Data Protection Act 2018

Alert Sample

View the Parallel Parliament page for the Data Protection Act 2018

Information since 27 Nov 2024, 4:54 a.m.

Data Protection Act 2018 mentioned

Parliamentary Debates
Bus Services (No. 2) Bill [HL] 88 speeches (14,744 words) Report stage Wednesday 2nd April 2025 - Lords Chamber Department for Transport Mentions: 1: None protection legislation”, “personal data” and “processing” have the same meanings as in the Data Protection Act - Link to Speech 2: None protection legislation”, “personal data” and “processing” have the same meanings as in the Data Protection Act - Link to Speech
Bus Services (No. 2) Bill [HL] 87 speeches (16,185 words) Report stage Wednesday 26th March 2025 - Lords Chamber Department for Transport Mentions: 1: None I confirm that this will be carried out in a manner consistent with the Data Protection Act 2018. - Link to Speech 2: None protection legislation”, “personal data” and “processing” have the same meanings as in the Data Protection Act - Link to Speech 3: None protection legislation”, “personal data” and “processing” have the same meanings as in the Data Protection Act - Link to Speech 4: None protection legislation”, “personal data” and “processing” have the same meanings as in the Data Protection Act - Link to Speech 5: None protection legislation”, “personal data” and “processing” have the same meanings as in the Data Protection Act - Link to Speech 6: None protection legislation”, “personal data” and “processing” have the same meanings as in the Data Protection Act - Link to Speech
Varying the Leveson Order 1 speech (294 words) Thursday 20th March 2025 - Written Statements Department for Digital, Culture, Media & Sport Mentions: 1: Lisa Nandy (Lab - Wigan) investigation by the Information Commissioner’s Office into allegations of offences under the Data Protection Act - Link to Speech
Children’s Wellbeing and Schools Bill 127 speeches (39,136 words) Tuesday 18th March 2025 - Commons Chamber Department for Education Mentions: 1: None section, “the data protection legislation” and “processing” have the same meaning as in the Data Protection Act - Link to Speech 2: None section, “the data protection legislation” and “processing” have the same meaning as in the Data Protection Act - Link to Speech

Select Committee Documents
Tuesday 1st April 2025 Correspondence - Correspondence from Sarah Sackman KC MP, Minister for Courts and Legal Services, dated 28 March 2025 relating to the Reform of Local Justice Areas Consultation Justice Committee Found: information regimes (these are primarily the Freedom of Information Act 2000 (FOIA), the Data Protection Act
Tuesday 25th March 2025 Correspondence - Letter from Jen Smith, Chief Executive, Creative Industries Independent Standards Authority, regarding further information regarding CIISA, dated 4 March 2025 Culture, Media and Sport Committee Found: Employment Rights Act 1996 enforcement of certain data subject rights (under Schedule 2 of the Data Protection Act
Tuesday 25th March 2025 Written Evidence - Information Commissioner's Office PBI0008 - Public Bodies Public Bodies - Public Administration and Constitutional Affairs Committee Found: responsibility for promoting and enforcing the UK General Data Protection Regulation (UK GDPR), the Data Protection Act
Tuesday 25th March 2025 Written Evidence - Fiona Watts PBI0013 - Public Bodies Public Bodies - Public Administration and Constitutional Affairs Committee Found: futile effort in trying to engage a Public Body into best adhering to the principles of the Data Protection Act

Written Answers
Recordings: Privacy and Security Asked by: Baroness Bennett of Manor Castle (Green Party - Life peer) Monday 14th April 2025 Question to the Department for Science, Innovation & Technology: To ask His Majesty's Government what assessment they have made of the impacts of life recorders, particularly in regard to privacy and security, and what plans they have to take legal, regulatory or other action in response. Answered by Baroness Jones of Whitchurch - Baroness in Waiting (HM Household) (Whip) All UK organisations processing personal data must comply with UK GDPR and the Data Protection Act (DPA) 2018. This applies to all technologies, including AI-based life recorders. The UK GDPR and the DPA, are risk-based and technology neutral, ensuring organisations process data lawfully, fairly, and transparently. On data security, the UK has strong safeguards, regulatory oversight, and enforcement to ensure responsible data handling. We continuously assess evolving threats to UK data and will take further action if necessary to protect national security.
Data Protection: Age of Consent Asked by: Sorcha Eastwood (Alliance - Lagan Valley) Wednesday 9th April 2025 Question to the Department for Science, Innovation & Technology: To ask the Secretary of State for Science, Innovation and Technology, what recent assessment he has made of the potential merits of raising the digital age of consent. Answered by Feryal Clark - Parliamentary Under Secretary of State (Department for Science, Innovation and Technology) When Information Society Services, such as social media or live streaming sites, rely on consent to process children’s data, consent is only lawful in respect of children under the age of 13 when parental authority has been granted. The current age of consent was set by Parliament in the Data Protection Act 2018. We will continue to keep the evidence for and against change in this area under review.
Motability: Payments Asked by: Nick Timothy (Conservative - West Suffolk) Tuesday 8th April 2025 Question to the Department for Work and Pensions: To ask the Secretary of State for Work and Pensions, if she will make an estimate of the total (a) value and (b) number of payments made by her Department to Motability in each year since 2010. Answered by Stephen Timms - Minister of State (Department for Work and Pensions) The Department for Work and Pensions retains financial information for 7 years in compliance with the fifth principle of the Data Protection Act, therefore we are unable to provide historic data back to 2010. We can provide the requested estimated total Motability values data for the previous three calendar years, DWP has paid: 2022 - c£607 million 2023 - c£600 million 2024 - c£600 million We are unable to provide volumes data, and value data for earlier years within the timescales required for this request, due to the time required to interrogate our systems to obtain this level of information.
Police: ICT Asked by: Baroness Jones of Moulsecoomb (Green Party - Life peer) Monday 31st March 2025 Question to the Home Office: To ask His Majesty's Government what assessment they have made of the human rights implications of data-driven policing systems that rely on geographic and personal data. Answered by Lord Hanson of Flint - Minister of State (Home Office) There is a comprehensive legal framework governing the use of data by policing, such as the Police and Criminal Evidence Act (PACE) 1984, UK General Data Protection Regulation and the Data Protection Act 2018, and the Human Rights Act 1998. The access and use of data on policing databases is reviewed and the Human Rights Act is considered and incorporated into policies relating to these datasets.
Internet: Data Protection Asked by: Rupa Huq (Labour - Ealing Central and Acton) Friday 28th March 2025 Question to the Department for Science, Innovation & Technology: To ask the Secretary of State for Science, Innovation and Technology, what steps his Department is taking to help prevent the public provision of personally identifiable information online. Answered by Chris Bryant - Minister of State (Department for Culture, Media and Sport) All organisations in the UK that process personal data must comply with the requirements of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA). The legislation sets out a series of principles with which organisations must comply. These include the need to process personal data lawfully, fairly, transparently and securely, unless certain limited exemptions apply. The legislation also gives people rights in relation to their personal data, such as the right to seek access to it, object to its processing or seek its erasure. The legislation does not prevent individuals posting personal data online if it is done for domestic purposes, such as messaging friends, or sharing photos with their social networks, but the platforms that host the data will be subject to the legislation. If individuals are concerned that organisations are processing their personal data unlawfully, they can complain to the Information Commissioner's Office which is responsible for regulating the legislation.
Medical Records: Artificial Intelligence Asked by: Lord Taylor of Warwick (Non-affiliated - Life peer) Wednesday 19th March 2025 Question to the Department of Health and Social Care: To ask His Majesty's Government what assessment they have made of the use of artificial intelligence technologies to streamline NHS patient records to allow records to be accessible across different hospitals and practices. Answered by Baroness Merron - Parliamentary Under-Secretary (Department of Health and Social Care) Improved digital and data infrastructure, such as Electronic Patient Records, are essential foundations for digital transformation. Many National Health Service trusts currently have out-of-date computers and devices, and poor clinical system interoperability limiting access to clinical information at the point of care. New tools that use artificial intelligence (AI) to analyse text records and make them accessible for hospitals are currently being trialled in several NHS trusts. These tools can analyse patient records, doctors’ notes and letters to recognise their meaning and accurately assign the correct details to the patient record in a more structured and accessible fashion. Early trials have shown positive results, such as helping identify bottlenecks in patient journeys through the system and facilitating recruitment to clinical trials, as well as improved communication between different hospitals and practices. NHS England is developing guidance for those adopting or considering adopting ambient voice technologies, where the latest generation uses advanced AI technologies to convert spoken words into text used for clinical documentation, such as patient records. This process needs minimal intervention from users, though they still need to review and approve the text produced. They are currently being trialled in several local organisations and early results show they can significantly reduce the time clinical staff need to spend on administration. The NHS AI Lab and Sciencewise held a public dialogue on how the public feels decisions should be made about access to their personal health data for AI purposes. The NHS AI Lab conducted a discovery exercise to design approaches based on insights from the public, which is now informing broader data stewardship initiatives, including where AI is used in relation to patient records. There are strict safeguards in place throughout the NHS to protect data. All providers of services which handle patient data must protect that data in line with the UK General Data Protection Regulation, and Data Protection Act 2018.

Written Answers

Recordings: Privacy and Security
Asked by: Baroness Bennett of Manor Castle (Green Party - Life peer)
Monday 14th April 2025

Question to the Department for Science, Innovation & Technology:

To ask His Majesty's Government what assessment they have made of the impacts of life recorders, particularly in regard to privacy and security, and what plans they have to take legal, regulatory or other action in response.

Answered by Baroness Jones of Whitchurch - Baroness in Waiting (HM Household) (Whip)

All UK organisations processing personal data must comply with UK GDPR and the Data Protection Act (DPA) 2018. This applies to all technologies, including AI-based life recorders. The UK GDPR and the DPA, are risk-based and technology neutral, ensuring organisations process data lawfully, fairly, and transparently. On data security, the UK has strong safeguards, regulatory oversight, and enforcement to ensure responsible data handling. We continuously assess evolving threats to UK data and will take further action if necessary to protect national security.

Data Protection: Age of Consent
Asked by: Sorcha Eastwood (Alliance - Lagan Valley)
Wednesday 9th April 2025

Question to the Department for Science, Innovation & Technology:

To ask the Secretary of State for Science, Innovation and Technology, what recent assessment he has made of the potential merits of raising the digital age of consent.

Answered by Feryal Clark - Parliamentary Under Secretary of State (Department for Science, Innovation and Technology)

When Information Society Services, such as social media or live streaming sites, rely on consent to process children’s data, consent is only lawful in respect of children under the age of 13 when parental authority has been granted. The current age of consent was set by Parliament in the Data Protection Act 2018. We will continue to keep the evidence for and against change in this area under review.

Motability: Payments
Asked by: Nick Timothy (Conservative - West Suffolk)
Tuesday 8th April 2025

Question to the Department for Work and Pensions:

To ask the Secretary of State for Work and Pensions, if she will make an estimate of the total (a) value and (b) number of payments made by her Department to Motability in each year since 2010.

Answered by Stephen Timms - Minister of State (Department for Work and Pensions)

The Department for Work and Pensions retains financial information for 7 years in compliance with the fifth principle of the Data Protection Act, therefore we are unable to provide historic data back to 2010. We can provide the requested estimated total Motability values data for the previous three calendar years, DWP has paid:

2022 - c£607 million

2023 - c£600 million

2024 - c£600 million

We are unable to provide volumes data, and value data for earlier years within the timescales required for this request, due to the time required to interrogate our systems to obtain this level of information.

Police: ICT
Asked by: Baroness Jones of Moulsecoomb (Green Party - Life peer)
Monday 31st March 2025

Question to the Home Office:

To ask His Majesty's Government what assessment they have made of the human rights implications of data-driven policing systems that rely on geographic and personal data.

Answered by Lord Hanson of Flint - Minister of State (Home Office)

There is a comprehensive legal framework governing the use of data by policing, such as the Police and Criminal Evidence Act (PACE) 1984, UK General Data Protection Regulation and the Data Protection Act 2018, and the Human Rights Act 1998.

The access and use of data on policing databases is reviewed and the Human Rights Act is considered and incorporated into policies relating to these datasets.

Internet: Data Protection
Asked by: Rupa Huq (Labour - Ealing Central and Acton)
Friday 28th March 2025

Question to the Department for Science, Innovation & Technology:

To ask the Secretary of State for Science, Innovation and Technology, what steps his Department is taking to help prevent the public provision of personally identifiable information online.

