2ded5fb8db2176d5e97d0/Formatted_240312_SECOND_REPORT_UNDER_SECTION_179_OF_THE_DATA_PROTECTION_ACT_v3__FINAL__accessible.pdf.

Written Answers

HM Courts and Tribunals Service: Data Protection
Asked by: Kieran Mullan (Conservative - Bexhill and Battle)
Friday 27th February 2026

Question to the Ministry of Justice:

To ask the Secretary of State for Justice, what data protection safeguards are in place in relation to court lists containing home addresses and dates of birth of individuals, being provided to individuals and organisations by HM Courts & Tribunals Service, either centrally or via individual courts.

Answered by Sarah Sackman - Minister of State (Ministry of Justice)

Home addresses and dates of birth of individuals are not included in Crown Court, County Court, Family Court, High Court, lists of hearings, nor in lists of hearings in the Tribunals.

Standard Lists produced by the Magistrates Court do contain the home addresses and dates of birth of individuals due to appear in court and these lists are only available to approved accredited members of the media, criminal justice partners and other government departments with legitimate reasons for requiring such information.

Standard lists do contain Special Category Data as defined by Data Protection Act 2018. This information is intended to assist the accurate reporting of court proceedings and should be handled appropriately by legal professionals and members of the media.

HMCTS will immediately cease the sharing of this data, if there is concern about how it will be used. Such data is held subject to licencing and can only be shared in agreement with licencing agreements; abiding by those licencing agreements is part of data protection.

Ministry of Justice: Personnel Management
Asked by: Joshua Reynolds (Liberal Democrat - Maidenhead)
Thursday 26th February 2026

Question to the Ministry of Justice:

To ask the Secretary of State for Justice, how many directors with responsibility for human resources are employed across their department and its executive agencies; and how many of those directors hold professional HR qualifications from the Chartered Institute of Personnel and Development or equivalent professional bodies.

Answered by Jake Richards - Assistant Whip

As the number of individuals is five or fewer, the Ministry of Justice is unable to disclose the figure. This is to protect against the risk that individuals could be identified, in line with our obligations under the UK GDPR and Data Protection Act 2018.

Electronic Government: Artificial Intelligence
Asked by: Lord Taylor of Warwick (Non-affiliated - Life peer)
Wednesday 11th February 2026

Question to the Department for Science, Innovation & Technology:

To ask His Majesty's Government what steps they are taking to ensure that partnerships with AI companies to develop pilot tools for Gov.uk services deliver benefits for users while protecting data privacy.

Answered by Baroness Lloyd of Effra - Baroness in Waiting (HM Household) (Whip)

His Majesty’s Government is implementing artificial intelligence partnerships through a phased, test-and-learn approach that embeds data protection from the outset while testing transformational capabilities before committing significant public funds.

Working with the Commercial Innovation Hub, the Government has developed procurement approaches tailored to AI’s unique characteristics, including the National AI Tender for GOV.UK and the Planning Transformation Accelerator for AI-assisted decision-making, ensuring procurement methods are appropriate for evaluating frontier technologies.

All procurement frameworks require GDPR compliance as a mandatory qualification criterion, with partnerships operating under the UK Data Protection Act 2018 and comprehensive privacy-by-design principles. Pilots are deployed in controlled environments with oversight from departmental information security teams and data protection officers, with government retaining intellectual property ownership to prevent vendor lock-in.

Decisions to scale are contingent on pilots demonstrating measurable user benefits and full compliance with data protection standards through defined evaluation criteria and contractual break clauses, ensuring AI capabilities can be advanced while maintaining robust privacy safeguards.

Prisoners: Transgender People
Asked by: Kieran Mullan (Conservative - Bexhill and Battle)
Wednesday 11th February 2026

Question to the Ministry of Justice:

To ask the Secretary of State for Justice, how many prisoners who are biologically (a) male and (b) female are housed in prisons designated for the opposite sex.

Answered by Jake Richards - Assistant Whip

As of 1 February 2026, there were seven prisoners on E Wing, the separate unit for transgender women at HMP Downview.

The information requested cannot be provided for the general female or male prison estates without breaching our legal obligations under data protection legislation. Where a request is made for statistical information and the total figure amounts to five or fewer, we must consider whether this would be likely to lead to the identification of individuals, and whether disclosure of this information would be in breach of our statutory obligations under the General Data Protection Regulation and the Data Protection Act 2018.

Transgender women with birth genitalia and/or any history of violent or sexual offending cannot be placed in the general women’s estate except in exceptional circumstances, where an exemption has been granted by Ministers. No transgender women have received such an exemption under this Government.

Internet: Data Protection
Asked by: Lord Taylor of Warwick (Non-affiliated - Life peer)
Monday 9th February 2026

Question to the Department for Science, Innovation & Technology:

To ask Her Majesty's Government what steps they are taking to ensure that online platforms operating in the UK comply with data access and privacy requirements, in light of recent regulatory scrutiny of messaging services.

Answered by Baroness Lloyd of Effra - Baroness in Waiting (HM Household) (Whip)

All organisations in the UK that provide online and messaging services to their customers have to comply with the requirements of UK’s data protection and privacy framework, as set out in the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA) and the Privacy and Electronic Communications Regulations 2003 (PECR). The UK GDPR and the DPA also apply to online platforms based outside of the UK that are processing UK residents’ data for the purposes of providing goods and services or monitoring behaviour.

As such, the handling of people’s data by online platforms should be lawful, fair, transparent and secure. The data protection legislation gives people the right to be informed about the collection and use of their personal data, as well as rights to request access to their data, object to its processing or seek its erasure.

The Information Commissioner, the UK’s independent regulator for data protection, publishes a range of guidance to help organisations comply with the legislation and has the power to investigate and impose penalties for non-compliance.

Multi-academy Trusts: Corporate Governance
Asked by: Sarah Edwards (Labour - Tamworth)
Friday 6th February 2026

Question to the Department for Education:

To ask the Secretary of State for Education, whether Multi-Academy Trust boards are permitted to redact minutes of board meetings that relate to the use of public funds; what guidance her Department issues on transparency and redaction of trust governance documents; and what assessment she has made of the adequacy of current practices.

Answered by Georgia Gould - Minister of State (Education)

The Academy Trust Governance Guide outlines that the trust board is responsible for being open and transparent about its decisions and actions. This guide is accessible at: https://www.gov.uk/government/publications/academy-trust-governance-guide.

The Academy Trust Handbook and trust’s articles of association state that trusts must make available on request for inspection the agenda for board, local committees/governing bodies and committee meetings, approved minutes of each meeting, and any report, document or other paper considered at each meeting.

Trusts may exclude from its records material which, by reason of its nature, the trustees are satisfied should remain confidential, such as names of employees or pupils. The trust must comply with the Data Protection Act 2018 and UK General Data Protection Regulations.

To monitor financial oversight, trusts must submit an annual report and accounts in accordance with the Charity Commission’s Statement of Recommended Practice and the departments Accounts Direction to the department.

The requirements set out in the Academy Trust Handbook are reviewed annually.

Press: Misconduct
Asked by: Kevin Hollinrake (Conservative - Thirsk and Malton)
Wednesday 4th February 2026

Question to the Department for Digital, Culture, Media & Sport:

To ask the Secretary of State for Culture, Media and Sport, pursuant to the Answer of 25 April 2025 to Question 45800 on Press: Misconduct, what steps her Department is taking to help ensure that arbitration schemes operated by press regulators are available to provide timely and effective redress before the Government directs members of the public to them in guidance.

Answered by Ian Murray - Minister of State (Department for Science, Innovation and Technology)

The UK has a self-regulatory system for the press, which is independent from Government. This is vital to ensure the public has access to accurate and trustworthy information from a range of different sources. The Government therefore does not intervene in or evaluate the work of independent press regulators.

However, under Section 179 of the Data Protection Act every three years the Secretary of State must lay before Parliament a report on the use and effectiveness of alternative dispute resolution procedures, such as arbitration, in cases involving a failure or alleged failure by relevant media organisations to comply with data protection legislation. The most recent report was presented to Parliament in May 2024 and was carried independently of DCMS by David Rossington, as the Independent Reviewer. The report is published on the Gov.uk website:

https://assets.publishing.service.gov.uk/media/67d2ded5fb8db2176d5e97d0/Formatted_240312_SECOND_REPORT_UNDER_SECTION_179_OF_THE_DATA_PROTECTION_ACT_v3__FINAL__accessible.pdf.

Secondary Legislation
Sussex and Brighton Combined County Authority Regulations 2026 These Regulations establish the Sussex and Brighton Combined County Authority (“the Combined County Authority”) and confer certain functions of local authorities and other public authorities on the Combined County Authority. Parliamentary Status - Text of Legislation - Draft affirmative Laid: Wednesday 11th February - In Force: Not stated Found: to the Police and Justice Act 2006 (c. 48) and amended by paragraph 45 of Schedule 19 to the Data Protection Act
Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 These Regulations make various amendments to legislation in consequence of sections 117, 118 and 119(1) of the Data (Use and Access) Act 2025 (c. 18) (“the 2025 Act”). Those sections establish the Information Commission as a body corporate, abolish the office of the Information Commissioner and transfer the functions of the Information Commissioner to the Information Commission. These Regulations also make minor amendments in consequence of sections 67 and 91 of the 2025 Act, and contain transitional provision (to maintain pension arrangements) in respect of the person who holds the office of the Information Commissioner and is first chair of the Information Commission pursuant to paragraph 2 of Schedule 14 to the 2025 Act. Parliamentary Status - Text of Legislation - Draft affirmative Laid: Monday 2nd February - In Force: Not stated Found: The Data Protection Act 201823.—(1) The Data Protection Act 2018(28) is amended as follows. (2) In each

Secondary Legislation

Sussex and Brighton Combined County Authority Regulations 2026
These Regulations establish the Sussex and Brighton Combined County Authority (“the Combined County Authority”) and confer certain functions of local authorities and other public authorities on the Combined County Authority.

Parliamentary Status - Text of Legislation - Draft affirmative
Laid: Wednesday 11th February - In Force: Not stated

Found: to the Police and Justice Act 2006 (c. 48) and amended by paragraph 45 of Schedule 19 to the Data Protection Act

Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026
These Regulations make various amendments to legislation in consequence of sections 117, 118 and 119(1) of the Data (Use and Access) Act 2025 (c. 18) (“the 2025 Act”). Those sections establish the Information Commission as a body corporate, abolish the office of the Information Commissioner and transfer the functions of the Information Commissioner to the Information Commission. These Regulations also make minor amendments in consequence of sections 67 and 91 of the 2025 Act, and contain transitional provision (to maintain pension arrangements) in respect of the person who holds the office of the Information Commissioner and is first chair of the Information Commission pursuant to paragraph 2 of Schedule 14 to the 2025 Act.