Answered by Chris Bryant - Minister of State (Department for Culture, Media and Sport)

All organisations in the UK that process personal data must comply with the requirements of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA).

The legislation sets out a series of principles with which organisations must comply. These include the need to process personal data lawfully, fairly, transparently and securely, unless certain limited exemptions apply. The legislation also gives people rights in relation to their personal data, such as the right to seek access to it, object to its processing or seek its erasure.

The legislation does not prevent individuals posting personal data online if it is done for domestic purposes, such as messaging friends, or sharing photos with their social networks, but the platforms that host the data will be subject to the legislation.

If individuals are concerned that organisations are processing their personal data unlawfully, they can complain to the Information Commissioner's Office which is responsible for regulating the legislation.

Medical Records: Artificial Intelligence
Asked by: Lord Taylor of Warwick (Non-affiliated - Life peer)
Wednesday 19th March 2025

Question to the Department of Health and Social Care:

To ask His Majesty's Government what assessment they have made of the use of artificial intelligence technologies to streamline NHS patient records to allow records to be accessible across different hospitals and practices.

Answered by Baroness Merron - Parliamentary Under-Secretary (Department of Health and Social Care)

Improved digital and data infrastructure, such as Electronic Patient Records, are essential foundations for digital transformation. Many National Health Service trusts currently have out-of-date computers and devices, and poor clinical system interoperability limiting access to clinical information at the point of care.

New tools that use artificial intelligence (AI) to analyse text records and make them accessible for hospitals are currently being trialled in several NHS trusts. These tools can analyse patient records, doctors’ notes and letters to recognise their meaning and accurately assign the correct details to the patient record in a more structured and accessible fashion. Early trials have shown positive results, such as helping identify bottlenecks in patient journeys through the system and facilitating recruitment to clinical trials, as well as improved communication between different hospitals and practices.

NHS England is developing guidance for those adopting or considering adopting ambient voice technologies, where the latest generation uses advanced AI technologies to convert spoken words into text used for clinical documentation, such as patient records. This process needs minimal intervention from users, though they still need to review and approve the text produced. They are currently being trialled in several local organisations and early results show they can significantly reduce the time clinical staff need to spend on administration.

The NHS AI Lab and Sciencewise held a public dialogue on how the public feels decisions should be made about access to their personal health data for AI purposes. The NHS AI Lab conducted a discovery exercise to design approaches based on insights from the public, which is now informing broader data stewardship initiatives, including where AI is used in relation to patient records. There are strict safeguards in place throughout the NHS to protect data. All providers of services which handle patient data must protect that data in line with the UK General Data Protection Regulation, and Data Protection Act 2018.

Secondary Legislation
Health and Social Care Information Standards (Procedure) Regulations 2025 These Regulations make provision about the procedure to be followed in connection with the preparation and publication of an information standard under section 250 of the Health and Social Care Act 2012 (c. 7) (“the 2012 Act”). Department of Health and Social Care Parliamentary Status - Text of Legislation - Draft affirmative Laid: Tuesday 25th March - In Force: Not stated Found: 22 of Schedule 9 of the Health and Care Act 2022 and paragraph 172 of Schedule 19(1) of the Data Protection Act
Online Safety (CSEA Content Reporting by Regulated User-to-User Service Providers) Regulations 2025 Section 66 of the Online Safety Act 2023 (“OSA”) requires certain providers of regulated user-to-user services to report child sexual abuse and exploitation content (“CSEA content”) to the National Crime Agency (“NCA”). If these providers are already reporting CSEA to a body which is exercising functions similar to the NCA, then this content is not required by section 66 to be reported to the NCA. Home Office Parliamentary Status - Text of Legislation - Made negative Laid: Thursday 20th March - In Force: 3 Nov 2025 Found: this regulation, “data protection legislation” has the same meaning as in section 3 of the Data Protection Act

Secondary Legislation

Health and Social Care Information Standards (Procedure) Regulations 2025
These Regulations make provision about the procedure to be followed in connection with the preparation and publication of an information standard under section 250 of the Health and Social Care Act 2012 (c. 7) (“the 2012 Act”).
Department of Health and Social Care

Parliamentary Status - Text of Legislation - Draft affirmative
Laid: Tuesday 25th March - In Force: Not stated

Found: 22 of Schedule 9 of the Health and Care Act 2022 and paragraph 172 of Schedule 19(1) of the Data Protection Act

Online Safety (CSEA Content Reporting by Regulated User-to-User Service Providers) Regulations 2025
Section 66 of the Online Safety Act 2023 (“OSA”) requires certain providers of regulated user-to-user services to report child sexual abuse and exploitation content (“CSEA content”) to the National Crime Agency (“NCA”). If these providers are already reporting CSEA to a body which is exercising functions similar to the NCA, then this content is not required by section 66 to be reported to the NCA.
Home Office

Parliamentary Status - Text of Legislation - Made negative
Laid: Thursday 20th March - In Force: 3 Nov 2025

Found: this regulation, “data protection legislation” has the same meaning as in section 3 of the Data Protection Act

Parliamentary Research
Product Regulation and Metrology Bill [HL] 2024-25 - CBP-10224 Mar. 27 2025 Found: Data protection legislation would have the same meaning as in the Data Protection Act 2018.

Bill Documents
Apr. 15 2025 HL Bill 81 Running list of amendments – 15 April 2025 Employment Rights Bill 2024-26 Amendment Paper Found: of the passing of this Act and every 12 months thereafter, subject to the provisions of the Data Protection Act
Apr. 14 2025 HL Bill 81 Running list of amendments – 14 April 2025 Employment Rights Bill 2024-26 Amendment Paper Found: of the passing of this Act and every 12 months thereafter, subject to the provisions of the Data Protection Act
Apr. 12 2025 Bill 221 2024-25 (as introduced) Steel Industry (Special Measures) Act 2024-26 Bill Found: information in contravention of the data protection legislation, within the meaning of the Data Protection Act
Apr. 12 2025 HL Bill 94 (as brought from the Commons) Steel Industry (Special Measures) Act 2024-26 Bill Found: information in contravention of the data protection legislation, within the meaning of the Data Protection Act
Apr. 12 2025 Bill 221 2024-25 (as introduced) - large print Steel Industry (Special Measures) Act 2024-26 Bill Found: information in contravention of the data protection legislation, within the meaning of the Data Protection Act
Apr. 10 2025 HL Bill 81 Running list of amendments – 10 April 2025 Employment Rights Bill 2024-26 Amendment Paper Found: of the passing of this Act and every 12 months thereafter, subject to the provisions of the Data Protection Act
Apr. 09 2025 Notices of Amendments as at 9 April 2025 Data (Use and Access) Bill [HL] 2024-26 Amendment Paper Found: regulations make provision requiring the Information Commission (under section 114 of the Data Protection Act
Apr. 08 2025 HL Bill 81 Running list of amendments - 8 April 2025 Employment Rights Bill 2024-26 Amendment Paper Found: of the passing of this Act and every 12 months thereafter, subject to the provisions of the Data Protection Act
Apr. 07 2025 Notices of Amendments as at 7 April 2025 Data (Use and Access) Bill [HL] 2024-26 Amendment Paper Found: regulations make provision requiring the Information Commission (under section 114 of the Data Protection Act
Apr. 03 2025 HL Bill 81 Running list of amendments - 3 April 2025 Employment Rights Bill 2024-26 Amendment Paper Found: of the passing of this Act and every 12 months thereafter, subject to the provisions of the Data Protection Act
Apr. 02 2025 Notices of Amendments as at 2 April 2025 Data (Use and Access) Bill [HL] 2024-26 Amendment Paper Found: regulations make provision requiring the Information Commission (under section 114 of the Data Protection Act
Apr. 02 2025 HL Bill 81 Running list of amendments - 2 April 2025 Employment Rights Bill 2024-26 Amendment Paper Found: of the passing of this Act and every 12 months thereafter, subject to the provisions of the Data Protection Act
Apr. 02 2025 HL Bill 93 (as amended on Report) Mental Health Bill [HL] 2024-26 Bill Found: (3) In this section “the data protection legislation” has the same meaning as in the Data Protection Act
Apr. 02 2025 HL Bill 92 (as amended on Report) Bus Services (No. 2) Bill [HL] 2024-26 Bill Found: protection legislation”, “personal data” and “processing” have the same meanings as in the Data Protection Act
Apr. 01 2025 HL Bill 81 - Running list of amendments - 1 April 2025 Employment Rights Bill 2024-26 Amendment Paper Found: of the passing of this Act and every 12 months thereafter, subject to the provisions of the Data Protection Act
Apr. 01 2025 Written evidence submitted by Judith Ratcliffe, Privacy Professional and UK Citizen (CPB24) Crime and Policing Bill 2024-26 Written evidence Found: In this Chapter "the Data Protection Legislation”, means the UK-GDPR, the Data Protection Act 2018
Mar. 31 2025 HL Bill 81 Running list of amendments - 31 March 2025 Employment Rights Bill 2024-26 Amendment Paper Found: of the passing of this Act and every 12 months thereafter, subject to the provisions of the Data Protection Act
Mar. 31 2025 HL Bill 72-II Second marshalled list for Report Bus Services (No. 2) Bill [HL] 2024-26 Amendment Paper Found: protection legislation”, “personal data” and “processing” have the same meanings as in the Data Protection Act
Mar. 28 2025 Bill 212 2024-25 (as amended in Public Bill Committee) - large print Terminally Ill Adults (End of Life) Bill 2024-26 Bill Found: (3) 25 In this section “the data protection legislation” has the same meaning as in the Data Protection Act
Mar. 28 2025 Bill 212 2024-25 (as amended in Public Bill Committee) Terminally Ill Adults (End of Life) Bill 2024-26 Bill Found: ). 35(3) In this section “the data protection legislation” has the same meaning as in the Data Protection Act
Mar. 28 2025 Notices of Amendments as at 28 March 2025 Data (Use and Access) Bill [HL] 2024-26 Amendment Paper Found: regulations make provision requiring the Information Commission (under section 114 of the Data Protection Act
Mar. 28 2025 HL Bill 81 Running list of amendments - 28 March 2025 Employment Rights Bill 2024-26 Amendment Paper Found: of the passing of this Act and every 12 months thereafter, subject to the provisions of the Data Protection Act
Mar. 27 2025 Bill 213 EN 2024-25 - large print Football Governance Bill [HL] 2024-26 Explanatory Notes Found: Subsection (8) also defines the data protection legislation by reference to section 3(9) of the Data Protection Act
Mar. 27 2025 Bill 213 EN 2024-25 Football Governance Bill [HL] 2024-26 Explanatory Notes Found: Subsection (8) also defines the data protection legislation by reference to section 3(9) of the Data Protection Act
Mar. 27 2025 Bill 213 2024-25 (as brought from the House of Lords) - large print Football Governance Bill [HL] 2024-26 Bill Found: (8) In this section— 15“the data protection legislation” has the same meaning as in the Data Protection Act
Mar. 27 2025 Bill 213 2024-25 (as brought from the House of Lords) Football Governance Bill [HL] 2024-26 Bill Found: 25(8) In this section— “the data protection legislation” has the same meaning as in the Data Protection Act
Mar. 27 2025 Product Regulation and Metrology Bill [HL] 2024-25 Product Regulation and Metrology Bill [HL] 2024-26 Briefing papers Found: Data protection legislation would have the same meaning as in the Data Protection Act 2018.
Mar. 25 2025 All proceedings up to 25 March 2025 at Public Bill Committee Stage Terminally Ill Adults (End of Life) Bill 2024-26 Bill proceedings: Commons Found: (3) In this section “the data protection legislation” has the same meaning as in the Data Protection Act
Mar. 25 2025 Public Bill Committee Amendments as at 25 March 2025 Terminally Ill Adults (End of Life) Bill 2024-26 Amendment Paper Found: (3) In this section “the data protection legislation” has the same meaning as in the Data Protection Act
Mar. 25 2025 Notices of Amendments as at 25 March 2025 Data (Use and Access) Bill [HL] 2024-26 Amendment Paper Found: regulations make provision requiring the Information Commission (under section 114 of the Data Protection Act
Mar. 24 2025 Notices of Amendments as at 24 March 2025 Terminally Ill Adults (End of Life) Bill 2024-26 Amendment Paper Found: (3) In this section “the data protection legislation” has the same meaning as in the Data Protection Act
Mar. 24 2025 HL Bill 72-I Marshalled list for Report Bus Services (No. 2) Bill [HL] 2024-26 Amendment Paper Found: protection legislation”, “personal data” and “processing” have the same meanings as in the Data Protection Act
Mar. 21 2025 Notices of Amendments as at 21 March 2025 Terminally Ill Adults (End of Life) Bill 2024-26 Amendment Paper Found: (3) In this section “the data protection legislation” has the same meaning as in the Data Protection Act
Mar. 21 2025 HL Bill 72 Running list of amendments – 21 March 2025 Bus Services (No. 2) Bill [HL] 2024-26 Amendment Paper Found: protection legislation”, “personal data” and “processing” have the same meanings as in the Data Protection Act
Mar. 20 2025 Notices of Amendments as at 20 March 2025 Data (Use and Access) Bill [HL] 2024-26 Amendment Paper Found: regulations make provision requiring the Information Commission (under section 114 of the Data Protection Act
Mar. 20 2025 Bill 206 2024-25 (as amended in Public Bill Committee) - large print Institute for Apprenticeships and Technical Education (Transfer of Functions etc) Bill [HL] 2024-26 Bill Found: or to partner authorities are to be read accordingly. 11 Amendment of Schedule 7 to the Data Protection Act
Mar. 20 2025 HL Bill 84 Explanatory Notes Children’s Wellbeing and Schools Bill 2024-26 Explanatory Notes Found: subject to “the data protection legislation” – namely, that listed in section 3(9) of the Data Protection Act
Mar. 20 2025 Children's Wellbeing and Schools Bill: Delegated Powers Memorandum Children’s Wellbeing and Schools Bill 2024-26 Delegated Powers Memorandum Found: and Young Persons Act 1933 “the Department” means the Department for Education “DPA” means Data Protection Act
Mar. 20 2025 HL Bill 72 Running list of amendments - 20 March 2025 Bus Services (No. 2) Bill [HL] 2024-26 Amendment Paper Found: protection legislation”, “personal data” and “processing” have the same meanings as in the Data Protection Act
Mar. 19 2025 Notices of Amendments as at 19 March 2025 Data (Use and Access) Bill [HL] 2024-26 Amendment Paper Found: regulations make provision requiring the Information Commission (under section 114 of the Data Protection Act
Mar. 19 2025 All proceedings up to 18 March 2025 at Public Bill Committee Stage Border Security, Asylum and Immigration Bill 2024-26 Bill proceedings: Commons Found: following Clause— “Exemptions from the UK GDPR: illegal migration and foreign criminals (1) The Data Protection Act
Mar. 19 2025 Bill 205 2024-25 (as amended in Public Bill Committee) Border Security, Asylum and Immigration Bill 2024-26 Bill Found: 2018 In Schedule 7 to the Data Protection Act 2018 (competent authorities for the purposes of
Mar. 19 2025 HL Bill 84 (as brought from the Commons) Children’s Wellbeing and Schools Bill 2024-26 Bill Found: 15(10) In this section— “the data protection legislation” has the same meaning as in the Data Protection Act
Mar. 19 2025 European Convention on Human Rights Memorandum Children’s Wellbeing and Schools Bill 2024-26 Human rights memorandum Found: any disclosure will still need to be compatible with Convention rights, the UK GDPR and the Data Protection Act
Mar. 19 2025 HL Bill 72 Running list of amendments – 19 March 2025 Bus Services (No. 2) Bill [HL] 2024-26 Amendment Paper Found: protection legislation”, “personal data” and “processing” have the same meanings as in the Data Protection Act
Mar. 18 2025 All proceedings up to 11 March 2025 at Report Stage Employment Rights Bill 2024-26 Bill proceedings: Commons Found: of the passing of this Act and every 12 months thereafter, subject to the provisions of the Data Protection Act
Mar. 18 2025 Notices of Amendments as at 18 March 2025 Data (Use and Access) Bill [HL] 2024-26 Amendment Paper Found: regulations make provision requiring the Information Commission (under section 114 of the Data Protection Act

Department Publications - Policy and Engagement
Saturday 12th April 2025 Department for Business and Trade Source Page: Steel Industry (Special Measures) Bill Document: (PDF) Found: information in contravention of the data protection legislation, within the meaning of the Data Protection Act
Monday 31st March 2025 Department for Energy Security & Net Zero Source Page: Innovative hydrogen-to-power projects Document: (PDF) Found: may be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act
Tuesday 25th March 2025 Department of Health and Social Care Source Page: Health and Care Act 2022: information standards Document: (PDF) Found: Additionally, the General Data Protection Regulation (GDPR) and the Data Protection Act 2018 govern
Tuesday 25th March 2025 Department for Transport Source Page: Net zero ports: challenges and opportunities Document: (PDF) Found: The Department will process your personal data in accordance with the Data Protection Act (DPA) and

Department Publications - Guidance
Thursday 10th April 2025 Department for Education Source Page: DfE funding agreements and contracts: 2025 to 2026 Document: (PDF) Found: "DPA 2018" Data Protection Act 2018.
Wednesday 9th April 2025 Department for Digital, Culture, Media & Sport Source Page: Applying to the Local Youth Transformation Fund Document: (webpage) Found: competition in May 2025.Privacy noticeAll information will be processed in compliance with the Data Protection Act
Monday 7th April 2025 Department for Energy Security & Net Zero Source Page: Hydrogen Allocation Round 2 (HAR2): due diligence and cost assurance Document: (Excel) Found: obligations (including, but not limited to, under the Freedom of Information Act 2000 (FOIA), the Data Protection Act
Thursday 3rd April 2025 Department for Education Source Page: School census 2025 to 2026: technical information Document: (PDF) Found: Data protection and data sharing The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act
Thursday 3rd April 2025 Ministry of Justice Source Page: Learning and skills and library services for adult prisons in Wales: PSI 2/2015 Document: (PDF) Found: Reference section: • Human Rights Act 1998 and European Convention on Human Rights • Data Protection Act
Monday 31st March 2025 Home Office Source Page: Investigatory Powers Act: draft codes of practice, March 2025 Document: (PDF) Found: Services Act 1994 43 The Counter-Terrorism Act 2008 44 The Human Rights Act 1998 44 The Data Protection Act
Monday 31st March 2025 Home Office Source Page: Investigatory Powers Act: draft codes of practice, March 2025 Document: (PDF) Found: personal data’ for the purposes of the Act is as defined in section 86(7)(a) to (e)of the Data Protection Act
Monday 31st March 2025 Home Office Source Page: Investigatory Powers Act: draft codes of practice, March 2025 Document: (PDF) Found: personal data’ for the purposes of the Act is as defined in section 86(7)(a) to (e)of the Data Protection Act
Monday 31st March 2025 Home Office Source Page: Investigatory Powers Act: draft codes of practice, March 2025 Document: (PDF) Found: Services Act 1994 73 The Counter-Terrorism Act 2008 74 The Human Rights Act 1998 74 The Data Protection Act
Monday 31st March 2025 Home Office Source Page: Investigatory Powers Act: draft codes of practice, March 2025 Document: (PDF) Found: Services Act 1994 43 The Counter-Terrorism Act 2008 44 The Human Rights Act 1998 44 The Data Protection Act
Monday 31st March 2025 Home Office Source Page: Investigatory Powers Act: draft codes of practice, March 2025 Document: (PDF) Found: Services Act 1994 73 The Counter-Terrorism Act 2008 74 The Human Rights Act 1998 74 The Data Protection Act
Thursday 27th March 2025 HM Treasury Source Page: OFSI General Licence INT/2023/2883496 Document: (PDF) Found: to third parties only in compliance with the UK General Data Protection Regulation and the Data Protection Act
Thursday 27th March 2025 Home Office Source Page: Pre-entry health assessments guidance for UK refugees Document: (PDF) Found: Calmette–Guérin BHIVA British HIV Association BIS British Infection Society CXR Chest X-ray DPA Data Protection Act
Monday 24th March 2025 Department for Education Source Page: Early years teacher degree apprenticeship: guidance for training providers Document: (PDF) Found: are not qualified teachers to carry out specified work in schools • Equality Act 2010 • Data Protection Act
Monday 24th March 2025 Department for Energy Security & Net Zero Source Page: Clean Heat Market Mechanism: heat pump installation certification Document: (PDF) Found: Consumer Rights Act 2015, Consumer Protection from Unfair Trading Regulations 2008 and the Data Protection Act
Monday 24th March 2025 Ministry of Housing, Communities and Local Government Source Page: Chapter 5: Circumstances where a remediation contribution order may be appropriate Document: developer remediation contract (PDF) Found: the European Union (Withdrawal) Act 2018 (and see section 205(4)) (the “UK GDPR”); (C) the Data Protection Act
Friday 21st March 2025 Department for Energy Security & Net Zero Source Page: Mayoral Renewables Fund Document: (PDF) Found: Data Protection Act 2018 (DPA) in the event that a request for information is received).
Friday 21st March 2025 Department for Energy Security & Net Zero Source Page: Mayoral Renewables Fund Document: (PDF) Found: Data Protection Act 2018 (DPA) in the event that a request for information is received).

Department Publications - Statistics
Tuesday 8th April 2025 Department for Science, Innovation & Technology Source Page: Cyber Governance Code of Practice - evaluation survey Document: (PDF) Found: as set out in Articles 13 and 14 of UK General Data Protection Regulation (UK GDPR) and the Data Protection Act
Thursday 27th March 2025 Ministry of Justice Source Page: Process evaluation of the Victim Notification Scheme Document: (PDF) Found: The MoJ complies with the Data Protection Act and GDPR laws and the Data Protection Team advised on
Thursday 20th March 2025 Home Office Source Page: Independent Review of Disclosure and Fraud Offences Document: (PDF) Found: governed by UK General Data Protection Regu- lations (GDPR),107 as implemented through the Data Protection Act
Thursday 20th March 2025 Home Office Source Page: Independent Review of Disclosure and Fraud Offences Document: (PDF) Found: 107 Regulation (EU) 2016/679 of the European Parlia- ment and of the Council (2016) 108 Data Protection Act
Wednesday 19th March 2025 Department for Science, Innovation & Technology Source Page: Independent review of data, statistics and research on sex and gender Document: (PDF) Found: particular as set out in the UK General Data Protection Regulation (“UK GDPR”) and in the Data Protection Act

Department Publications - Consultations
Monday 7th April 2025 Department for Business and Trade Source Page: Package travel legislation: consultation on proposed amendments Document: (PDF) Found: disclosed in accordance with UK legislation: • the Freedom of Information Act 2000 • the Data Protection Act
Monday 31st March 2025 Ministry of Justice Source Page: Reform of Local Justice Areas Document: (PDF) Found: information regimes (these are primarily the Freedom of Information Act 2000 (FOIA), the Data Protection Act
Monday 31st March 2025 Ministry of Justice Source Page: Reform of Local Justice Areas Document: (PDF) Found: information regimes (these are primarily the Freedom of Information Act 2000 (FOIA), the Data Protection Act
Wednesday 19th March 2025 Home Office Source Page: National day for victims and survivors of terrorism Document: (PDF) Found: Office has a statutory duty to comply with these requests in accordance with FOI Act 2000 and Data Protection Act
Wednesday 19th March 2025 Home Office Source Page: National day for victims and survivors of terrorism Document: (PDF) Found: Privacy Information Notice (PIN) General Processing (UK GDPR & Part 2, Data Protection Act

Department Publications - Policy paper
Tuesday 1st April 2025 Home Office Source Page: Crime and Policing Bill 2025: Keeling Schedules Document: (PDF) Found: (6) In this paragraph, “the data protection legislation” has the same meaning as in the Data Protection Act
Tuesday 25th March 2025 Home Office Source Page: Move On grant: funding instruction Document: (PDF) Found: Enforcement Directive and any applicable implementing Laws as amended from time to time, (ii) the Data Protection Act
Monday 24th March 2025 Home Office Source Page: Forensic Science Regulator code of practice Document: (PDF) Found: case is concluded. 32.1.4 Material supplied by the initial forensic unit is subject to the Data Protection Act
Monday 24th March 2025 Home Office Source Page: Forensic Science Regulator code of practice Document: (PDF) Found: case is concluded. 32.1.4 Material supplied by the initial forensic unit is subject to the Data Protection Act