Parliamentary Status - Text of Legislation - Draft affirmative
Laid: Monday 2nd February - In Force: Not stated

Found: The Data Protection Act 201823.—(1) The Data Protection Act 2018(28) is amended as follows. (2) In each

Bills
Short-term Let Accommodation (Data Sharing Requirements) Bill 2024-26 Presented by Rachel Blake (Labour (Co-op) - Cities of London and Westminster) Private Members' Bill - Ten Minute Bill A Bill to require certain persons or organisations to share specified data relating to the short-term letting of accommodation with regulatory authorities; to amend the Data Protection Act 2018 in connection with that requirement; and for connected purposes. Commons - 20%

Bills

Short-term Let Accommodation (Data Sharing Requirements) Bill 2024-26
Presented by Rachel Blake (Labour (Co-op) - Cities of London and Westminster)
Private Members' Bill - Ten Minute Bill

A Bill to require certain persons or organisations to share specified data relating to the short-term letting of accommodation with regulatory authorities; to amend the Data Protection Act 2018 in connection with that requirement; and for connected purposes.

Commons - 20%

Department Publications - Consultations
Thursday 26th February 2026 Department for Business and Trade Source Page: Make Work Pay: threshold for triggering collective redundancy obligations Document: (PDF) Found: may be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act
Thursday 26th February 2026 Department for Business and Trade Source Page: Make Work Pay: protection from detriments for taking industrial action Document: (PDF) Found: may be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act
Wednesday 25th February 2026 Ministry of Housing, Communities and Local Government Source Page: General Safety Requirement for Construction Products Document: (PDF) Found: disclosed in accordance with United Kingdom legislation (the Freedom of Information Act 2000, the Data Protection Act
Wednesday 25th February 2026 Ministry of Housing, Communities and Local Government Source Page: Construction Products Reform White Paper Document: (PDF) Found: disclosed in accordance with United Kingdom legislation (the Freedom of Information Act 2000, the Data Protection Act
Monday 23rd February 2026 Department for Education Source Page: SEND reform: putting children and young people first Document: (PDF) Found: may be subject to publication or disclosure under the Freedom of Information Act 2000, the Data Protection Act
Monday 23rd February 2026 Department for Education Source Page: SEND reform: putting children and young people first Document: (PDF) Found: may be subject to publication or disclosure under the Freedom of Information Act 2000, the Data Protection Act
Friday 6th February 2026 Department for Business and Trade Source Page: Make Work Pay: modernising the Agency Work Regulatory Framework Document: (PDF) Found: may be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act
Thursday 5th February 2026 Department for Business and Trade Source Page: Make Work Pay: strengthening the law on tipping Document: (PDF) Found: may be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act
Thursday 5th February 2026 Department for Business and Trade Source Page: Make Work Pay: improving access to flexible working Document: (PDF) Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act
Thursday 5th February 2026 Department for Business and Trade Source Page: Make Work Pay: improving access to flexible working Document: (PDF) Found: may be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act
Thursday 5th February 2026 Ministry of Justice Source Page: A new Victims’ Code Document: (PDF) Found: service providers must do so effectively and in accordance with their obligations under the Data Protection Act
Thursday 5th February 2026 Ministry of Justice Source Page: A new Victims’ Code Document: (PDF) Found: These are primarily the Freedom of Information Act 2000 (FOIA), the Data Protection Act 2018 (DPA),
Thursday 5th February 2026 Department for Energy Security & Net Zero Source Page: Carbon capture, usage and storage (CCUS): non-pipeline transport Document: (PDF) Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act
Wednesday 4th February 2026 Department for Business and Trade Source Page: Make Work Pay: fire and rehire – changes to expenses, benefits, and shift patterns Document: (PDF) Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act
Wednesday 4th February 2026 Department for Business and Trade Source Page: Make Work Pay: recognition code of practice and e-balloting unfair practices Document: (PDF) Found: may be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act
Thursday 29th January 2026 Department for Energy Security & Net Zero Source Page: Offshore Energy Strategic Environmental Assessment 5 Scoping Document: (PDF) Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Department Publications - Transparency
Thursday 26th February 2026 Ministry of Defence Source Page: Service Inquiry into the support provided to Army victims of sexual assault Document: (PDF) Found: to current Service policy on disclosure and adhering to current legislation, including the Data Protection Act
Thursday 12th February 2026 Ministry of Defence Source Page: Service Inquiry into the death of a service person found deceased on 28 September 2022 Document: (PDF) Found: to current Service policy on disclosure and adhering to current legislation, including the Data Protection Act
Tuesday 10th February 2026 HM Treasury Source Page: Supplementary Estimates 2025-26 Document: (PDF) Found: recovered or received for work done for other departments, freedom of information receipts, Data Protection Act
Tuesday 10th February 2026 HM Treasury Source Page: Supplementary Estimates 2025-26 Document: (PDF) Found: recovered or received for work done for other departments, freedom of information receipts, Data Protection Act

Department Publications - News and Communications
Wednesday 25th February 2026 Department for Environment, Food and Rural Affairs Source Page: Councils urged to crush more fly-tippers’ vehicles Document: government guidance (PDF) Found: Local authorities will need to complete a Data Protection Act (DPA) Enquiry Form which can be requested

Department Publications - Guidance
Tuesday 24th February 2026 Ministry of Defence Source Page: Competition: Innovation Support to Operations Phase 3 (Cycle 7) Document: (PDF) Found: In this clause, "data protection legislation" has the same meaning as in the Data Protection Act 2018
Monday 23rd February 2026 Department for Education Source Page: School census 2026 to 2027: technical information Document: (PDF) Found: Data protection and data sharing The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act
Thursday 12th February 2026 Department for Education Source Page: Significant changes to an academy: tier 1 application form Document: Significant changes to an academy: tier 1 application form (webpage) Found: with the Freedom of Information Act 2000, Environmental Information Regulations 2004 or the Data Protection Act
Wednesday 11th February 2026 Ministry of Housing, Communities and Local Government Source Page: Social Housing Stock Management Research - privacy notice Document: Social Housing Stock Management Research - privacy notice (webpage) Found: details will not be used for any other purpose and will be handled in line with UK GDPR and the Data Protection Act
Wednesday 11th February 2026 Department for Education Source Page: Design standards: employer's requirements Document: (webpage) Found: and/or obligations of either Party in connection with this Appointment and: the GDPR; the Data Protection Act
Tuesday 10th February 2026 Department for Education Source Page: Post-16 and construction skills capacity funding: 2026 to 2030 Document: (PDF) Found: Environmental Information Regulations 2004, the General Data Protection Regulation (GDPR) 2018 and the Data Protection Act
Thursday 5th February 2026 Foreign, Commonwealth & Development Office Source Page: AI for climate-smart agriculture and food security in Kenya Document: Volume 2: Terms of reference (webpage) Found: understanding.Data protection:All personal data must be collected and processed in line with Kenya’s Data Protection Act
Thursday 5th February 2026 Foreign, Commonwealth & Development Office Source Page: AI for climate-smart agriculture and food security in Kenya Document: Volume 5.2: Contract section 2, standard terms and conditions (webpage) Found: “DPA 2018” means the Data Protection Act 2018“Default” means any breach of the obligations of the Supplier
Tuesday 3rd February 2026 Ministry of Defence Source Page: Countering Illegal Use of UAS Around Prisons and Sensitive Sites Document: (PDF) Found: In this clause, "data protection legislation" has the same meaning as in the Data Protection Act 2018
Monday 2nd February 2026 Ministry of Housing, Communities and Local Government Source Page: Evaluation of the Renters’ Rights Act: Privacy notice Document: Evaluation of the Renters’ Rights Act: Privacy notice (webpage) Found: transparently, and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act
Thursday 29th January 2026 Department for Environment, Food and Rural Affairs Source Page: Roadstone coating: process guidance note 3/15 Document: (PDF) Found: Freedom of Information Act 2000 and the Environmental Information Regulations 2004 (if the Data Protection Act

Department Publications - Policy and Engagement
Monday 23rd February 2026 Department for Energy Security & Net Zero Source Page: Future of the UK downstream oil sector Document: (PDF) Found: may be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act
Friday 20th February 2026 Department for Energy Security & Net Zero Source Page: Charging regime for offshore oil and gas activities Document: (PDF) Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Department Publications - Statistics
Thursday 12th February 2026 Ministry of Defence Source Page: Career Transition Partnership ex-service personnel employment outcomes: financial year 2024/25 Document: (PDF) Found: information knowledge awareness, that ensure an understanding of their responsibilities under the Data Protection Act
Wednesday 11th February 2026 Department for Science, Innovation & Technology Source Page: Privacy notice for Cyber Resilience Act and AI Act survey Document: (PDF) Found: as set out in Articles 13 and 14 of UK General Data Protection Regulation (UK GDPR) and the Data Protection Act
Thursday 5th February 2026 Home Office Source Page: Report 11: offensive weapons homicide review, Harrow Document: (PDF) Found: June 2024 MPSNW Review Officer, Specialist Crime Review Group (SCRG) Short reports Data Protection Act
Wednesday 4th February 2026 Ministry of Justice Source Page: Independent Review of the Criminal Courts: Part 2 Document: (PDF) Found: DLRM Decommissioning and Legacy Risks Mitigation DMD Disclosure Management Document DPA 2018 Data Protection Act
Wednesday 4th February 2026 Ministry of Justice Source Page: Independent Review of the Criminal Courts: Part 2 Document: (PDF) Found: thorniest operational issue of [their] inspection’.392 Due to the CPS’s interpretation of the Data Protection Act
Thursday 29th January 2026 Ministry of Justice Source Page: Proven reoffending statistics: January to March 2024 Document: (PDF) Found: (Trustworthiness, Manage data responsibly)” To comply with this and with the Data Protection Act of 1998
Thursday 29th January 2026 Ministry of Justice Source Page: Criminal Justice Statistics Quarterly: September 2025 Document: (ODS) Found: misleading statements 09520 09520 - Obstructing the inspection of overseas information systems (Data Protection Act

Non-Departmental Publications - Policy paper
Feb. 26 2026 Biometrics and Surveillance Camera Commissioner Source Page: International transfer of personal information: consultation response Document: International transfer of personal information: consultation response (webpage) Policy paper Found: Chapter 5 of part 3 of the Data Protection Act 2018 places limits on the circumstances when a competent