Department Publications - Transparency
Friday 28th March 2025 Department for Transport Source Page: Civil Aviation Authority framework agreement Document: (PDF) Found: under the Freedom of Information Act 2000, the environmental information regulations, or the Data Protection Act

Department Publications - Research
Monday 24th March 2025 Department of Health and Social Care Source Page: The state of cyber security in adult social care Document: (PDF) Found: The UK General Data Protection Regulation (UK GDPR) and the UK Data Protection Act 2018 (DPA) Ipsos

Non-Departmental Publications - Guidance and Regulation
Apr. 14 2025 HM Revenue & Customs Source Page: Authorise an agent to register or amend a VAT group Document: (PDF) Guidance and Regulation Found: How we use your information HMRC is a Data Controller under the Data Protection Act 1998.
Apr. 10 2025 Defence and Security Accelerator Source Page: Competition: Innovation in Support of Operations (Phase 2) Document: (PDF) Guidance and Regulation Found: In this clause, "data protection legislation" has the same meaning as in the Data Protection Act 2018
Apr. 03 2025 Nuclear Waste Services Source Page: LLWR's Socio-economic Fund Document: LLWR's Socio-economic Fund (webpage) Guidance and Regulation Found: It is made under the Data Protection Act 2018, section 36(1).
Apr. 03 2025 HM Prison and Probation Service Source Page: Learning and skills and library services for adult prisons in Wales: PSI 2/2015 Document: (PDF) Guidance and Regulation Found: Reference section: • Human Rights Act 1998 and European Convention on Human Rights • Data Protection Act
Mar. 29 2025 UK Space Agency Source Page: National Space Innovation Programme – Call 2 Document: (webpage) Guidance and Regulation Found: commissions or agencies from time to time carrying out functions on its behalf;DPA 2018 means the Data Protection Act
Mar. 28 2025 Office of Financial Sanctions Implementation Source Page: OFSI General licence INT/2025/5787748 Document: (PDF) Guidance and Regulation Found: to third parties only in compliance with the UK General Data Protection Regulation and the Data Protection Act
Mar. 19 2025 Ofqual Source Page: Memorandum of Understanding between Ofqual and The Standards and Testing Agency (STA) Document: (PDF) Guidance and Regulation Found: be handled in accordance with the requirements of the Freedom of Information Act 2000, the Data Protection Act

Non-Departmental Publications - Services
Apr. 11 2025 HM Revenue & Customs Source Page: Child Benefit: allow someone to help you with your award (CH105) Document: (PDF) Services Found: This is in accordance with the ‘subject access rules’ of the Data Protection Act 2018 and the General

Non-Departmental Publications - News and Communications
Apr. 03 2025 Disclosure and Barring Service Source Page: Industry leaders launch new hospitality sector hiring toolkit Document: here (PDF) News and Communications Found: Legal responsibilities 08 Data protection Act 2018 considerations Equality Act 2010 and Public Sector
Mar. 25 2025 Committee on Standards in Public Life Source Page: CSPL Early Warning Signs report: responses to open consultation Document: (PDF) News and Communications Found: responsibility for promoting and enforcing the UK General Data Protection Regulation (UK GDPR), the Data Protection Act

Non-Departmental Publications - Open consultation
Mar. 31 2025 Judicial Office Source Page: Reform of Local Justice Areas Document: (PDF) Open consultation Found: information regimes (these are primarily the Freedom of Information Act 2000 (FOIA), the Data Protection Act
Mar. 31 2025 Judicial Office Source Page: Reform of Local Justice Areas Document: (PDF) Open consultation Found: information regimes (these are primarily the Freedom of Information Act 2000 (FOIA), the Data Protection Act

Non-Departmental Publications - Statistics
Mar. 20 2025 Independent Chief Inspector of Borders and Immigration Source Page: An inspection of the Home Office’s management of fee waiver applications (August 2024 – November 2024) Document: (PDF) Statistics Found: breach of its own data retention policies, which are intended to ensure compliance with the Data Protection Act
Mar. 20 2025 Independent Chief Inspector of Borders and Immigration Source Page: An inspection of the Home Office’s management of fee waiver applications (August 2024 – November 2024) Document: (PDF) Statistics Found: breach of its own data retention policies, which are intended to ensure compliance with the Data Protection Act

Arms Length Bodies Publications
Apr. 03 2025 NHS England Source Page: 2025/26 NHS Standard Contract – Schedule 2L and explanatory note Document: 2025/26 NHS Standard Contract - Schedule 2L and explanatory note (webpage) NHS Standard Contract Found: User vaccination status. 2.8A.3.2.3 “processing” has the meaning given by section 3(4) of the Data Protection Act
Mar. 27 2025 NHS England Source Page: Network Contract Directed Enhanced Service template data sharing agreement Document: Network Contract Directed Enhanced Service template data sharing agreement (webpage) Template Found: legislation in force from time to time in the UK including but not limited to the UK GDPR, the Data Protection Act
Mar. 27 2025 NHS England Source Page: Network Contract Directed Enhanced Service template data processing agreement Document: Network Contract Directed Enhanced Service template data processing agreement (webpage) Template Found: legislation in force from time to time in the UK including but not limited to the UK GDPR, the Data Protection Act

Draft Secondary Legislation
The Health and Social Care Information Standards (Procedure) Regulations 2025 These Regulations make provision about the procedure to be followed in connection with the preparation and publication of an information standard under section 250 of the Health and Social Care Act 2012 (c. 7) (“the 2012 Act”). Department of Health and Social Care Found: 22 of Schedule 9 of the Health and Care Act 2022 and paragraph 172 of Schedule 19(1) of the Data Protection Act

Draft Secondary Legislation

The Health and Social Care Information Standards (Procedure) Regulations 2025
These Regulations make provision about the procedure to be followed in connection with the preparation and publication of an information standard under section 250 of the Health and Social Care Act 2012 (c. 7) (“the 2012 Act”).

Department of Health and Social Care

Found: 22 of Schedule 9 of the Health and Care Act 2022 and paragraph 172 of Schedule 19(1) of the Data Protection Act

Deposited Papers
Thursday 3rd April 2025 Source Page: RAF Museum: framework document, Sept 2024 (updated). Incl. annex. 37p. Document: RAF_Museum_Framework_Document-2022-2025-updated.pdf (PDF) Found: information is received by either party under the Freedom of Information Act 2000, or the Data Protection Act
Wednesday 2nd April 2025 Source Page: British Council 2023-24 Annual report and accounts. 139p. Document: British_Council_Annual_Report_and_Accounts_2023-24.pdf (PDF) Found: systems and ensure ongoing compliance with the General Data Protection Regulation (GDPR), the UK Data Protection Act
Tuesday 25th March 2025 Home Office Source Page: Revised Code of Practice for Schedule 7 to the Terrorism Act (TACT) 2000. Revised Code of Practice for Schedule 3 to the Counter-Terrorism and Border Security Act (CTBSA) 2019. Government consultation. 157p. Document: Consultation_and_Draft_Codes.pdf (PDF) Found: to information regimes (these are primarily the Freedom of Information Act 2000 (FOIA), the Data Protection Act
Thursday 20th March 2025 Home Office Source Page: I. National Day for Victims and Survivors of Terrorism: Government consultation. 25p. II. Privacy Information Notice (PIN). 6p. III. Summary: Review of support for victims and survivors of terrorism. 8p. Document: Consultation_Paper.pdf (PDF) Found: Office has a statutory duty to comply with these requests in accordance with FOI Act 2000 and Data Protection Act
Thursday 20th March 2025 Home Office Source Page: I. National Day for Victims and Survivors of Terrorism: Government consultation. 25p. II. Privacy Information Notice (PIN). 6p. III. Summary: Review of support for victims and survivors of terrorism. 8p. Document: Privacy_Notice.pdf (PDF) Found: Privacy Information Notice (PIN) General Processing (UK GDPR & Part 2, Data Protection Act

Data Protection Act 2018 mentioned in Scottish results

Scottish Government Publications
Monday 14th April 2025 Local Government and Housing Directorate Source Page: Open Market Shared Equity Scheme: administrative procedures Document: Open Market Shared Equity Scheme: Administrative Procedures (PDF) Found: You will duly observe your obligations under the Data Protection Act 2018 and the General Data Protection
Friday 11th April 2025 Source Page: Public Sector Pay Policy Technical Guide - April 2025 Document: Public Sector Pay Policy Technical Guide (PDF) Found: and in particular the principles of the General Data Protection Regulation (GDPR) and the Data Protection Act
Thursday 10th April 2025 Energy and Climate Change Directorate Source Page: Emerging Energy Technologies Fund correspondence: EIR release Document: Emerging Energy Technologies Fund correspondence: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Thursday 10th April 2025 Energy and Climate Change Directorate Source Page: Carbon Capture Fund correspondence: EIR release Document: Carbon Capture Fund correspondence: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Thursday 10th April 2025 Marine Directorate Source Page: Live cleaner fish movements: EIR release Document: Live cleaner fish movements: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Thursday 10th April 2025 Offshore Wind Directorate Source Page: First Minister and Deputy First Minister offshore renewable investor discussions: EIR release Document: First Minister and Deputy First Minister offshore renewable investor discussions: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Thursday 10th April 2025 Learning Directorate Source Page: Materials and communications related to funding made available to local authorities: FOI release Document: Materials and communications related to funding made available to local authorities: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 9th April 2025 Source Page: City of Edinburgh Council’s proposed Supplementary Guidance on Developer Contributions and Infrastructure Delivery for City Plan 2030 information: EIR release Document: City of Edinburgh Council’s proposed Supplementary Guidance on Developer Contributions and Infrastructure Delivery for City Plan 2030 information: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 9th April 2025 Safer Communities Directorate Source Page: Far-right/neo Nazi activity correspondence: FOI release Document: Far-right/neo Nazi activity correspondence: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 9th April 2025 Culture and Major Events Directorate Source Page: Commonwealth Games cost documentation: FOI release Document: Commonwealth Games cost documentation: FOI release (webpage) Found: individuals, and disclosing it would contravene the data protection principles in Schedule 1 of the Data Protection Act
Wednesday 9th April 2025 Energy and Climate Change Directorate Source Page: Eskdalemuir Seismic Array contract: FOI release Document: Eskdalemuir Seismic Array contract: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 9th April 2025 Constitution Directorate Source Page: Independence spending in the Budget documentation: FOI release Document: Independence spending in the Budget documentation: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 9th April 2025 External Affairs Directorate Source Page: Details of First Minister's meeting with the Speaker of Lok Sabha, India: FOI release Document: Details of First Minister's meeting with the Speaker of Lok Sabha, India: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 8th April 2025 Marine Directorate Source Page: National Marine Plan 2 (NMP2) consultation minutes: EIR release Document: National Marine Plan 2 (NMP2) consultation minutes: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 8th April 2025 Safer Communities Directorate Source Page: Correspondence which relate to right wing extremist groups: FOI release Document: FOI 202400421592 - Information Released - Annex A (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 8th April 2025 Communications and Ministerial Support Directorate Source Page: Former First Minister's trip to Qatar: FOI release Document: Former First Minister's trip to Qatar: FOI release (webpage) Found: contravene the data protection principles in Article 5(1) of the UK GDPR (or section 34(1) of the Data Protection Act
Monday 7th April 2025 Marine Directorate Source Page: Evaluation of Regional Inshore Fisheries Group Document: Digital media - Evaluation of Regional Inshore Fisheries Group (PDF) Found: information I give will be treated confidentially and securely, in accordance with the terms of the Data Protection Act
Monday 7th April 2025 Energy and Climate Change Directorate Source Page: Ministerial correspondence relating to Kendoon to Tongland Reinforcement Project: EIR release Document: Ministerial correspondence relating to Kendoon to Tongland Reinforcement Project: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Friday 4th April 2025 Agriculture and Rural Economy Directorate Source Page: Animals and Wildlife (Penalties, Protections and Powers) (Scotland) Act 2020 - A Review Of Provisions And Requirements For Additional Animal Welfare, Animal Health And Wildlife Offences Document: Animals and Wildlife (Penalties, Protections and Powers) (Scotland) Act 2020 (PDF) Found: fulfilled its duty; however as this information relates to living persons, the provisions of the Data Protection Act
Tuesday 1st April 2025 Justice Directorate Source Page: Service Leavers Database - Scotland: privacy notice Document: Service Leavers Database - Scotland: privacy notice (webpage) Found: Section 2 Part 6 Para 27 of the Data Protection Act 2018 allows for exemptions to UK GDPR Article 5 1
Monday 31st March 2025 Agriculture and Rural Economy Directorate Source Page: Data Protection Impact Assessment (DPIA) for the Crofting Consultation 2024 and Consultation Analysis Document: Data Protection Impact Assessment (DPIA) for the Crofting Bill Consultation 2024 and Consultation Analysis (PDF) Found: regard to the processing of Personal Data to which a Party is subject including the 3 Data Protection Act
Friday 28th March 2025 Marine Directorate Source Page: Weekly fishing landings and landed value data for Orkney: EIR release Document: Weekly fishing landings and landed value data for Orkney: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Friday 28th March 2025 Social Security Directorate Source Page: Chief Executive of Social Security Scotland and Cabinet Secretary for Social Justice correspondence: FOI release Document: Chief Executive of Social Security Scotland and Cabinet Secretary for Social Justice correspondence: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Friday 28th March 2025 Constitution Directorate Source Page: First Minister and Prime Minister correspondence: FOI release Document: FOI 202500452857 - Information released - Annex B (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Friday 28th March 2025 Chief Economist Directorate Source Page: Minister for Public Finance and Scotonomics documentation: FOI release Document: FOI 202500453113 - Information released - Point 1 (PDF) Found: under the requirements of the General Data Protection Regulation (EU) 2016/679 (the GDPR), the Data Protection Act
Friday 28th March 2025 Source Page: UK Government Treasury/Chancellor correspondence: FOI release Document: UK Government Treasury/Chancellor correspondence: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Thursday 27th March 2025 Scottish Procurement and Property Directorate Source Page: Social Security Scotland Quality Assurance Testing Services tender contract: FOI release Document: FOI 202500452760 - Information released - Documents 8 - 22 (PDF) Found: bound by confidentiality and data protection clauses which align to standards set by the Data Protection Act
Thursday 27th March 2025 Source Page: Bus and travel demand management report documentation: EIR release Document: Bus and travel demand management report documentation: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Thursday 27th March 2025 Source Page: Bus and travel demand management report documentation: EIR release Document: EIR 202500452179 - Information released - Annex A, B and C (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Thursday 27th March 2025 Source Page: Planning Hubs and Planning apprenticeships information: EIR release Document: EIR 202500447903 - Information Released - Documents (PDF) Found: individuals with regard to the processing of Personal Data to which a Party is subject including the Data Protection Act
Thursday 27th March 2025 Social Care and National Care Service Development Source Page: Documentation on discussions with Scottish Care regarding Anne's Law: FOI release Document: Documentation on discussions with Scottish Care regarding Anne's Law: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Thursday 27th March 2025 Population Health Directorate Source Page: Correspondence regarding restriction on promotions of food high in fat, salt and sugar: FOI release Document: Correspondence regarding restriction on promotions of food high in fat, salt and sugar: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Thursday 27th March 2025 Source Page: Planning Hubs and Planning apprenticeships information: EIR release Document: Planning Hubs and Planning apprenticeships information: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Thursday 27th March 2025 Environment and Forestry Directorate Source Page: South Kinross Flood Protection Scheme objections: EIR release Document: EIR 202500454394 - Information released - Annex A & Annex B (PDF) Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act
Thursday 27th March 2025 Local Government and Housing Directorate Source Page: Reinforced autoclaved aerated concrete (RAAC) costs and correspondence: EIR release Document: Reinforced autoclaved aerated concrete (RAAC) costs and correspondence: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Thursday 27th March 2025 Source Page: Native woodland scheme at Schiehallion correspondence: EIR release Document: Native woodland scheme at Schiehallion correspondence: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Thursday 27th March 2025 Source Page: Social Security Scotland staff disciplinary action statistics: FOI release Document: Social Security Scotland staff disciplinary action statistics: FOI release (webpage) Found: This is because under UK General Data Protection Regulation (UK GDPR) and the Data Protection Act (DPA
Wednesday 26th March 2025 Marine Directorate Source Page: Green Volt Project correspondence: FOI release Document: Green Volt Project correspondence: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 26th March 2025 Energy and Climate Change Directorate Source Page: Material related to the overhead line from Spittal to Beauly: EIR release Document: Material related to the overhead line from Spittal to Beauly: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 26th March 2025 Children and Families Directorate Local Government and Housing Directorate Mental Health Directorate Social Care and National Care Service Development Source Page: Trauma Responsive Social Work Services Programme Data Protection Impact Assessment Document: Trauma Responsive Social Work Services Programme: Data protection impact assessment (PDF) Found: organisation a public authority or body as set out in Part 2, Chapter 2, Section 7 of the Data Protection Act
Wednesday 26th March 2025 Population Health Directorate Source Page: Documentation regarding the Cass report: FOI release Document: FOI 202500452272 - Information released - ANNEX B (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 26th March 2025 Constitution Directorate Source Page: Westminster's Scottish Affairs Committee correspondence: FOI release Document: FOI 202500452271 - Information released - Annex B (PDF) Found: nciples in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 26th March 2025 Energy and Climate Change Directorate Source Page: Correspondence and documentation that include the phrase "return on capital": FOI release Document: Correspondence and documentation that include the phrase "return on capital": FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 26th March 2025 Environment and Forestry Directorate Source Page: Copy of correspondence in relation to Montrose beach stability and dredging: EIR release Document: EIR 202500454881 - Information Released - Annex A (PDF) Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act
Wednesday 26th March 2025 Environment and Forestry Directorate Source Page: Vehicle idling details in specific areas: EIR release Document: Vehicle idling details in specific areas: EIR release (webpage) Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Propriety and Ethics Directorate Source Page: Legal advice given to the Scottish Government/ministers in reference to The Scottish Ministers v The Scottish Information Commissioner: FOI release Document: FOI 202400438168 - Information released - Annex A (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Environment and Forestry Directorate Source Page: Call for Evidence: Reducing the Landfilling of Biodegradable and Other Wastes Document: Call for Evidence: Reducing the Landfilling of Biodegradable and Other Wastes (PDF) Found: The legal basis for processing this data is ‘public task’ (Data Protection Act 2018 Article 6 (1) (e
Tuesday 25th March 2025 Environment and Forestry Directorate Source Page: Strengthening approach to household recycling collection services Document: Strengthening approach to household recycling collection services (PDF) Found: The legal basis for processing this data is ‘public task’ (Data Protection Act 2018 Article 6 (1) (e
Tuesday 25th March 2025 Communications and Ministerial Support Directorate Source Page: Legal advice in response to Scottish Information Commissioner’s decision 193/2024: FOI release Document: Legal advice in response to Scottish Information Commissioner’s decision 193/2024: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Communications and Ministerial Support Directorate Source Page: Information regarding the decision not to give the Scottish Information Commissioner legal advice: FOI release Document: Information regarding the decision not to give the Scottish Information Commissioner legal advice: FOI release (webpage) Found: are the data subject, and so it is subject to the General Data Protection Regulation and the Data Protection Act
Tuesday 25th March 2025 Propriety and Ethics Directorate Source Page: Queries regarding access to secretariat members email accounts: FOI Review Document: FOI 202500449874 - Information released - Annex (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Propriety and Ethics Directorate Source Page: James Hamilton QC's secretariat communications: FOI Review Document: FOI 202500448736 - Information released - Annex (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Communications and Ministerial Support Directorate Source Page: Documents and legal advise relating to decision notice (193/2024): FOI release Document: Documents and legal advise relating to decision notice (193/2024): FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Propriety and Ethics Directorate Source Page: Correspondence between former First Minister Nicola Sturgeon and James Hamilton: FOI release Document: FOI 202400438682 - Information released - Annex (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Tackling Child Poverty and Social Justice Directorate Source Page: Former Chief Social Policy Adviser WhatsApp messages during Covid-19 pandemic: FOI release Document: Former Chief Social Policy Adviser WhatsApp messages during Covid-19 pandemic: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Energy and Climate Change Directorate Source Page: Deputy Director of Future Environment WhatsApp messages during Covid-19 pandemic: FOI release Document: FOI 202400439464 - Information Released - Annex A and B (PDF) Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Communications and Ministerial Support Directorate Source Page: Former Minister for Mental Health WhatsApp messages from February 2020 to February 2021: FOI release Document: Former Minister for Mental Health WhatsApp messages from February 2020 to February 2021: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Communications and Ministerial Support Directorate Source Page: Former Director General for Education and Justice WhatsApp messages during Covid-19 pandemic: FOI release Document: FOI 202400439469 - Information Released - Attachment A (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Economic Development Directorate Source Page: Director of Economic Development WhatsApp messages during the Covid-19 pandemic: FOI release Document: Director of Economic Development WhatsApp messages during the Covid-19 pandemic: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Communications and Ministerial Support Directorate Source Page: Mairi McAllan's WhatsApp messages during the Covid-19 pandemic: FOI Review Document: Mairi McAllan's WhatsApp messages during the Covid-19 pandemic: FOI Review (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Source Page: Director General for Net Zero WhatsApp messages during Covid-19 pandemic: FOI release Document: Director General for Net Zero WhatsApp messages during Covid-19 pandemic: FOI release (webpage) Found: Personal data is defined in the Data Protection Act 2018 as information relating to an identified or
Tuesday 25th March 2025 Communications and Ministerial Support Directorate Source Page: Director General for Strategy & External Affairs WhatsApp messages during Covid-19 pandemic: FOI release Document: Director General for Strategy & External Affairs WhatsApp messages during Covid-19 pandemic: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Covid Inquiries Response Directorate Source Page: Former Director General of Economy WhatsApp messages during Covid-19 pandemic: FOI release Document: Former Director General of Economy WhatsApp messages during Covid-19 pandemic: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Source Page: Judicial Appointments Board member WhatsApp messages during Covid-19 pandemic: FOI release Document: Judicial Appointments Board member WhatsApp messages during Covid-19 pandemic: FOI release (webpage) Found: party and disclosing it would contravene the data protection principles in Schedule 1 to the Data Protection Act