Non-Departmental Publications - Statistics
Feb. 26 2026 HM Revenue & Customs Source Page: Customs Administrative Burden Wave 2 Document: (webpage) Statistics Found: be awarded this in August 2008.The UK General Data Protection Regulation (GDPR) and the UK Data Protection Act
Feb. 26 2026 HM Revenue & Customs Source Page: Traders and Intermediaries Panel Research Summary Report 2025 Document: (webpage) Statistics Found: be awarded this in August 2008.The UK General Data Protection Regulation (GDPR) and the UK Data Protection Act
Feb. 26 2026 HM Revenue & Customs Source Page: Traders and Intermediaries Panel Research Summary Report 2025 Document: (webpage) Statistics Found: awarded this in August 2008.The UK General Data Protection Regulation (UK GDPR) and the UK Data Protection Act
Feb. 19 2026 Planning Inspectorate Source Page: Planning Inspectorate Ministerial Measures - Experimental Statistics 19 February 2026 Document: (PDF) Statistics Found: Responsible for Information training and they understand their responsibilities under the Data Protection Act
Feb. 19 2026 HM Prison and Probation Service Source Page: HM Prison & Probation Service workforce quarterly: December 2025 Document: (ODS) Statistics Found: Low numbers are suppressed to prevent disclosure in accordance with the Data Protection Act, 2018.
Feb. 19 2026 HM Prison and Probation Service Source Page: HM Prison & Probation Service workforce quarterly: December 2025 Document: (ODS) Statistics Found: Low numbers are suppressed to prevent disclosure in accordance with the Data Protection Act, 2018.
Feb. 19 2026 HM Prison and Probation Service Source Page: HM Prison & Probation Service workforce quarterly: December 2025 Document: (ODS) Statistics Found: Low numbers are suppressed to prevent disclosure in accordance with the Data Protection Act, 2018.
Feb. 19 2026 HM Prison and Probation Service Source Page: HM Prison & Probation Service workforce quarterly: December 2025 Document: (ODS) Statistics Found: Low numbers are suppressed to prevent disclosure in accordance with the Data Protection Act, 1998.
Jan. 29 2026 HM Revenue & Customs Source Page: Research on the use of the Goods Vehicle Movement Service 2024 Document: (webpage) Statistics Found: adheres to the Market Research Society Code of Conduct and the General Data Protection Regulation/Data Protection Act

Non-Departmental Publications - Guidance and Regulation
Feb. 24 2026 UK Defence Innovation Source Page: Competition: Innovation Support to Operations Phase 3 (Cycle 7) Document: (PDF) Guidance and Regulation Found: In this clause, "data protection legislation" has the same meaning as in the Data Protection Act 2018
Feb. 24 2026 Office of Financial Sanctions Implementation Source Page: OFSI General Licence INT/2026/8889196 Document: (PDF) Guidance and Regulation Found: to third parties only in compliance with the UK General Data Protection Regulation and the Data Protection Act
Feb. 24 2026 Office of Financial Sanctions Implementation Source Page: OFSI General Licence INT/2026/8893924 Document: (PDF) Guidance and Regulation Found: to third parties only in compliance with the UK General Data Protection Regulation and the Data Protection Act
Feb. 20 2026 Forensic Science Regulator Source Page: Contamination detection: DNA elimination samples (FSR-GUI-0019) Document: (PDF) Guidance and Regulation Found: ensuring that all samples and data are retained according to the retention guidelines and the Data Protection Act
Feb. 19 2026 UK Visas and Immigration Source Page: Criminal investigation guidance to the PACE (Northern Ireland) Regulations 2026 Document: (PDF) Guidance and Regulation Found: their obligations under the UK General Data Protection Regulation (UK GDPR) and Part 3 of the Data Protection Act
Feb. 11 2026 Animals in Science Committee Source Page: Animals in Science Committee: ways of working Document: (PDF) Guidance and Regulation Found: website. 7.3.6 The Committee is subject to the Freedom of Information Act 2000 (FOIA), and the Data Protection Act
Feb. 03 2026 Innovate UK Source Page: Countering Illegal Use of UAS Around Prisons and Sensitive Sites Document: (PDF) Guidance and Regulation Found: In this clause, "data protection legislation" has the same meaning as in the Data Protection Act 2018
Feb. 02 2026 HM Revenue & Customs Source Page: Register for Landfill Tax or change your registration details Document: Group Member Details (LT51) (PDF) Guidance and Regulation Found: complain-about-hmrc How we use your information For more information, go to www.gov.uk/government/collections/data-protection-act
Feb. 02 2026 HM Revenue & Customs Source Page: Register for Landfill Tax or change your registration details Document: Application for Group Treatment (LT50) (PDF) Guidance and Regulation Found: complain-about-hmrc How we use your information For more information, go to www.gov.uk/government/collections/data-protection-act

Non-Departmental Publications - Open consultation
Feb. 20 2026 Offshore Petroleum Regulator for Environment and Decommissioning Source Page: Charging regime for offshore oil and gas activities Document: (PDF) Open consultation Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act
Feb. 16 2026 Medicines and Healthcare products Regulatory Agency Source Page: Medical devices regulations: targeted consultation on the indefinite recognition of CE marked devices Document: (PDF) Open consultation Found: Your rights under the UK General Data Protection Regulation and the UK Data Protection Act 2018 apply
Jan. 29 2026 Offshore Petroleum Regulator for Environment and Decommissioning Source Page: Offshore Energy Strategic Environmental Assessment 5 Scoping Document: (PDF) Open consultation Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Non-Departmental Publications - Policy and Engagement
Feb. 16 2026 Office of Financial Sanctions Implementation Source Page: Ownership and Control Test in UK Financial Sanctions Regulations Document: (PDF) Policy and Engagement Found: These are primarily the Freedom of Information Act 2000 (FOIA), the Data Protection Act 2018 (DPA) and
Feb. 16 2026 Office of Financial Sanctions Implementation Source Page: Ownership and Control Test in UK Financial Sanctions Regulations Document: Ownership and Control Test in UK Financial Sanctions Regulations (webpage) Policy and Engagement Found: personal data and explains your rights under the General Data Protection Regulation (GDPR) and the Data Protection Act

Non-Departmental Publications - Transparency
Feb. 12 2026 Leasehold Advisory Service Source Page: Leasehold Advisory Service framework document Document: (PDF) Transparency Found: information is received by either party under the Freedom of Information Act 2000, or the Data Protection Act
Feb. 09 2026 College of Policing Source Page: College of Policing Limited: annual report and accounts, 2024 to 2025 Document: (PDF) Transparency Found: Our responses to the public exercise of rights under the Data Protection Act 2018 and UK General Data
Feb. 05 2026 Ofgem Source Page: Ofgem framework document Document: (PDF) Transparency Found: information is received by either party under the Freedom of Information Act 2000, or the Data Protection Act
Jan. 30 2026 Mining Remediation Authority Source Page: Mining Remediation Authority framework document Document: (PDF) Transparency Found: Under the UK GDPR and Data Protection Act 2018 if there is a subject access request the party receiving
Jan. 29 2026 Submarine Delivery Agency Source Page: Submarine Delivery Agency (SDA): Annual Report and Accounts 2024 to 2025 Document: (PDF) Transparency Found: The SDA measures its maturity against the UK Data Protection Act 2018 annually, an activity governed

Arms Length Bodies Publications
Feb. 17 2026 NHS England Source Page: Federated Data Platform product screening questionnaire Document: Federated Data Platform product screening questionnaire (webpage) Template Found: UK GDPR UK GDPR as defined in and read in accordance with the Data Protection Act 2018.

Draft Secondary Legislation
The Sussex and Brighton Combined County Authority Regulations 2026 These Regulations establish the Sussex and Brighton Combined County Authority (“the Combined County Authority”) and confer certain functions of local authorities and other public authorities on the Combined County Authority. Ministry of Housing, Communities and Local Government Found: to the Police and Justice Act 2006 (c. 48) and amended by paragraph 45 of Schedule 19 to the Data Protection Act
The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 These Regulations make various amendments to legislation in consequence of sections 117, 118 and 119(1) of the Data (Use and Access) Act 2025 (c. 18) (“the 2025 Act”). Those sections establish the Information Commission as a body corporate, abolish the office of the Information Commissioner and transfer the functions of the Information Commissioner to the Information Commission. These Regulations also make minor amendments in consequence of sections 67 and 91 of the 2025 Act, and contain transitional provision (to maintain pension arrangements) in respect of the person who holds the office of the Information Commissioner and is first chair of the Information Commission pursuant to paragraph 2 of Schedule 14 to the 2025 Act. Department for Science, Innovation & Technology Found: The Data Protection Act 201823.—(1) The Data Protection Act 2018(28) is amended as follows. (2) In each

Draft Secondary Legislation

The Sussex and Brighton Combined County Authority Regulations 2026
These Regulations establish the Sussex and Brighton Combined County Authority (“the Combined County Authority”) and confer certain functions of local authorities and other public authorities on the Combined County Authority.

Ministry of Housing, Communities and Local Government

Found: to the Police and Justice Act 2006 (c. 48) and amended by paragraph 45 of Schedule 19 to the Data Protection Act

The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026
These Regulations make various amendments to legislation in consequence of sections 117, 118 and 119(1) of the Data (Use and Access) Act 2025 (c. 18) (“the 2025 Act”). Those sections establish the Information Commission as a body corporate, abolish the office of the Information Commissioner and transfer the functions of the Information Commissioner to the Information Commission. These Regulations also make minor amendments in consequence of sections 67 and 91 of the 2025 Act, and contain transitional provision (to maintain pension arrangements) in respect of the person who holds the office of the Information Commissioner and is first chair of the Information Commission pursuant to paragraph 2 of Schedule 14 to the 2025 Act.

Department for Science, Innovation & Technology

Found: The Data Protection Act 201823.—(1) The Data Protection Act 2018(28) is amended as follows. (2) In each

Deposited Papers
Thursday 26th February 2026 Department for Education Source Page: Letter dated 19/02/2026 from Baroness Smith of Malvern to Baroness Morris of Yardley regarding amendment 184 and what is meant by “excluded” and “special procedure” material, as discussed during the Report stage (fourth day) of the Children’s Wellbeing and Schools Bill. 4p. Document: Bns_Smith_to_Estelle_Morris_following_HoL_Report_s9_PACE.pdf (PDF) Found: legislative restriction – whether that is the PACE provision we address in our amendment, the Data Protection Act
Wednesday 25th February 2026 Home Office Source Page: Identification of victims of modern slavery. Call for evidence: summary of responses. Incl. annex. 23p. Document: Identification_of_Victims_of_Modern_Slavery.pdf (PDF) Found: transferred to Ipsos UK via secure, encrypted file-transfer portals, ensuring compliance with the Data Protection Act
Thursday 19th February 2026 Department for Education Source Page: I. Statutory guidance: Keeping children safe in education 2026. Government consultation. 46p. II. Keeping children safe in education 2026. Statutory guidance for schools and colleges. Draft for consultation 12 February 2026. 201p. III. Keeping children safe in education: Part one – staff quick reference. 1p. Document: Keeping_children_safe_in_education_2026_draft_for_consultation.pdf (PDF) Found: Data Protection Act 2018, the UK GDPR and the Data (Use and Access) Act 2025 – ‘data protection laws
Thursday 19th February 2026 Department for Education Source Page: I. Statutory guidance: Keeping children safe in education 2026. Government consultation. 46p. II. Keeping children safe in education 2026. Statutory guidance for schools and colleges. Draft for consultation 12 February 2026. 201p. III. Keeping children safe in education: Part one – staff quick reference. 1p. Document: Keeping_children_safe_in_education_2026_government_consultation.pdf (PDF) Found: may be subject to publication or disclosure under the Freedom of Information Act 2000, the Data Protection Act
Tuesday 17th February 2026 Source Page: I. Ordnance Survey Limited. Shareholder framework document. 41p. II. Letters dated 13/02/2026 from Ian Murray MP to Chi Onwurah MP and Lord Mair regarding the new shareholder framework document agreed between the Department for Science, Innovation and Technology, UK Government Investments and Ordnance Survey. 2 docs. Document: Ordnance_Survey_Limited_Shareholder_Framework_Document.pdf (PDF) Found: by any of the parties to this document under the Freedom of Information Act 2000, or the Data Protection Act
Tuesday 17th February 2026 Department of Health and Social Care Source Page: I. Framework Agreement between Department of Health and Social Care (DHSC) and NHS Counter Fraud Authority (NHSCFA) 2026 to 2029. Annex A: Wider guidance; B: Communications; C: Relationships with other bodies; and D: Delegation letter. 5 docs. II. Letter dated 10/02/2026 from Karin Smyth MP to the Deposited Papers Clerk regarding documents for deposit in the House Libraries. 1p. Document: DHSC_NHSCFA_Framework_Agreement_2026-2029.pdf (PDF) Found: This applies to requests for information under the: • Freedom of Information Act 2000 • Data Protection Act
Thursday 12th February 2026 Ministry of Housing, Communities and Local Government Source Page: I. Leasehold Advisory Service Framework Document. Incl. annex A. 32p. II. Letter dated 06/02/2026 from Baroness Taylor of Stevenage to the Deposited Papers Clerk regarding a document for deposit in the House libraries. 1p. Document: 260211_FINAL_LEASE_Framework_Document.pdf (PDF) Found: information is received by either party under the Freedom of Information Act 2000, or the Data Protection Act
Thursday 12th February 2026 Ministry of Housing, Communities and Local Government Source Page: I. HM Land Registry Framework Document. Non-ministerial department. Incl. annex. 28p. II. Letter dated 06/02/2026 from Baroness Taylor of Stevenage to the Deposited Papers Clerk regarding a document for deposit in the House libraries. 1p. Document: 2026-01-26_HMLR_Framework_Final.pdf (PDF) Found: information is received by either party under the Freedom of Information Act 2000, or the Data Protection Act
Tuesday 10th February 2026 Ministry of Defence Source Page: Letter dated 05/02/2026 from Louise Sandher-Jones MP to Neil O'Brien MP regarding a question concerning the number of disciplinary cases concluded against civil servants in the Ministry of Defence and its agencies. 2p. Document: 20260121_PQW_24_26_2025_31094_99856.pdf (PDF) Found: Please note that, in order to protect personal information as governed by the Data Protection Act 2018
Tuesday 10th February 2026 Ministry of Defence Source Page: Letter dated 05/02/2026 from Louise Sandher-Jones MP to Neil O'Brien MP regarding a question regarding numbers of Ministry of Defence staff at each grade with top performance rating. 4p. Document: 20260109_PQW_24_26_2025_31072_99853_OBrien.pdf (PDF) Found: In order to protect personal information governed by the Data Protection Act 2018, some of the information
Wednesday 4th February 2026 Source Page: Independent Review of the Criminal Courts. Part II: overview, volume 1 and 2 [Review by Sir Brian Leveson]. 3 docs. Document: Independent_Review_of_the_Criminal_Courts_Part_2_Volume_2.pdf (PDF) Found: DLRM Decommissioning and Legacy Risks Mitigation DMD Disclosure Management Document DPA 2018 Data Protection Act
Wednesday 4th February 2026 Source Page: Independent Review of the Criminal Courts. Part II: overview, volume 1 and 2 [Review by Sir Brian Leveson]. 3 docs. Document: Independent_Review_of_the_Criminal_Courts_Part_2_Volume_1.pdf (PDF) Found: thorniest operational issue of [their] inspection’.392 Due to the CPS’s interpretation of the Data Protection Act