Tuesday 25th March 2025 Source Page: Former Director General Health and Social Care WhatsApp messages during the Covid-19 pandemic: FOI release Document: Former Director General Health and Social Care WhatsApp messages during the Covid-19 pandemic: FOI release (webpage) Found: party and disclosing it would contravene the data protection principles in Schedule 1 to the Data Protection Act
Tuesday 25th March 2025 Source Page: Director General Scottish Exchequer WhatsApp messages during Covid-19 pandemic: FOI release Document: Director General Scottish Exchequer WhatsApp messages during Covid-19 pandemic: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Population Health Directorate Source Page: Deputy Director for Population Health Resilience and Protection WhatsApp messages during Covid-19 pandemic: FOI release Document: Deputy Director for Population Health Resilience and Protection WhatsApp messages during Covid-19 pandemic: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Communications and Ministerial Support Directorate Source Page: Former Minister for Mental Health's WhatsApp messages during the Covid 19 pandemic: FOI Review Document: Former Minister for Mental Health's WhatsApp messages during the Covid 19 pandemic: FOI Review (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Communications and Ministerial Support Directorate Source Page: Former Minister for Public Health, Women's Health and Sport WhatsApp messages during the COVID-19 pandemic: FOI Review Document: Former Minister for Public Health, Women's Health and Sport WhatsApp messages during the COVID-19 pandemic: FOI Review (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Propriety and Ethics Directorate Source Page: Email and chain referred to in material released under previous request: FOI release Document: Email and chain referred to in material released under previous request: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Communications and Ministerial Support Directorate Source Page: Information pertaining to Scottish Information Commissioner decision 004/2023: FOI release Document: Information pertaining to Scottish Information Commissioner decision 004/2023: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th March 2025 Covid Inquiries Response Directorate Source Page: Former Permanent Secretary's WhatsApp messages during Covid-19 pandemic: FOI release Document: Former Permanent Secretary's WhatsApp messages during Covid-19 pandemic: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Friday 21st March 2025 Justice Directorate Source Page: HMP Glasgow information: FOI release Document: HMP Glasgow information: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Friday 21st March 2025 Source Page: Scottish Forestry communications with James Jones and Sons: EIR release Document: EIR 202500452022 - Information released - Annex A (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Friday 21st March 2025 Energy and Climate Change Directorate Source Page: Strath Oykel Wind Farm correspondence: EIR release Document: Strath Oykel Wind Farm correspondence: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 19th March 2025 Equality, Inclusion and Human Rights Directorate Source Page: Men’s Sheds documentation: FOI release Document: FOI 202500451542 - Information released - Annex A (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 19th March 2025 Offshore Wind Directorate Source Page: Scottish Offshore Wind Energy Council Barriers to Deployment Group agendas and minutes: EIR release Document: Scottish Offshore Wind Energy Council Barriers to Deployment Group agendas and minutes: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 18th March 2025 Source Page: Liquid sprayed on A96 at Keith during winter months: EIR release Document: Liquid sprayed on A96 at Keith during winter months: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 18th March 2025 Source Page: Closure of the Queensferry Crossing documentation: EIR release Document: Closure of the Queensferry Crossing documentation: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 18th March 2025 Energy and Climate Change Directorate Source Page: Scotia Gas Networks (SGN) correspondence regarding the First Minister's visit to the H100 project: FOI release Document: Scotia Gas Networks (SGN) correspondence regarding the First Minister's visit to the H100 project: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 18th March 2025 Marine Directorate Source Page: Payments and support to Scotland's salmon farming industry: EIR release Document: EIR 202500450923 - Information Released - Annex B (PDF) Found: individuals with regard to the processing of Personal Data to which a Party is subject including the Data Protection Act
Tuesday 18th March 2025 International Trade and Investment Directorate Source Page: Communications exchanged with various organisations: FOI release Document: Communications exchanged with various organisations: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 18th March 2025 Communications and Ministerial Support Directorate Source Page: Access to Information Rights in Scotland: FOI release Document: FOI 202500450915 - Information Released - Annex (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 18th March 2025 Local Government and Housing Directorate Source Page: Springfield Group housing development correspondence: EIR release Document: Springfield Group housing development correspondence: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 18th March 2025 Environment and Forestry Directorate Source Page: Review of transferable skills in Scotland's land-based and aquaculture sectors Document: Review of transferable skills in Scotland's land-based and aquaculture sectors (PDF) Found: are collecting this data in the performance of a public task, under Article 6(1)(e) of the Data Protection Act
Thursday 13th March 2025 Agriculture and Rural Economy Directorate Source Page: Correspondence pertaining to "The Rural Development (Continuation of Operation) (Miscellaneous Amendment) (Scotland) Regulations 2024": FOI Review Document: Correspondence pertaining to "The Rural Development (Continuation of Operation) (Miscellaneous Amendment) (Scotland) Regulations 2024": FOI Review (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Thursday 13th March 2025 Source Page: Correspondence regarding Class 222 trains on ScotRail services: EIR release Document: Correspondence regarding Class 222 trains on ScotRail services: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Thursday 13th March 2025 Energy and Climate Change Directorate Source Page: Delivery of 19 climate action policies: EIR release Document: Delivery of 19 climate action policies: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Thursday 13th March 2025 Marine Directorate Source Page: ScotWind leasing round correspondence: EIR Review Document: ScotWind leasing round correspondence: EIR Review (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Wednesday 12th March 2025 Communications and Ministerial Support Directorate Source Page: Specific Scottish Government electronic purchasing cards (ePC) charges: FOI Review Document: Specific Scottish Government electronic purchasing cards (ePC) charges: FOI Review (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 11th March 2025 Source Page: West Coast Tracking Project: EIR release Document: West Coast Tracking Project: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 11th March 2025 Source Page: West Coast Tracking Project: EIR release Document: EIR 202400446455 - Information released (PDF) Found: individuals with regard to the processing of Personal Data to which a Party is subject including the Data Protection Act
Tuesday 11th March 2025 Mental Health Directorate Source Page: WAVE Trust 70/30 campaign: FOI release Document: FOI 202400403349 - Information Released - Annex A (PDF) Found: may be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act
Tuesday 4th March 2025 Source Page: Documents relating to Glen of Rothes Woodland Creation Scheme: EIR release Document: Documents relating to Glen of Rothes Woodland Creation Scheme: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 4th March 2025 Propriety and Ethics Directorate Source Page: Meeting between First Minister and advisers on the Scottish Ministerial Code: FOI release Document: Meeting between First Minister and advisers on the Scottish Ministerial Code: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 4th March 2025 Source Page: Balhyme Woodland creation scheme information: EIR release Document: Balhyme Woodland creation scheme information: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 4th March 2025 Population Health Directorate Source Page: Information on the proposal and provision of late stage abortion: FOI release Document: Information on the proposal and provision of late stage abortion: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and section 34(1) of the Data Protection Act
Tuesday 4th March 2025 Justice Directorate Source Page: Documentation relating to early prisoner release scheme; Solicitors Bar Association correspondence and information on reimbursement of remuneration to a former Sheriff: FOI release Document: FOI 202500449152 - Information released - Part 1 (PDF) Found: Personal Data and privacy of individuals, as amended from time to time, including the: (I) Data Protection Act
Tuesday 4th March 2025 Equality, Inclusion and Human Rights Directorate Source Page: Conditions of grant funding for Stonewall: FOI release Document: FOI 202500450855 - Information Released - Grant Offer Letter (PDF) Found: relevant court of law, or directives or requirements of any regulatory body including the Data Protection Act
Tuesday 4th March 2025 Marine Directorate Source Page: Poseidon Report queries: EIR release Document: Poseidon Report queries: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 4th March 2025 Source Page: Forestry Grant Scheme (FGS) contracts: EIR release Document: Forestry Grant Scheme (FGS) contracts: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Friday 28th February 2025 Learning Directorate Source Page: Health and Wellbeing Census Scotland: Background Report Document: Health and Wellbeing Census Scotland Background Report - word document (webpage) Found: Part 1 of Schedule 1 of the Data Protection Act 2018 states this condition is met if the processing—
Wednesday 26th February 2025 Marine Directorate Source Page: Marine Protection Vessels (MPVs) inspections: EIR release Document: Marine Protection Vessels (MPVs) inspections: EIR release (webpage) Found: fisheries legislation.Additionally, some of the information requested may be protected by the Data Protection Act
Tuesday 25th February 2025 Chief Economist Directorate Source Page: Correspondence between the Chief Economist and Scotonomics: FOI release Document: Correspondence between the Chief Economist and Scotonomics: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th February 2025 Justice Directorate Source Page: Correspondence regarding closure of 218 service: FOI release Document: Correspondence regarding closure of 218 service: FOI release (webpage) Found: regulates the relationship between FOISA, the UK General Data Protection Regulation and the Data Protection Act
Tuesday 25th February 2025 People Directorate Source Page: Scottish Land Commission Chair Appointment: FOI release Document: Scottish Land Commission Chair Appointment: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th February 2025 Constitution Directorate Source Page: Communications regarding Building a New Scotland papers: FOI release Document: FOI 202400393717 - Information Released - Annex B (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Tuesday 25th February 2025 Energy and Climate Change Directorate Source Page: Correspondence with SSE energy company: EIR release Document: Correspondence with SSE energy company: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Monday 24th February 2025 Source Page: Meeting between Minister for Housing, True North and Avant Homes: FOI release Document: Meeting between Minister for Housing, True North and Avant Homes: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Monday 24th February 2025 Children and Families Directorate Source Page: Former Minister for Health and Social Care meeting with Fiona Duncan, The Promise Scotland: FOI Review Document: Former Minister for Health and Social Care meeting with Fiona Duncan, The Promise Scotland: FOI Review (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Monday 24th February 2025 Justice Directorate Source Page: Post Office Horizon redress scheme documentation: FOI release Document: Post Office Horizon redress scheme documentation: FOI release (webpage) Found: contravene the data protection principles in Article 5(1) of the UK GDPR (or section 34(1) of the Data Protection Act
Friday 21st February 2025 Local Government and Housing Directorate Source Page: Councils correspondence regarding funding issues: FOI release Document: Councils correspondence regarding funding issues: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Friday 21st February 2025 Marine Directorate Source Page: Marine Directorate’s aquatic animal health surveillance programme movement records: EIR release Document: Marine Directorate’s aquatic animal health surveillance programme movement records: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Friday 21st February 2025 Social Security Directorate Source Page: Correspondence regarding Universal Credit two-child limit: FOI release Document: Correspondence regarding Universal Credit two-child limit: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Friday 21st February 2025 Scottish Procurement and Property Directorate Source Page: Due diligence assessment conducted during the renewal of the desktop contract with Hewlett Packard: FOI release Document: FOI 202500450370 - Information released - Annex A (Excel) Found: ProtectionAll personal information supplied will be treated as confidential and will be subject to the Data Protection Act
Friday 21st February 2025 Learning Directorate Source Page: Council communications regarding plans to increase teacher numbers: FOI release Document: Council communications regarding plans to increase teacher numbers: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Friday 21st February 2025 Environment and Forestry Directorate Source Page: Minutes of meetings of flood risk management working group: EIR Review Document: Minutes of meetings of flood risk management working group: EIR Review (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Friday 21st February 2025 Agriculture and Rural Economy Directorate Source Page: Correspondence regarding the Farm to Fork Summit: FOI release Document: FOI 202500449628 - Information released - Annex (PDF) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Thursday 20th February 2025 Agriculture and Rural Economy Directorate Source Page: Minister for Agriculture and Connectivity correspondence regarding withdrawn whole farm plan regulations: EIR release Document: Minister for Agriculture and Connectivity correspondence regarding withdrawn whole farm plan regulations: EIR release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Thursday 20th February 2025 Culture and Major Events Directorate Source Page: Correspondence regarding Musselburgh Brunton Theatre and Motherwell Concert Hall and Theatre: FOI release Document: Correspondence regarding Musselburgh Brunton Theatre and Motherwell Concert Hall and Theatre: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Thursday 20th February 2025 Environment and Forestry Directorate Source Page: Deposit Return Scheme queries: EIR release Document: EIR 202500448011 - Information Released - Annex (PDF) Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act
Thursday 20th February 2025 External Affairs Directorate Source Page: Correspondence with office of President of the United States: FOI release Document: Correspondence with office of President of the United States: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act
Thursday 20th February 2025 Source Page: Transport Scotland - 20mph implementation plans for Dumfries and Galloway area: FOI release Document: FOI 202500448768 - Information Released - Annex (PDF) Found: individuals with regard to the processing of Personal Data to which a Party is subject including the Data Protection Act
Thursday 20th February 2025 Population Health Directorate Source Page: Briefing packs and outcomes for the drugs consumption room at the Thistle facility: FOI release Document: Briefing packs and outcomes for the drugs consumption room at the Thistle facility: FOI release (webpage) Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Scottish Written Answers
S6W-34403 Asked by: Eagle, Tim (Scottish Conservative and Unionist Party - Highlands and Islands) Tuesday 25th February 2025 Question To ask the Scottish Government on how many occasions the businesses that have submitted an application for a Freight Facilities Grant (FFG) have asked for the information that they provide to be treated as confidential and therefore not subject to disclosure under the Freedom of Information (Scotland) Act 2002. Answered by Hyslop, Fiona - Cabinet Secretary for Transport Information provided in any application for Freight Facilities Grant (FFG), including personal information, may be subject to publication or disclosure in accordance with legislation including the Freedom of Information (Scotland) Act 2002 (FOISA), the Environmental Information (Scotland) Regulations 2004 (EIRs) and the Data Protection Act 1998. All applicants are asked if any of the information they provide as part of the process is to be treated as confidential with an explanation of why this is so. If Transport Scotland receive a request for disclosure of this information we will take full account the explanation given. However, due to our obligations under the relevant legislation we have never given an assurance that information supplied to us, even in confidence, would not be disclosed. To date, no FOI in relation to confidential information supplied as part of an application for FFG has been received by Transport Scotland.