Data Protection Act 2018 mentioned in Scottish results

Scottish Government Publications
Friday 27th February 2026 Children and Families Directorate Source Page: National Transitions to Adulthood Strategy for Young Disabled People – Supplementary Report Document: Supplementary report for Transitions Strategy for Disabled Young People (PDF) Found: Collaboration, including information sharing that is in keeping with the Data Protection Act (2018),
Thursday 26th February 2026 Source Page: Scottish Pubs Code: guidance for tied pub tenants and pub companies Document: Scottish Pubs Adjudicator: complaints form for tied pub tenants (webpage) Found: information given to us about you and your complaint for its intended purpose and in line with Data Protection Act
Wednesday 25th February 2026 Source Page: Adult Disability Payment caseload by Condition Type: FOI release Document: Adult Disability Payment caseload by Condition Type: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 25th February 2026 People Directorate Source Page: Scottish Government's Trans and Non-Binary Inclusion Policy: FOI release Document: FOI 202500497199 - Information Released - Annex (PDF) Found: including but not limited to medical treatment as special category personal data under the Data Protection Act
Wednesday 25th February 2026 Source Page: Social Security Scotland’s Retention and Disposal Policy and Guidance: FOI release Document: FOI 202500498570 - Information Released - Spreadsheet (Excel) Found: For Law Enforcement processing, Data Protection Act 2018, section 67.
Wednesday 25th February 2026 Source Page: Social Security Scotland’s Retention and Disposal Policy and Guidance: FOI release Document: FOI 202500498570 - Information Released - Documents (PDF) Found: Under UK General Data Protection Regulation (UK GDPR) and the Data Protection Act (DPA) 2018, personal
Wednesday 25th February 2026 Marine Directorate Source Page: Fish health inspectorate’s (FHI) inspections data: EIR release Document: Fish health inspectorate’s (FHI) inspections data: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 25th February 2026 Source Page: Transport Scotland 20mph speed limit roll out Dumfries and Galloway: FOI release Document: Transport Scotland 20mph speed limit roll out Dumfries and Galloway: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 25th February 2026 Marine Directorate Source Page: Analysis of aquaculture administrative burdens and mandatory mortality reporting: EIR release Document: Analysis of aquaculture administrative burdens and mandatory mortality reporting: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 25th February 2026 Source Page: Woodland restoration grant to Invergeldie Estate, Oxygen Conservation: EIR release Document: Woodland restoration grant to Invergeldie Estate, Oxygen Conservation: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 24th February 2026 Safer Communities Directorate Source Page: Police Division risk register information: FOI release Document: Police Division risk register information: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 24th February 2026 Source Page: First Minister and Leader of Sinn Fein meeting documentation: FOI release Document: First Minister and Leader of Sinn Fein meeting documentation: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 24th February 2026 Communications and Ministerial Support Directorate Source Page: Cabinet Secretary for Climate Action and Energy's expenses for COP30: FOI release Document: Cabinet Secretary for Climate Action and Energy's expenses for COP30: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 24th February 2026 Local Government and Housing Directorate Source Page: LAR Housing Trust loan information: FOI release Document: LAR Housing Trust loan information: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 24th February 2026 Communications and Ministerial Support Directorate Source Page: Documentation for meetings attended by Former first Minister and Aamer Anwar and Co: FOI release Document: Documentation for meetings attended by Former first Minister and Aamer Anwar and Co: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 24th February 2026 Energy and Climate Change Directorate Source Page: Carbon budget targets advice correspondence: EIR release Document: EIR 202500496970 - Information released - Annex A, Annex B and Annex C (PDF) Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act
Tuesday 24th February 2026 Source Page: Historic Environment Scotland meeting note information: FOI release Document: Historic Environment Scotland meeting note information: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 24th February 2026 Financial Management Directorate Source Page: Scottish Government budget and Barnett consequential meetings: FOI release Document: Scottish Government budget and Barnett consequential meetings: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 24th February 2026 Propriety and Ethics Directorate Source Page: Communications and information relating to the James Hamilton report and associated published legal advice (case reference number 281/2025): FOI Appeal Document: Communications and information relating to the James Hamilton report and associated published legal advice (case reference number 281/2025): FOI Appeal (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 24th February 2026 Propriety and Ethics Directorate Source Page: Communications and information relating to the James Hamilton report and associated published legal advice (case reference number 281/2025): FOI Appeal Document: FOI 202400438168 - DN281 - Information Released - Batch 18 (PDF) Found: Team (CRIT) at the ICO to discontinue an investigation into potential offences under s.170 Data Protection Act
Tuesday 24th February 2026 Propriety and Ethics Directorate Source Page: Communications and information relating to the James Hamilton report and associated published legal advice (case reference number 281/2025): FOI Appeal Document: FOI 202400438168 - DN281 - Information Released - Batch 15 (PDF) Found: The Data Protection Act gives you the right to see information about yourself.
Tuesday 24th February 2026 Source Page: Social Security Scotland - Adult Disability Payment (ADP) data on specific recorded Primary Disability Conditions: FOI release Document: Social Security Scotland - Adult Disability Payment (ADP) data on specific recorded Primary Disability Conditions: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Monday 23rd February 2026 Local Government and Housing Directorate Source Page: Non-Domestic Rates (Liability for Unoccupied Properties) (Scotland) Bill correspondence: FOI release Document: Non-Domestic Rates (Liability for Unoccupied Properties) (Scotland) Bill correspondence: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Monday 23rd February 2026 Agriculture and Rural Economy Directorate Source Page: Agricultural payments computerised system information: FOI release Document: Agricultural payments computerised system information: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Monday 23rd February 2026 Energy and Climate Change Directorate Source Page: Correspondence from Oil and Gas organisations regarding engagement with Scottish Government: EIR release Document: EIR 202500496792 - Information Released - Annex (PDF) Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act
Monday 23rd February 2026 Source Page: Recorded communications containing certain phrases: FOI release Document: FOI 202500496330 - Information released - Annex A and Annex B (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Monday 23rd February 2026 Source Page: Transport Scotland - Swallow Roundabout in Dundee correspondence: EIR release Document: Transport Scotland - Swallow Roundabout in Dundee correspondence: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Monday 23rd February 2026 Local Government and Housing Directorate Source Page: Business Gateway funding communications: FOI release Document: Business Gateway funding communications: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Monday 23rd February 2026 Local Government and Housing Directorate Source Page: Cabinet Secretary for Finance and Local Government correspondence regarding the Non-Domestic Rates (Scotland) Act 2020: FOI release Document: Cabinet Secretary for Finance and Local Government correspondence regarding the Non-Domestic Rates (Scotland) Act 2020: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Monday 23rd February 2026 Source Page: City of Edinburgh Council correspondence regarding the proposed new West Edinburgh secondary school: EIR Review Document: City of Edinburgh Council correspondence regarding the proposed new West Edinburgh secondary school: EIR Review (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Monday 23rd February 2026 Agriculture and Rural Economy Directorate Source Page: Sustainable farming incentive documentation: EIR release Document: Sustainable farming incentive documentation: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Monday 23rd February 2026 Source Page: Scottish Forestry - East Netershield Woodland Creation Scheme correspondence: EIR relaese Document: Scottish Forestry - East Netershield Woodland Creation Scheme correspondence: EIR relaese (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Monday 23rd February 2026 Safer Communities Directorate Source Page: Minutes from Serious Organised Crime Taskforce meetings: FOI release Document: Minutes from Serious Organised Crime Taskforce meetings: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Monday 23rd February 2026 Safer Communities Directorate Source Page: Minutes from Serious Organised Crime Taskforce meetings: FOI release Document: FOI 202600501737 - Information Released - Attachment (PDF) Found: said that the Information Commissioner’s Office (ICO) was aware of issues since GDPR and the Data Protection Act
Monday 23rd February 2026 Mental Health Directorate Source Page: NHS Highland neurodevelopmental and mental health information: FOI release Document: NHS Highland neurodevelopmental and mental health information: FOI release (webpage) Found: contravene the data protection principles in Article 5(1) of the UK GDPR and in section 34(1) of the Data Protection Act
Monday 23rd February 2026 Children and Families Directorate Source Page: Correspondence sent to former First Minister regarding child sexual exploitation and abuse: FOI release Document: FOI 202600499932 - Information Released - Annex (PDF) Found: handled under the requirements of the EU General Data Protection Regulation (GDRP) and the Data Protection Act
Monday 23rd February 2026 Energy and Climate Change Directorate Source Page: Community Wind Power correspondence: FOI release Document: Community Wind Power correspondence: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in Section 34(1) of the Data Protection Act
Monday 23rd February 2026 Source Page: Reduction of public sector workforce risks registers and progress: FOI release Document: Reduction of public sector workforce risks registers and progress: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Monday 23rd February 2026 Local Government and Housing Directorate Source Page: Correspondence regarding Non- Domestic Rates (Scotland) Act 2020: FOI release Document: Correspondence regarding Non- Domestic Rates (Scotland) Act 2020: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Monday 23rd February 2026 Communications and Ministerial Support Directorate Source Page: Plans for proactive publication of relevant data and ongoing communications plans information: FOI release Document: Plans for proactive publication of relevant data and ongoing communications plans information: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Monday 23rd February 2026 Energy and Climate Change Directorate Source Page: Correspondence regarding the Mosmorran Just Transition plan: EIR release Document: Correspondence regarding the Mosmorran Just Transition plan: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Monday 23rd February 2026 Energy and Climate Change Directorate Source Page: Warmworks contract information: EIR release Document: Warmworks contract information: EIR release (webpage) Found: applicant and disclosure would contravene the data protection principles in Schedule 1 to the Data Protection Act
Monday 23rd February 2026 Source Page: Institute for Fiscal Studies and Barnett Formula documentation: FOI release Document: Institute for Fiscal Studies and Barnett Formula documentation: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Monday 23rd February 2026 Source Page: Scottish Forestry gender and specific demographic groups queries: FOI release Document: FOI 202600501731 - Information Released - Annex C (PDF) Found: respective obligations under the General Data Protection Regulation (EU) 2016/679 and the Data Protection Act
Monday 23rd February 2026 Source Page: Social Security Scotland Benefit payment statistics: FOI release Document: Social Security Scotland Benefit payment statistics: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Monday 23rd February 2026 Source Page: Cabinet Secretary for Constitution, External Affairs and Culture’s visit to Switzerland and Germany: FOI release Document: FOI 202500496305 - Information Released - Annex (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Monday 23rd February 2026 Local Government and Housing Directorate Source Page: Copies of concern regarding Non-Domestic Rates (Scotland) Act 2020: FOI release Document: Copies of concern regarding Non-Domestic Rates (Scotland) Act 2020: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 18th February 2026 Agriculture and Rural Economy Directorate Source Page: Future Farming Investment Scheme correspondence regarding the assessment of common grazing land: EIR release Document: EIR 202500494702 - Information Released - Annex A (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 18th February 2026 Source Page: Summerhall documentation: FOI release Document: Summerhall documentation: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 18th February 2026 Environment and Forestry Directorate Source Page: Meeting details between the Stove Industry Association and the Scottish Government: EIR request Document: EIR 202500494885 - Information released - Annex A - Annec C (PDF) Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act
Wednesday 18th February 2026 Justice Directorate Source Page: Correspondence sent to Cabinet Secretary for Justice and Minister for Victims and Community Safety regarding prisons: FOI release Document: Correspondence sent to Cabinet Secretary for Justice and Minister for Victims and Community Safety regarding prisons: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 18th February 2026 Energy and Climate Change Directorate Source Page: Correspondence regarding the closure of Mossmorran: EIR release Document: Correspondence regarding the closure of Mossmorran: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 18th February 2026 Internal Audit and Assurance Directorate Source Page: Gate Review Child Health report: FOI release Document: Gate Review Child Health report: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and section 34(1) of the Data Protection Act
Wednesday 18th February 2026 Chief Operating Officer, NHS Scotland Directorate Source Page: National Elective Care Programme Gateway Review information: FOI release Document: National Elective Care Programme Gateway Review information: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 18th February 2026 Source Page: Communications by Scottish Ministers relating to the future ownership and management of Dundee Airport: EIR release Document: Communications by Scottish Ministers relating to the future ownership and management of Dundee Airport: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 18th February 2026 Source Page: First Minister Questions briefing notes on Scottish taxpayers paying less income tax than elsewhere in the UK: FOI release Document: FOI 202500496273 - Information Released - Annex A (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 18th February 2026 Source Page: Museums Galleries Scotland documentation regarding the Equality and Human Rights Commission (EHRC): FOI release Document: Museums Galleries Scotland documentation regarding the Equality and Human Rights Commission (EHRC): FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 18th February 2026 Social Security Directorate Source Page: Social Security Programme Gateway Review information: FOI release Document: Social Security Programme Gateway Review information: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 18th February 2026 Communications and Ministerial Support Directorate Source Page: Correspondence which mentions former Chief Executive of the Scottish National Party: FOI release Document: Correspondence which mentions former Chief Executive of the Scottish National Party: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 18th February 2026 Population Health Directorate Source Page: Public health information regarding LED lighting: EIR Review Document: Public health information regarding LED lighting: EIR Review (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 18th February 2026 Education Reform Directorate Source Page: Proposed relocation of Glasgow Gaelic Primary School documentation: FOI release Document: FOI 202500496130 - Information Released - Annex A (PDF) Found: collect, store and use) the information you provide in a manner compatible with UK GDPR and the Data Protection Act
Wednesday 18th February 2026 Agriculture and Rural Economy Directorate Source Page: Derogation from Agri-Environment Climate Scheme (AECS) contracts: EIR release Document: Derogation from Agri-Environment Climate Scheme (AECS) contracts: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 18th February 2026 Agriculture and Rural Economy Directorate Source Page: Assessment of Future Farming Investment Scheme applications correspondence: EIR release Document: EIR 202500494687 - Information released - Annex A (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 17th February 2026 Social Security Directorate Source Page: Details of the Cabinet Secretary for Social Justice's trip to London: FOI release Document: Details of the Cabinet Secretary for Social Justice's trip to London: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 17th February 2026 Internal Audit and Assurance Directorate Source Page: Gate Review HMP Glasgow report: FOI release Document: Gate Review HMP Glasgow report: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and section 34(1) of the Data Protection Act
Tuesday 17th February 2026 Marine Directorate Source Page: Review of the Scottish Adjacent Waters Boundary Order 2009 communications: FOI release Document: Review of the Scottish Adjacent Waters Boundary Order 2009 communications: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 17th February 2026 Source Page: Transport Scotland 'Mallaig Lochboisdale New Vessel Project' Gateway Review: FOI release Document: Transport Scotland 'Mallaig Lochboisdale New Vessel Project' Gateway Review: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and section 34(1) of the Data Protection Act
Tuesday 17th February 2026 Internal Audit and Assurance Directorate Source Page: Gate Review Mangata Project report: FOI release Document: Gate Review Mangata Project report: FOI release (webpage) Found: parties and disclosing it would contravene the data protection principles in Schedule 1 to the Data Protection Act
Tuesday 17th February 2026 Source Page: Transport Scotland - Dualling of the A96 documentation: EIR release Document: Transport Scotland - Dualling of the A96 documentation: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 17th February 2026 Source Page: Transport Scotland 'Lochboisdale Gasay' completed Gateway Review information: FOI release Document: Transport Scotland 'Lochboisdale Gasay' completed Gateway Review information: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and section 34(1) of the Data Protection Act
Tuesday 17th February 2026 Justice Directorate Source Page: Justice Division risk registers: FOI release Document: Justice Division risk registers: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 17th February 2026 Children and Families Directorate Source Page: Correspondence between Ministers regarding grooming gangs: FOI release Document: Correspondence between Ministers regarding grooming gangs: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 17th February 2026 Source Page: Transport impact assessment relating to temporary worker accommodation village in Thurso: FOI release Document: Transport impact assessment relating to temporary worker accommodation village in Thurso: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 17th February 2026 Chief Operating Officer, NHS Scotland Directorate Source Page: Correspondence and documentation regarding waiting list statistic: FOI release Document: Correspondence and documentation regarding waiting list statistic: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 17th February 2026 Communications and Ministerial Support Directorate Source Page: Justice Secretary attendance, itinerary, and correspondence on 19 November 2025: FOI release Document: FOI 202500494722 - Information Released - Annex A (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in Section 34(1) of the Data Protection Act
Tuesday 17th February 2026 Internal Audit and Assurance Directorate Source Page: HMP Highland Gateway Review report: FOI release Document: HMP Highland Gateway Review report: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and section 34(1) of the Data Protection Act
Tuesday 17th February 2026 Digital Directorate Source Page: Decision to include a data centre as part of the Ravenscraig regeneration project: FOI Review Document: Decision to include a data centre as part of the Ravenscraig regeneration project: FOI Review (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 17th February 2026 Source Page: Cabinet Secretary for Finance and Local Government's taxpayer claim correspondence: FOI release Document: FOI 202500495847 - Information released - Annex A and Annex B (PDF) Found: the data subject, and so it is subject to the General Data Protection Regulation and the Data Protection Act
Monday 16th February 2026 Energy and Climate Change Directorate Source Page: Moray FLOW-Project correspondence: EIR release Document: Moray FLOW-Project correspondence: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Monday 16th February 2026 Local Government and Housing Directorate Source Page: Documentation that mentions Lord Haughey: FOI release Document: Documentation that mentions Lord Haughey: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Monday 16th February 2026 Source Page: Transport Scotland - Gateway Review information on the A9 Dualling Tay Crossing to Ballinuig: EIR release Document: Transport Scotland - Gateway Review information on the A9 Dualling Tay Crossing to Ballinuig: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and section 34(1) of the Data Protection Act
Monday 16th February 2026 Marine Directorate Source Page: Review into progressing standards of farmed fish welfare: EIR release Document: EIR 202500489448 - Information released - Annex B (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Monday 16th February 2026 Source Page: Transport Scotland - Gateway Review information on the A9 Dualling -Tomatin to Moy: EIR release Document: Transport Scotland - Gateway Review information on the A9 Dualling -Tomatin to Moy: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and section 34(1) of the Data Protection Act
Monday 16th February 2026 Source Page: Transport Scotland - Gateway Review information on the A9 Pitlochry to Killicrankie: EIR release Document: Transport Scotland - Gateway Review information on the A9 Pitlochry to Killicrankie: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and section 34(1) of the Data Protection Act
Monday 16th February 2026 Economic Development Directorate Source Page: Glasgow Prestwick Airport correspondence: FOI release Document: Glasgow Prestwick Airport correspondence: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Monday 16th February 2026 Source Page: Records from engagements of Cabinet Secretary for Constitution, External Affairs and Culture: FOI release Document: Records from engagements of Cabinet Secretary for Constitution, External Affairs and Culture: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Monday 16th February 2026 Source Page: Scottish Forestry 'Economic Impact of Forest Based Activities in Scotland' report queries: EIR release Document: Scottish Forestry 'Economic Impact of Forest Based Activities in Scotland' report queries: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Monday 16th February 2026 Source Page: Path to Balance correspondence: FOI release Document: Path to Balance correspondence: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Monday 16th February 2026 Financial Management Directorate Source Page: Cabinet Secretary for Finance and Local Government documentation regarding the Barnett Formula: FOI release Document: Cabinet Secretary for Finance and Local Government documentation regarding the Barnett Formula: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Monday 16th February 2026 Digital Directorate Source Page: UK Government's plans to introduce a digital ID: FOI release Document: UK Government's plans to introduce a digital ID: FOI release (webpage) Found: the public interest in ensuring the Scottish Government fulfils its requirements under the Data Protection Act
Monday 16th February 2026 Lifelong Learning and Skills Directorate Source Page: Correspondence regarding Abertay University: FOI Review Document: Correspondence regarding Abertay University: FOI Review (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Monday 16th February 2026 People Directorate Source Page: Formal complaints made about the behaviour of Special Advisers: FOI Review Document: Formal complaints made about the behaviour of Special Advisers: FOI Review (webpage) Found: out in Article 5(1) of the UK General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 11th February 2026 Energy and Climate Change Directorate Source Page: Oil and gas industry documentation: EIR release Document: Oil and gas industry documentation: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 11th February 2026 Energy and Climate Change Directorate Source Page: Scotland’s Carbon Budgets correspondence: EIR release Document: EIR 202500493411 - Information released - Annex A and Annex B (PDF) Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act
Wednesday 11th February 2026 Internal Audit and Assurance Directorate Source Page: Forensic Pathology and Mortuary Services Gateway Review report: FOI release Document: Forensic Pathology and Mortuary Services Gateway Review report: FOI release (webpage) Found: parties and disclosing it would contravene the data protection principles in Schedule 1 to the Data Protection Act
Wednesday 11th February 2026 Source Page: Cabinet Secretary for Constitution, External Affairs and Culture correspondence regarding Historic Environment Scotland: FOI release Document: Cabinet Secretary for Constitution, External Affairs and Culture correspondence regarding Historic Environment Scotland: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 11th February 2026 Safer Communities Directorate Source Page: Briefing and correspondence regarding question S6O-05172 on protecting farmers from the threat of rural crime: FOI release Document: Briefing and correspondence regarding question S6O-05172 on protecting farmers from the threat of rural crime: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 11th February 2026 Chief Medical Officer Directorate Source Page: Scottish Government engagement with the government of Northern Ireland: FOI release Document: Scottish Government engagement with the government of Northern Ireland: FOI release (webpage) Found: protection principles set out in Article 5(1)(a) of the UK GDPR and in section 34(1) of the Data Protection Act
Wednesday 11th February 2026 Equality, Inclusion and Human Rights Directorate Source Page: Equality, Inclusion and Human Rights Directorate risk register information: FOI release Document: Equality, Inclusion and Human Rights Directorate risk register information: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 11th February 2026 Marine Directorate Source Page: Documentation regarding First Minister's trip to Outer Hebrides: FOI release Document: Documentation regarding First Minister's trip to Outer Hebrides: FOI release (webpage) Found: out in Article 5(1) of the UK General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 11th February 2026 Source Page: Employee information for the Scottish Government office in China: FOI release Document: Employee information for the Scottish Government office in China: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 11th February 2026 Digital Directorate Source Page: Gateway Review information on the 'Reaching 100% Programme': FOI release Document: Gateway Review information on the 'Reaching 100% Programme': FOI release (webpage) Found: parties and disclosing it would contravene the data protection principles in Schedule 1 to the Data Protection Act
Wednesday 11th February 2026 Environment and Forestry Directorate Source Page: Gateway Review information on 'Transition to a Non-Departmental Public Body (NDPB)': FOI release Document: FOI 202500494975 - Information released - Annex A and Annex B (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and section 34(1) of the Data Protection Act
Wednesday 11th February 2026 Source Page: Adoption and regulation of Hydrotreated Vegetable Oil (HVO): EIR release Document: Adoption and regulation of Hydrotreated Vegetable Oil (HVO): EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 11th February 2026 Source Page: First Minister’s meeting with the President of Ireland documentation: FOI release Document: First Minister’s meeting with the President of Ireland documentation: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 11th February 2026 Constitution Directorate Source Page: Details of First Minister's meeting with the Leader of Plaid Cymru: FOI release Document: FOI 202500493831 - Information released - Annex A and Annex B (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 11th February 2026 Lifelong Learning and Skills Directorate Source Page: Glasgow School of Art (GSA) Correspondence and Restoration Options: EIR release Document: Glasgow School of Art (GSA) Correspondence and Restoration Options: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 11th February 2026 Economic Development Directorate Source Page: Information in relation to skills shortages at Scotland’s shipyards: FOI release Document: Information in relation to skills shortages at Scotland’s shipyards: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 11th February 2026 Source Page: Information in the Gateway Review completed in 2025 on the 'Woodside Viaduct Project': FOI release Document: Information in the Gateway Review completed in 2025 on the 'Woodside Viaduct Project': FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and section 34(1) of the Data Protection Act
Wednesday 11th February 2026 Energy and Climate Change Directorate Source Page: Information on the ExxonMobil sale of the Fife Ethylene Plant: EIR release Document: Information on the ExxonMobil sale of the Fife Ethylene Plant: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 10th February 2026 Source Page: Correspondence regarding Cabinet Secretary for the Constitution, External Affairs & Culture meeting with former chair of Historic Environment Scotland (HES): FOI release Document: Correspondence regarding Cabinet Secretary for the Constitution, External Affairs & Culture meeting with former chair of Historic Environment Scotland (HES): FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 10th February 2026 Chief Operating Officer, NHS Scotland Directorate Source Page: Governance and ownership structure of MyCare.scot queries: FOI release Document: FOI 202500492747 - Information released - Documents (PDF) Found: DFD regarding recognised standards and regulatory requirements (non-exhaustive list): o Data Protection Act
Tuesday 10th February 2026 Source Page: Proposed modifications to the A92: EIR release Document: Proposed modifications to the A92: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 10th February 2026 Safer Communities Directorate Source Page: Consultation on the revised Code of Practice on the use of stop and search in Scotland Document: Stop and Search Code of Practice - Revised Code + Consultation Document (PDF) Found: shared when in accordance with the Human Rights Act 1998, the Gender Recognition Act 2004, the Data Protection Act
Tuesday 10th February 2026 Population Health Directorate Source Page: Public health objection – titanium dioxide, folic acid fortification safety assessment: FOI release Document: Public health objection – titanium dioxide, folic acid fortification safety assessment: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 10th February 2026 Source Page: Transport Scotland - Spean Bridge active travel provision report: FOI release Document: Transport Scotland - Spean Bridge active travel provision report: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 10th February 2026 Communications and Ministerial Support Directorate Source Page: Viva Engage posts on hybrid working policy: FOI release Document: Viva Engage posts on hybrid working policy: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 10th February 2026 Source Page: Cladding Remediation Programme Gateway Review report: EIR release Document: Cladding Remediation Programme Gateway Review report: EIR release (webpage) Found: parties and disclosing it would contravene the data protection principles in Schedule 1 to the Data Protection Act
Tuesday 10th February 2026 Energy and Climate Change Directorate Source Page: Highland Council and Scottish Government correspondence on S36/S37 applications deadlines: EIR release Document: Highland Council and Scottish Government correspondence on S36/S37 applications deadlines: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 10th February 2026 Source Page: Correspondence between former Chair of Historic Environment Scotland (HES) and Scottish Government Ministers: FOI release Document: Correspondence between former Chair of Historic Environment Scotland (HES) and Scottish Government Ministers: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 10th February 2026 Energy and Climate Change Directorate Source Page: Offshore energy safety documentation: EIR release Document: Offshore energy safety documentation: EIR release (webpage) Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act
Tuesday 10th February 2026 Communications and Ministerial Support Directorate Source Page: Correspondence with Trade Unions relating to team agreements: FOI release Document: Correspondence with Trade Unions relating to team agreements: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 10th February 2026 Source Page: New Struan School operated by Scottish Autism: FOI release Document: FOI 202500488807 - Information Released - Annex (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 10th February 2026 Communications and Ministerial Support Directorate Source Page: Hybrid working policy for Core Civil Servants meeting notes: FOI release Document: Hybrid working policy for Core Civil Servants meeting notes: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 10th February 2026 Energy and Climate Change Directorate Source Page: Gateway review of the Heat in Buildings Future Service Provision project information: EIR release Document: Gateway review of the Heat in Buildings Future Service Provision project information: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Data Protection Act 2018 mentioned in Welsh results