Scottish Written Answers

S6W-34403
Asked by: Eagle, Tim (Scottish Conservative and Unionist Party - Highlands and Islands)
Tuesday 25th February 2025

Question

To ask the Scottish Government on how many occasions the businesses that have submitted an application for a Freight Facilities Grant (FFG) have asked for the information that they provide to be treated as confidential and therefore not subject to disclosure under the Freedom of Information (Scotland) Act 2002.

Answered by Hyslop, Fiona - Cabinet Secretary for Transport

Information provided in any application for Freight Facilities Grant (FFG), including personal information, may be subject to publication or disclosure in accordance with legislation including the Freedom of Information (Scotland) Act 2002 (FOISA), the Environmental Information (Scotland) Regulations 2004 (EIRs) and the Data Protection Act 1998.

All applicants are asked if any of the information they provide as part of the process is to be treated as confidential with an explanation of why this is so. If Transport Scotland receive a request for disclosure of this information we will take full account the explanation given. However, due to our obligations under the relevant legislation we have never given an assurance that information supplied to us, even in confidence, would not be disclosed.

To date, no FOI in relation to confidential information supplied as part of an application for FFG has been received by Transport Scotland.

Data Protection Act 2018 mentioned in Welsh results

Welsh Committee Publications
Friday 7th February 2025 PDF - Marshalled List of Amendments - 7 February 2025 Inquiry: Report on the Welsh Language and Education (Wales) Bill Found: ending on 31 August, ( ) “data protection legislation” has the same meaning as in the Data Protection Act
Wednesday 5th February 2025 PDF - Notice of Amendments (v3) - 5 February 2025 Inquiry: Report on the Welsh Language and Education (Wales) Bill Found: ending on 31 August, ( ) “data protection legislation” has the same meaning as in the Data Protection Act
Tuesday 21st January 2025 PDF - Welsh Government Response - 21 January 2025 Inquiry: Children on the Margins Found: share information in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act

Welsh Government Publications
Monday 14th April 2025 Source Page: FOI release 24421: Swansea maternity services Document: Swansea maternity services (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)
Friday 11th April 2025 Source Page: Standard for digital health identity verification in primary care Document: The NHS Wales digital health identity standard for primary care (NHS login) (PDF) Found: have a legal requirement: • to adhere to the General Data Protection Regulation (GDPR), Data Protection Act
Thursday 10th April 2025 Source Page: Young people not in education, employment or training (NEET): 2024 Document: Young people not in education, employment or training (NEET): 2024 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Tuesday 8th April 2025 Source Page: Attendance of pupils in maintained schools: 2 September 2024 to 28 March 2025 Document: Attendance of pupils in maintained schools: 2 September 2024 to 28 March 2025 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Monday 7th April 2025 Source Page: FOI release 24503: Godre'r Graig Primary School Document: Doc 2 (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)
Wednesday 2nd April 2025 Source Page: FOI release 23323: Tertiary Education Document: Tertiary Education (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)
Friday 28th March 2025 Source Page: FOI release 24464: Hendy Wind Farm Document: Hendy Wind Farm (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Friday 28th March 2025 Source Page: Food Business Accelerator scheme: pre-qualification form Document: Food Business Accelerator scheme: pre-qualification form (PDF) Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004, Data Protection Act
Friday 28th March 2025 Source Page: Welsh Revenue Authority equality report 2025 Document: Welsh Revenue Authority equality report 2025 (webpage) Found: great importance on protecting people’s privacy and their data in full compliance with the Data Protection Act
Friday 28th March 2025 Source Page: FOI release 24479: Misoprostol Document: Misoprostol (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)
Thursday 27th March 2025 Source Page: Relative income poverty: April 2023 to March 2024 Document: Relative income poverty: April 2023 to March 2024 (webpage) Found: are presented impartially and objectively and are in accordance with the requirements of the Data Protection Act
Wednesday 26th March 2025 Source Page: Eliminating profit from the care of looked after children: data protection impact assessment Document: Data protection impact assessment (PDF) Found: In our view the requirements of section 10 of and paragraph 1 of Schedule 1 to the Data Protection Act
Tuesday 25th March 2025 Source Page: FOI release 24554: Brilliant Basics Grant Document: Brilliant Basics Grant (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Tuesday 25th March 2025 Source Page: FOI release 24487: Wildlife poisoning Document: Wildlife poisoning (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Tuesday 25th March 2025 Source Page: Attendance of pupils in maintained schools: 2 September 2024 to 14 March 2025 Document: Attendance of pupils in maintained schools: 2 September 2024 to 14 March 2025 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Monday 17th March 2025 Source Page: Food Business Accelerator scheme (window 2): general rules booklet Document: Food Business Accelerator scheme (window 2): general rules booklet (webpage) Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004, Data Protection Act
Thursday 13th March 2025 Source Page: Participation of young people in education and the labour market: 2022 and 2023 (provisional) Document: Participation of young people in education and the labour market: 2022 and 2023 (provisional) (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Wednesday 12th March 2025 Source Page: FOI release 24353: A470 access road Document: A470 access road (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Tuesday 11th March 2025 Source Page: Attendance of pupils in maintained schools: 2 September 2024 to 28 February 2025 Document: Attendance of pupils in maintained schools: 2 September 2024 to 28 February 2025 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Monday 10th March 2025 Source Page: Scoping study for mixed attainment teaching practice in schools in Wales: report Document: Scoping study for mixed attainment teaching practice in schools in Wales (PDF) Found: The information you provide will be handled in accordance with the UK Data Protection Act 1998, which
Thursday 6th March 2025 Source Page: Ffermio Bro - Farming in Designated Landscapes (stage 1): rules booklet Document: Ffermio Bro - Farming in Designated Landscapes (stage 1): rules booklet (webpage) Found: obligations under the Freedom of Information Act 2000, the Environmental Information Act 2004 or the Data Protection Act
Thursday 6th March 2025 Source Page: FOI release 23347: Grooming Gangs Document: Grooming Gangs (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)
Thursday 6th March 2025 Source Page: FOI release 23347: Grooming Gangs Document: Doc 3 (PDF) Found: The present study complied with the 2018 Data Protection Act, which allows sensitive study data to be
Tuesday 4th March 2025 Source Page: Attendance and absence from schools: September 2023 to August 2024 Document: Attendance and absence from schools: September 2023 to August 2024 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Friday 28th February 2025 Source Page: Small Grants – Woodland Creation (windows 7, 8 and 9): rules booklet Document: Small Grants – Woodland Creation (windows 7, 8 and 9): rules booklet (webpage) Found: in accordance with the obligations and duties under the Freedom of Information Act 2000, the Data Protection Act
Friday 28th February 2025 Source Page: FOI release 23327: Physician associate students Document: Physician associate students (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)
Friday 28th February 2025 Source Page: Woodland Creation Grant (window 5): rules booklet Document: Woodland Creation Grant (window 5): rules booklet (webpage) Found: in accordance with the obligations and duties under the Freedom of Information Act 2000, the Data Protection Act
Wednesday 26th February 2025 Source Page: FOI release 23335: Ainon Welsh Baptist Chapel, Treorchy Document: Ainon Welsh Baptist Chapel, Treorchy (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Wednesday 26th February 2025 Source Page: Small Grants – Efficiency (window 4): general rules booklet Document: Small Grants – Efficiency (window 4): general rules booklet (webpage) Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004 or the Data Protection Act
Tuesday 25th February 2025 Source Page: FOI release 23329: Protocols Document: Protocols (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Tuesday 25th February 2025 Source Page: Attendance of pupils in maintained schools: 2 September 2024 to 14 February 2025 Document: Attendance of pupils in maintained schools: 2 September 2024 to 14 February 2025 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Monday 24th February 2025 Source Page: FOI release 23301: Brilliant Basics Grant for Llansteffan North Carpark Document: Brilliant Basics Grant for Llansteffan North Carpark (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Monday 24th February 2025 Source Page: FOI release 23294: Ty Llwyd Quarry Document: Doc 1 (PDF) Found: Information Act 2000 (the “FOIA”), the Environmental Information Regulations 2004 (the “EIR”), the Data Protection Act
Wednesday 19th February 2025 Source Page: Single Application Form (SAF) 2025: rules booklet Document: Single Application Form (SAF) 2025: rules booklet (PDF) Found: accordance with its obligations and duties under the: • Freedom of Information Act 2000 • The Data Protection Act
Thursday 13th February 2025 Source Page: FOI release 23265: Tŷ Llwyd Quarry Document: Doc 1 (PDF) Found: Information Act 2000 (the “FOIA”), the Environmental Information Regulations 2004 (the “EIR”), the Data Protection Act
Wednesday 12th February 2025 Source Page: FOI release 23211: Special Advisers Document: Special Advisers (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)
Wednesday 12th February 2025 Source Page: FOI release 23253: Cafcass policies Document: Cafcass policies (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Tuesday 11th February 2025 Source Page: Contracting authority onboarding Document: Contracting authority onboarding (webpage) Found: It is a requirement under Article 26 of Data Protection Act 2018 and is quite commonly used in Central
Tuesday 11th February 2025 Source Page: Attendance of pupils in maintained schools: 2 September 2024 to 31 January 2025 Document: Attendance of pupils in maintained schools: 2 September 2024 to 31 January 2025 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Monday 10th February 2025 Source Page: FOI release 23243: E Harley Street Primary Care Solutions Document: E Harley Street Primary Care Solutions (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)
Tuesday 28th January 2025 Source Page: Attendance of pupils in maintained schools: 2 September 2024 to 17 January 2025 Document: Attendance of pupils in maintained schools: 2 September 2024 to 17 January 2025 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Monday 20th January 2025 Source Page: FOI release 23209: Aberpergwm coal mine Document: Aberpergwm coal mine (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Monday 20th January 2025 Source Page: FOI release 23206: Palestine Document: Palestine (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Monday 20th January 2025 Source Page: Call for evidence: shore-based netting in Wales Document: Call for evidence: shore-based netting in Wales (PDF) Found: document is also available in Welsh UK General Data Protection Regulation (UK GDPR) and the Data Protection Act
Tuesday 14th January 2025 Source Page: Attendance of pupils in maintained schools: 2 September to 20 December 2024 Document: Attendance of pupils in maintained schools: 2 September to 20 December 2024 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Monday 13th January 2025 Source Page: General funding round window 2 (Welsh Marine and Fisheries Scheme): guidance Document: General funding round window 2 (Welsh Marine and Fisheries Scheme): guidance (webpage) Found: the Freedom of Information Act 2000, the Environmental Information Regulations 2004 and the Data Protection Act
Monday 13th January 2025 Source Page: Proposals to make the food environment healthier Document: Annex 1: draft statutory instrument (PDF) Found: data” and “ the data protection legislation” have the same meanings as in section 3 of the Data Protection Act
Thursday 9th January 2025 Source Page: School Governors' guide to the law Document: 4: Governing Body Procedures and Meetings (PDF) Found: personal data is handled in accordance with the General Data Protection Regulation and the Data Protection Act
Thursday 9th January 2025 Source Page: School Governors' guide to the law Document: 10: Staffing (PDF) Found: regard to and comply with the requirements of the Freedom of Information Act 2000 and the Data Protection Act
Thursday 9th January 2025 Source Page: School Governors' guide to the law Document: 6: Providing Information (PDF) Found: to parents; • pupils’ educational records and pupil reports; • information covered by the Data Protection Act
Thursday 9th January 2025 Source Page: School Governors' guide to the law Document: Annex 3: Glossary (PDF) Found: D Data Protection Act 1998 (DPA) - an Act making provision for the regulation of the processing of
Thursday 9th January 2025 Source Page: Small Grants - Environment (landscape and pollinators): general rules booklet 2025 Document: Small Grants - Environment (landscape and pollinators): general rules booklet 2025 (webpage) Found: in accordance with the obligations and duties under the Freedom of Information Act 2000, the Data Protection Act
Wednesday 8th January 2025 Source Page: Advertisement consent and discontinuance notice appeal form Document: Advertisement consent and discontinuance notice appeal form (PDF) Found: supplied by you in this form, is in accordance with the terms of our registration under the Data Protection Act
Tuesday 7th January 2025 Source Page: Diversity and inclusion guidance for registered political parties Document: Draft guidance (webpage) Found: Compliance with relevant legislation Political parties are reminded of their obligations under the Data Protection Act
Thursday 2nd January 2025 Source Page: Woodland Creation Planning Scheme (January 2025): rules booklet Document: Woodland Creation Planning Scheme (January 2025): rules booklet (webpage) Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004 or the Data Protection Act
Monday 30th December 2024 Source Page: Draft Senedd Cymru (Representation of the People) Order Document: The Senedd Cymru (Representation of the People) Order 2025 (webpage) Found: In this paragraph, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018
Tuesday 24th December 2024 Source Page: FOI release 23147: Wildlife poisoning Document: Wildlife poisoning (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Friday 20th December 2024 Source Page: Allocation of accommodation and homelessness: guidance for local authorities Document: Allocation of accommodation and homelessness: guidance for local authorities (PDF) Found: administering allocation schemes, Local Authorities must comply with the provisions of the Data Protection Act
Thursday 19th December 2024 Source Page: Woodland Restoration Scheme (window 3) - Forest Management Plan: template Document: Woodland Restoration Scheme - Forest Management Plan: template (webpage) Found: in accordance with the obligations and duties under the Freedom of Information Act 2000, the Data Protection Act
Thursday 19th December 2024 Source Page: Managing technology that manages people Document: Managing technology that manages people: a Social Partnership approach to algorithmic management systems in the Welsh public sector (PDF) Found: Act 1974, • the Human Rights Act 1998, • the Equality Act 2010, 10 • the Data Protection Act
Wednesday 18th December 2024 Source Page: FOI release 21984: Dublin office Document: Dublin office (PDF) Found: We believe that releasing this information would be in breach of the Data Protection Act.
Wednesday 18th December 2024 Source Page: Integrated Natural Resources Scheme: project delivery plan guidance Document: Integrated Natural Resources Scheme: project delivery plan guidance (webpage) Found: obligations under the Freedom of Information Act 2000, the Environmental Information Act 2004 or the Data Protection Act
Tuesday 17th December 2024 Source Page: Absenteeism from primary schools: September 2023 to August 2024 Document: Absenteeism from primary schools: September 2023 to August 2024 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Tuesday 17th December 2024 Source Page: Attendance of pupils in maintained schools: 2 September to 6 December 2024 Document: Attendance of pupils in maintained schools: 2 September to 6 December 2024 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Monday 16th December 2024 Source Page: FOI release 22105: Physician associates Document: Physician associates (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)
Friday 13th December 2024 Source Page: FOI release 22095: Pandemic preparedness Document: Pandemic preparedness (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)
Monday 9th December 2024 Source Page: FOI release 22088: Eating disorder review Document: Eating disorder review (PDF) Found: Information Act, as it is personal data protected by the General Data Protection Regulation and Data Protection Act
Monday 9th December 2024 Source Page: The Disused Mine and Quarry Tips (Wales) Bill Document: Data protection impact assessment (PDF) Found: The Authority is a competent authority (within the meaning of section 30(1)(b) of the Data Protection Act
Thursday 5th December 2024 Source Page: FOI release 22128: Call-in Planning application Document: Call-in Planning application (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Thursday 5th December 2024 Source Page: Examination results: September 2023 to August 2024 Document: Examination results: September 2023 to August 2024 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Tuesday 3rd December 2024 Source Page: FOI release 22067: Phonics Document: Phonics (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)
Tuesday 3rd December 2024 Source Page: Single Unified Safeguarding Review: statutory guidance Document: Statutory guidance (PDF) Found: Data protection, privacy and confidentiality considerations 10.9 The Data Protection Act 2018 and the
Tuesday 3rd December 2024 Source Page: Attendance of pupils in maintained schools: 2 September to 22 November 2024 Document: Attendance of pupils in maintained schools: 2 September to 22 November 2024 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Monday 25th November 2024 Source Page: Electric vehicle charging infrastructure procurement: technical advice note Document: Electric vehicle charging infrastructure procurement: technical advice note (PDF) Found: Data protection All systems and parties must comply with the Data Protection Act 2018 (UK GDPR).
Monday 25th November 2024 Source Page: Visitor Accommodation (Register and Levy) Etc. (Wales) Bill: data protection impact assessment Document: Data protection impact assessment (webpage) Found: new power, local authorities must have regard to their existing statutory duties under the Data Protection Act
Thursday 21st November 2024 Source Page: FOI release 22050: CRI services Document: CRI services (PDF) Found: Personal data protected by the General Data Protection Regulation and Data Protection Act 2018.
Tuesday 19th November 2024 Source Page: Attendance of pupils in maintained schools: 2 September to 8 November 2024 Document: Attendance of pupils in maintained schools: 2 September to 8 November 2024 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Monday 18th November 2024 Source Page: FOI release 22032: Planning application Document: Planning application (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Friday 15th November 2024 Source Page: Iaith Athrawon Yfory Incentive Scheme: guidance for students 2025 to 2026 Document: Iaith Athrawon Yfory Incentive Scheme: guidance for students 2025 to 2026 (webpage) Found: Information Regulations 2004 (the “EIR”) the General Data Protection Regulation (GDPR) and Data Protection Act
Thursday 14th November 2024 Source Page: Welsh Government retention and disposal schedule Document: Retention and disposal schedule (PDF) Found: For sensitive information, including that covered by the Data Protection Act 2018 (which replaced the
Wednesday 13th November 2024 Source Page: Digital submission of planning application forms and associated consents Document: Digital submission of planning application forms and associated consents (PDF) Found: In accordance with the Data Protection Act 2018, Welsh Government is the data controller for personal
Monday 11th November 2024 Source Page: Listed building and conservation area enforcement notice appeal form Document: Listed building enforcement and conservation area enforcement appeal form (PDF) Found: supplied by you in this form, is in accordance with the terms of our registration under the Data Protection Act
Monday 11th November 2024 Source Page: Listed building and conservation area consent appeal form Document: Listed building consent or conservation area consent appeal form (PDF) Found: supplied by you in this form, is in accordance with the terms of our registration under the Data Protection Act
Monday 11th November 2024 Source Page: FOI release 21937: International Engagement budget Document: Internal review (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Monday 11th November 2024 Source Page: Enforcement notice appeal form Document: Enforcement notice appeal form (PDF) Found: supplied by you in this form, is in accordance with the terms of our registration under the Data Protection Act
Monday 11th November 2024 Source Page: FOI release 22005: Pig Registration Document: Pig Registration (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Monday 11th November 2024 Source Page: Woodland Restoration Scheme (window 3): rules booklet Document: Woodland Restoration Scheme (window 3): rules booklet (webpage) Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004 or the Data Protection Act
Tuesday 5th November 2024 Source Page: FOI release 22013: Flying Start Document: Flying Start (PDF) Found: Contact name and email address are considered personal data as defined in the Data Protection Act 2018
Tuesday 5th November 2024 Source Page: Attendance of pupils in maintained schools: 2 September to 25 October 2024 Document: Attendance of pupils in maintained schools: 2 September to 25 October 2024 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Monday 4th November 2024 Source Page: FOI release 21993: Physician Associates Document: Physician Associates (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)
Monday 4th November 2024 Source Page: Agricultural Diversification and Horticulture Scheme: rules booklet Document: Agricultural Diversification and Horticulture Scheme: rules booklet (webpage) Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004 or the Data Protection Act
Monday 4th November 2024 Source Page: Growing for the environment: rules booklet Document: Growing for the environment: rules booklet (window 6) (webpage) Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004 or the Data Protection Act
Monday 4th November 2024 Source Page: Growing for the environment: rules booklet Document: Growing for the environment: rules booklet (window 4) (webpage) Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004 or the Data Protection Act
Monday 4th November 2024 Source Page: Growing for the environment: rules booklet Document: Growing for the environment: rules booklet (window 5) (webpage) Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004 or the Data Protection Act
Monday 4th November 2024 Source Page: Growing for the environment: rules booklet Document: Growing for the environment: rules booklet (window 2) (webpage) Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004 or the Data Protection Act
Monday 4th November 2024 Source Page: Growing for the environment: rules booklet Document: Growing for the environment: rules booklet (window 3) (webpage) Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004 or the Data Protection Act
Monday 4th November 2024 Source Page: Growing for the environment: rules booklet Document: Growing for the environment: rules booklet (window 1) (webpage) Found: obligations under the Freedom of Information Act 2000, the Environmental information Act 2004 or the Data Protection Act
Monday 4th November 2024 Source Page: Small Grants – Horticulture Start Up (window 3): rules booklet Document: Small Grants – Horticulture Start Up (window 3): rules booklet (webpage) Found: obligations under the Freedom of Information Act 2000, the Environmental Information Act 2004 or the Data Protection Act
Monday 28th October 2024 Source Page: Open government report: 2023 Document: Open government report: 2023 (PDF) Found: Information Act 2000 (FOIA), the Environmental Information Regulations 2004 (EIRs) and the Data Protection Act
Friday 25th October 2024 Source Page: Safeguarding people: an introduction Document: Working together to safeguard people volume 1: introduction and overview (PDF) Found: Practitioners must share information in accordance with the Data Protection Act 1998 and the common
Thursday 24th October 2024 Source Page: Attendance of pupils in maintained schools: 2 September to 18 October 2024 Document: Attendance of pupils in maintained schools: 2 September to 18 October 2024 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Wednesday 23rd October 2024 Source Page: FOI release 21970: Aberaeron Library Document: Aberaeron Library (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)
Wednesday 23rd October 2024 Source Page: FOI release 21970: Aberaeron Library Document: Doc 2 (PDF) Found: Under the UK GDPR, Data Protection Act 2018 and the Freedom of Information Act 2000 the contents of
Monday 21st October 2024 Source Page: FOI release 20877: St Isan Nursing Home Document: Internal review - Doc 1 (PDF) Found: Information Act 2000 (the “FOIA”), the Environmental Information Regulations 2004 (the “EIR”), the Data Protection Act
Monday 21st October 2024 Source Page: FOI release 20877: St Isan Nursing Home Document: Internal review (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)
Thursday 17th October 2024 Source Page: Attendance of pupils in maintained schools: 2 September to 11 October 2024 Document: Attendance of pupils in maintained schools: 2 September to 11 October 2024 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Monday 14th October 2024 Source Page: FOI release 21942: Highway Improvement Project Document: Highway Improvement Project (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)
Thursday 10th October 2024 Source Page: Attendance of pupils in maintained schools: 2 September to 4 October 2024 Document: Attendance of pupils in maintained schools: 2 September to 4 October 2024 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Thursday 3rd October 2024 Source Page: Examination results: September 2023 to August 2024 (provisional) Document: Examination results: September 2023 to August 2024 (provisional) (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Thursday 3rd October 2024 Source Page: Attendance of pupils in maintained schools: 2 to 27 September 2024 Document: Attendance of pupils in maintained schools: 2 to 27 September 2024 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Tuesday 1st October 2024 Source Page: Absenteeism from secondary schools: September 2023 to August 2024 Document: Absenteeism from secondary schools: September 2023 to August 2024 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Thursday 26th September 2024 Source Page: Rent Smart Wales: code of practice Document: Rent Smart Wales: code of practice (PDF) Found: the reason for such a deposit, and all associated terms and conditions 10 Section 7 of the Data Protection Act
Thursday 26th September 2024 Source Page: Attendance of pupils in maintained schools: 2 to 20 September 2024 Document: Attendance of pupils in maintained schools: 2 to 20 September 2024 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Monday 23rd September 2024 Source Page: FOI release 21910: School Organisation Code Document: Doc 1 (PDF) Found: Under the UK GDPR, Data Protection Act 2018 and the Freedom of Information Act 2000 the contents of
Monday 23rd September 2024 Source Page: FOI release 21910: School Organisation Code Document: Doc 4 (PDF) Found: Under the UK GDPR, Data Protection Act 2018 and the Freedom of Information Act 2000 the contents of
Monday 23rd September 2024 Source Page: FOI release 21910: School Organisation Code Document: Doc 2 (PDF) Found: Under the UK GDPR, Data Protection Act 2018 and the Freedom of Information Act 2000 the contents of
Monday 23rd September 2024 Source Page: FOI release 21910: School Organisation Code Document: Doc 3 (PDF) Found: Under the UK GDPR, Data Protection Act 2018 and the Freedom of Information Act 2000 the contents of
Thursday 19th September 2024 Source Page: Attendance of pupils in maintained schools: 2 to 13 September 2024 Document: Attendance of pupils in maintained schools: 2 to 13 September 2024 (webpage) Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act
Wednesday 18th September 2024 Source Page: FOI release 20908: Wildlife Incident Investigation Scheme reports Document: Wildlife Incident Investigation Scheme reports (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)
Wednesday 18th September 2024 Source Page: Taxi and private hire vehicles: CCTV policy template for local authorities Document: Taxi and private hire vehicles: CCTV policy template for local authorities (webpage) Found: downloaded for the following purposes: a) in response to a legitimate data access request under the Data Protection Act
Tuesday 17th September 2024 Source Page: FOI release 21922: Basic Income pilot -Residency Information Document: Basic Income pilot -Residency Information (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)
Tuesday 17th September 2024 Source Page: FOI release 20846: Hybu Cig Cymru Document: Hybu Cig Cymru (PDF) Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)