Welsh Committee Publications
Tuesday 3rd February 2026 PDF - Marshalled List of Amendments - 3 February 2026 (PDF 238KB) Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill Found: (4) In this section, “the data protection legislation” has the same meaning as in the Data Protection Act
Tuesday 3rd February 2026 PDF - Marshalled List of Amendments - 3 February 2026 (PDF 243KB) v2 Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill Found: (4) In this section, “the data protection legislation” has the same meaning as in the Data Protection Act
Thursday 29th January 2026 PDF - Marshalled List of Amendments - 29 January 2026 Inquiry: Building Safety (Wales) Bill Found: (5) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements
Tuesday 20th January 2026 PDF - Notice of Amendments – 20 January 2026 (PDF 231KB) Inquiry: Building Safety (Wales) Bill Found: (5) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements
Tuesday 16th December 2025 PDF - Notice of Amendments - 16 December 2025 (PDF 111KB) Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill Found: (4) In this section, “the data protection legislation” has the same meaning as in the Data Protection Act
Monday 15th December 2025 PDF - Welsh Government: Purpose and effect table - 15 December 2025 Inquiry: Building Safety (Wales) Bill Found: The amendment replaces subsection (8) to refer to new section 183A of the Data Protection Act 2018 (
Thursday 11th December 2025 PDF - Marshalled List of Amendments - 11 December 2025 Inquiry: Homelessness and Social Housing Allocation (Wales) Bill Found: purpose for which it is disclosed, and (b) handled and stored in accordance with— (i) the Data Protection Act
Thursday 11th December 2025 PDF - Notice of amendments - 11 December 2025 Inquiry: Building Safety (Wales) Bill Found: Section 61, page 49, leave out lines 24 to 27 and insert— ‘(8) But see also section 183A of the Data Protection Act
Friday 5th December 2025 PDF - Marshalled List of Amendments - 5 December 2025 Inquiry: Homelessness and Social Housing Allocation (Wales) Bill Found: purpose for which it is disclosed, and (b) handled and stored in accordance with— (i) the Data Protection Act
Thursday 4th December 2025 PDF - Marshalled List of Amendments - 4 December 2025 (PDF 420KB) Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill Found: Irranca-Davies 16 Section 24, page 12, after line 21, insert— ‘( ) But see also section 183A of the Data Protection Act
Thursday 4th December 2025 PDF - Notice of amendments - 4 December 2025 Inquiry: Homelessness and Social Housing Allocation (Wales) Bill Found: purpose for which it is disclosed, and (b) handled and stored in accordance with— (i) the Data Protection Act
Monday 1st December 2025 PDF - Welsh Government: Purpose and effect table - 1 December 2025 (PDF 404KB) Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill Found: protection of prohibitions and restrictions etc on processing: relevant enactments) of the Data Protection Act
Thursday 27th November 2025 PDF - Notice of Amendments - 27 November 2025 (PDF 276KB) Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill Found: Irranca-Davies 16 Section 24, page 12, after line 21, insert— ‘( ) But see also section 183A of the Data Protection Act
Thursday 27th November 2025 PDF - Notice of Amendments - 27 November 2025 (PDF 276KB) Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill Found: Irranca-Davies 16 Section 24, page 12, after line 21, insert— ‘( ) But see also section 183A of the Data Protection Act
Tuesday 25th November 2025 PDF - Letter from the Cabinet Secretary for Finance and Welsh Language to the Legislation, Justice and Constitution Committee, 25 November 2025 Inquiry: Report on the Development of Tourism and Regulation of Visitor Accommodation (Wales) Bill Found: However, the provisions under section 39 need to be read alongside section 183A of the Data Protection Act
Monday 17th November 2025 PDF - Welsh Government: Purpose and Effect Table - 17 November 2025 Inquiry: Homelessness and Social Housing Allocation (Wales) Bill Found: Housing Registers as they are no longer required as a consequence of section 183A of the Data Protection Act
PDF - Bill Inquiry: Report on the Development of Tourism and Regulation of Visitor Accommodation (Wales) Bill Found: (5) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements
PDF - Notice of Amendments - 27 November 2025 Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill Found: Irranca-Davies 16 Section 24, page 12, after line 21, insert— ‘( ) But see also section 183A of the Data Protection Act
PDF - Notice of Amendments - 27 November 2025 Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill Found: Irranca-Davies 16 Section 24, page 12, after line 21, insert— ‘( ) But see also section 183A of the Data Protection Act
PDF - Welsh Government: Purpose and effect table - 1 December 2025 Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill Found: protection of prohibitions and restrictions etc on processing: relevant enactments) of the Data Protection Act
PDF - Letter Inquiry: Report on the Development of Tourism and Regulation of Visitor Accommodation (Wales) Bill Found: However, the provisions under section 39 need to be read alongside section 183A of the Data Protection Act
PDF - Response letter from the Cabinet Secretary for Finance and Welsh Language to the Chair of the Legislation, Justice and Constitution Committee: Follow-up from the Legislation, Justice and Constitution Committee meeting held on 10 November 2025 - 25 November 2025 Inquiry: Report on the Development of Tourism and Regulation of Visitor Accommodation (Wales) Bill Found: However, the provisions under section 39 need to be read alongside section 183A of the Data Protection Act
PDF - Marshalled List of Amendments - 4 December 2025 Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill Found: Irranca-Davies 16 Section 24, page 12, after line 21, insert— ‘( ) But see also section 183A of the Data Protection Act
PDF - Marshalled List of amendments – 5 December 2025 Inquiry: Homelessness and Social Housing Allocation (Wales) Bill Found: purpose for which it is disclosed, and (b) handled and stored in accordance with— (i) the Data Protection Act
PDF - Notice of amendments – 4 December 2025 Inquiry: Homelessness and Social Housing Allocation (Wales) Bill Found: purpose for which it is disclosed, and (b) handled and stored in accordance with— (i) the Data Protection Act
PDF - Notice of amendments - 11 December 2025 Inquiry: Building Safety (Wales) Bill Found: Section 61, page 49, leave out lines 24 to 27 and insert— ‘(8) But see also section 183A of the Data Protection Act
PDF - Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill, as amended at Stage 2 (PDF 462KB) Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill Found: (2) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements
PDF - Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill, as amended at Stage 2 (UNCHECKED) Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill Found: (2) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements
PDF - Welsh Government: Purpose and effect table - 15 December 2025 Inquiry: Building Safety (Wales) Bill Found: The amendment replaces subsection (8) to refer to new section 183A of the Data Protection Act 2018 (
PDF - Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill, as amended at Stage 2 (UNCHECKED) (PDF 462KB) Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill Found: (2) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements
PDF - Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill, as amended at Stage 2 (PDF 462KB) Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill Found: (2) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements
PDF - Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill, as amended at Stage 2 Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill Found: (2) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements
PDF - Notice of Amendments - 16 December 2025 Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill Found: (4) In this section, “the data protection legislation” has the same meaning as in the Data Protection Act
PDF - Supplementary LCM Inquiry: The Welsh Government’s Legislative Consent Memoranda on the Children’s Wellbeing and Schools Bill Found: Education Act 2002 3 • The Academies Act 2010 • School Standards and Framework Act 1998 • Data Protection Act
PDF - Notice of Amendments – 20 January 2026 Inquiry: Building Safety (Wales) Bill Found: (5) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements
PDF - Marshalled List of Amendments – 29 January 2026 Inquiry: Building Safety (Wales) Bill Found: (5) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements
PDF - Llywodraeth Cymru: Tabl Diben ac Effaith - 17 Tachwedd 2025 Inquiry: Homelessness and Social Housing Allocation (Wales) Bill Found: Housing Registers as they are no longer required as a consequence of section 183A of the Data Protection Act
PDF - Welsh Government: Purpose and effect table - 17 November 2025 Inquiry: Homelessness and Social Housing Allocation (Wales) Bill Found: Housing Registers as they are no longer required as a consequence of section 183A of the Data Protection Act
PDF - report Inquiry: Report on the Development of Tourism and Regulation of Visitor Accommodation (Wales) Bill Found: letter adds that the provisions under section 39 need to be read alongside section 183A of the Data Protection Act
PDF - Marshalled List of Amendments - 3 February 2026 Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill Found: (4) In this section, “the data protection legislation” has the same meaning as in the Data Protection Act
PDF - Revised Explanatory Memorandum and Regulatory Impact Assessment - 3 February 2026 Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill Found: Information Commissioner's Office (ICO) is the independent regulatory office dealing with the Data Protection Act
PDF - Building Safety (Wales) Bill as amended at stage 2 Inquiry: Building Safety (Wales) Bill Found: (5) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements
PDF - Building Safety (Wales) Bill Inquiry: Building Safety (Wales) Bill Found: (5) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements
PDF - Marshalled List of Amendments - 3 February 2026 Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill Found: (4) In this section, “the data protection legislation” has the same meaning as in the Data Protection Act
PDF - Development of Tourism and Regulation of Visitor Accommodation (Wales) Bill Inquiry: Report on the Development of Tourism and Regulation of Visitor Accommodation (Wales) Bill Found: (5) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements
PDF - Stage 2 amended Bill (Unchecked) Inquiry: Report on the Development of Tourism and Regulation of Visitor Accommodation (Wales) Bill Found: (5) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements
PDF - 10. Manon Antoniazzi, Chief Executive of the Senedd Inquiry: Introducing more independence and support into the complaints process in the Senedd. Found: There is no need for information to be recorded – in doing so it could breach Data Protection Act.
PDF - Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill, as amended at Stage 3 (UNCHECKED) (PDF 463KB) Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill Found: (2) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements
PDF - Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill, as amended at Stage 3 (UNCHECKED) Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill Found: (2) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements
PDF - Development of Tourism and Regulation of Visitor Accommodation (Wales) Bill Inquiry: Report on the Development of Tourism and Regulation of Visitor Accommodation (Wales) Bill Found: (5) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements
PDF - Stage 2 amended Bill (Checked) Inquiry: Report on the Development of Tourism and Regulation of Visitor Accommodation (Wales) Bill Found: (5) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements
PDF - Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill, as amended at Stage 3 (CHECKED) (PDF 467KB) Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill Found: (2) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements
PDF - Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill, as amended at Stage 3 Inquiry: Report on the Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill Found: (2) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements
PDF - Revised Explanatory Memorandum and Regulatory Impact Assessment – 24 February 2026 Inquiry: Building Safety (Wales) Bill Found: restriction on the disclosure of information or a document; but by virtue of section 183A of the Data Protection Act

Welsh Government Publications
Friday 27th February 2026 Source Page: Single Application Form (SAF) 2026: rules booklet for woodland and organic schemes when claiming Sustainable Farming Scheme Document: Single Application Form (SAF) 2026: rules booklet for woodland and organic schemes when claiming Sustainable Farming Scheme (PDF) Found: accordance with its obligations and duties under the: • Freedom of Information Act 2000 • The Data Protection Act
Friday 27th February 2026 Source Page: Small Grants – Woodland Creation (window 10): rules booklet Document: Small Grants – Woodland Creation (window 10): rules booklet (webpage) Found: in accordance with the obligations and duties under the Freedom of Information Act 2000, the Data Protection Act
Friday 27th February 2026 Source Page: Woodland Creation Grant (window 6): rules booklet Document: Woodland Creation Grant (window 6): rules booklet (webpage) Found: in accordance with the obligations and duties under the Freedom of Information Act 2000, the Data Protection Act
Thursday 26th February 2026 Source Page: Common legislative solutions: a guide to tackling recurring policy issues in legislation Document: Common legislative solutions: a guide to tackling recurring policy issues in legislation (PDF) Found: schedule/1) (failure to comply with a stop notice is an offence) • section 155(1)(b) of the Data Protection Act
Tuesday 24th February 2026 Source Page: Attendance of pupils in maintained schools: 2 September 2025 to 13 February 2026 Document: Attendance of pupils in maintained schools: 2 September 2025 to 13 February 2026 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Monday 23rd February 2026 Source Page: FOI release 26622: Rhos-farch Farm Document: Rhos-farch Farm (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Monday 23rd February 2026 Source Page: Single Application Form (SAF) 2026: rules booklet for Basic Payment Scheme, woodland and organic schemes Document: Single Application Form (SAF) 2026: rules booklet for Basic Payment Scheme, woodland and organic schemes (PDF) Found: accordance with its obligations and duties under the: • Freedom of Information Act 2000 • The Data Protection Act
Thursday 19th February 2026 Source Page: Small Grant Scheme: Food and Drink Festivals and Events Scheme 2026 to 2027: application form Document: Small Grant Scheme: Food and Drink Festivals and Events Scheme 2026 to 2027: application form (webpage) Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004 or the Data Protection Act
Wednesday 18th February 2026 Source Page: FOI release 26596: Glyndŵr National Park Document: Doc 1 (PDF) Found: Information Act 2000 (the “FOIA”), the Environmental Information Regulations 2004 (the “EIR”), the Data Protection Act
Wednesday 18th February 2026 Source Page: FOI release 26606: Nation of Sanctuary Document: Nation of Sanctuary (PDF) Found: data protection principles. 5 ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act
Monday 16th February 2026 Source Page: FOI release 26586: St Ann Street, Chepstow Document: St Ann Street, Chepstow (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Monday 16th February 2026 Source Page: FOI release 26579: St Ann Street, Chepstow Document: St Ann Street, Chepstow (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Monday 16th February 2026 Source Page: FOI release 26571: Bridge House Farm Document: Bridge House Farm (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Thursday 12th February 2026 Source Page: FOI release 26442and26567: Marine Nitrates Development Taskforce Document: Marine Nitrates Development Taskforce (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Thursday 12th February 2026 Source Page: Performance and improvement framework for social services: additional guidance 2023 to 2024 Document: Performance and improvement framework for social services: additional guidance 2023 to 2024 (PDF) Found: collected under this framework is governed by the General Data Protection Regulation (GDPR) and Data Protection Act
Wednesday 11th February 2026 Source Page: Changes to two codes of practice: Part 6 and Special Guardianship Orders Document: Part 6 Code of Practice (Looked After and Accommodated Children): As amended with tracked changes (PDF) Found: Authorities will need to satisfy themselves that they are complying with the Data Protection Act 2018
Wednesday 11th February 2026 Source Page: Changes to two codes of practice: Part 6 and Special Guardianship Orders Document: Part 6 Code of Practice (Looked After and Accommodated Children): As amended (PDF) Found: Authorities will need to satisfy themselves that they are complying with the Data Protection Act 2018
Tuesday 10th February 2026 Source Page: Attendance of pupils in maintained schools: 2 September 2025 to 30 January 2026 Document: Attendance of pupils in maintained schools: 2 September 2025 to 30 January 2026 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Monday 9th February 2026 Source Page: FOI release 26553: Councillors standards Document: Councillors standards (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)
Monday 9th February 2026 Source Page: FOI release 26556: St David’s Day Pilot Document: St David’s Day Pilot (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Thursday 5th February 2026 Source Page: Fair work (National Survey for Wales): April 2024 to March 2025 Document: Fair work (National Survey for Wales): April 2024 to March 2025 (webpage) Found: personal data underlying these statistics is processed in accordance with the requirements of the Data Protection Act
Thursday 5th February 2026 Source Page: FOI release 26544: Buckland Hall Document: Buckland Hall (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Thursday 29th January 2026 Source Page: Young people not in education, employment or training (NEET): October 2024 to September 2025 Document: Young people not in education, employment or training (NEET): October 2024 to September 2025 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Thursday 29th January 2026 Source Page: Evaluation of the elective home education statutory guidance Document: Evaluation of the elective home education statutory guidance (PDF) Found: with such services, in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act
Tuesday 27th January 2026 Source Page: Attendance of pupils in maintained schools: 2 September 2025 to 16 January 2026 Document: Attendance of pupils in maintained schools: 2 September 2025 to 16 January 2026 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Monday 26th January 2026 Source Page: FOI release 26526: Great British Railways Document: Great British Railways (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Wednesday 21st January 2026 Source Page: Labour market statistics (Annual Population Survey): October 2024 to September 2025 Document: Labour market statistics (Annual Population Survey): October 2024 to September 2025 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Tuesday 20th January 2026 Source Page: FOI release 26510: BBC Document: BBC (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Tuesday 20th January 2026 Source Page: FOI release 26383: Dingestow crossing Document: Doc 7 (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Thursday 15th January 2026 Source Page: FOI release 26503: Animal welfare Document: Doc 1 (PDF) Found: Commissioner's Data Sharing Code of Practice of May 2011 1.1.5 Data Protection Legislation : (i) the Data Protection Act
Thursday 15th January 2026 Source Page: FOI release 26503: Animal welfare Document: Animal welfare (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Tuesday 13th January 2026 Source Page: Attendance of pupils in maintained schools: 2 September 2025 to 2 January 2026 Document: Attendance of pupils in maintained schools: 2 September 2025 to 2 January 2026 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Wednesday 7th January 2026 Source Page: General funding round window 3 (Welsh Marine and Fisheries Scheme): guidance Document: General funding round window 3 (Welsh Marine and Fisheries Scheme): guidance (PDF) Found: Freedom of Information Act 2000, the 28 Environmental Information Regulations 2004 and the Data Protection Act
Tuesday 6th January 2026 Source Page: FOI release 26504: Respiratory Protective Equipment Document: Respiratory Protective Equipment (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)
Tuesday 6th January 2026 Source Page: FOI release 26422: Rhydycar West Document: Rhydycar West (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Tuesday 6th January 2026 Source Page: FOI release 26399 and 26498: Water quality Document: Water quality (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Tuesday 6th January 2026 Source Page: FOI release 26401: Rhydycar West Document: Rhydycar West (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Monday 5th January 2026 Source Page: Small Grants - Environment (landscape and pollinators): general rules booklet 2026 Document: Small Grants - Environment (landscape and pollinators): general rules booklet 2026 (webpage) Found: in accordance with the obligations and duties under the Freedom of Information Act 2000, the Data Protection Act
Monday 5th January 2026 Source Page: Woodland Creation Planning Scheme (January 2026): rules booklet Document: Woodland Creation Planning Scheme (January 2026): rules booklet (webpage) Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004 or the Data Protection Act
Monday 22nd December 2025 Source Page: Freedom of Information (FOI): request from the Welsh Government Document: Requesting information from the Welsh Government (webpage) Found: The Data Protection Act 2018, Freedom of Information Act 2000 and the Environmental Information Regulations
Wednesday 17th December 2025 Source Page: FOI release 26284: Llansteffan North Green car park Document: Llansteffan North Green car park (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Wednesday 17th December 2025 Source Page: Sustainable Farming Scheme (2026): universal layer: rules booklet Document: Sustainable Farming Scheme (2026): universal layer: rules booklet (PDF) Found: used by the Welsh Government in accordance with its obligations and duties under the: • The Data Protection Act
Tuesday 16th December 2025 Source Page: FOI release 26391: Cafcass complaints Document: Cafcass complaints (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Tuesday 16th December 2025 Source Page: Significant infrastructure projects (SIP): notification of proposed application Document: Significant infrastructure projects (SIP): notification of proposed application (PDF) Found: supplied by you in this form, is in accordance with the terms of our registration under the Data Protection Act
Tuesday 16th December 2025 Source Page: Attendance of pupils in maintained schools: 2 September to 5 December 2025 Document: Attendance of pupils in maintained schools: 2 September to 5 December 2025 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Tuesday 16th December 2025 Source Page: Remote working (National Survey for Wales): April 2024 to March 2025 Document: Remote working (National Survey for Wales): April 2024 to March 2025 (webpage) Found: personal data underlying these statistics is processed in accordance with the requirements of the Data Protection Act

Welsh Senedd Debates
Group 11: Office of Environmental Governance: disclosure of information and confidentiality (Amendments 16, 17, 18) Thursday 11th December 2025 Mentions: 1: Huw Irranca-Davies (Welsh Labour and Co-operative Party - Ogmore) Amendments 16, 17, 18 in my name make necessary amendments to reflect changes to the Data Protection Act - Link to Speech
2. Development of Tourism and Regulation of Visitor Accommodation (Wales) Bill: Evidence Session 1 Wednesday 5th November 2025 Mentions: 1: None gateways that are in the Bill, and highlights that that has to be read with reference to the Data Protection Act - Link to Speech