Data Protection Act 2018 Alert Sample


Alert Sample

View the Parallel Parliament page for the Data Protection Act 2018

Information since 17 Apr 2025, 5:17 p.m.


Data Protection Act 2018 mentioned

Calendar
Wednesday 17th September 2025 4:15 p.m.
Home Office
Lord Hanson of Flint (Labour - Life peer)

Orders and regulations - Grand Committee
Subject: Data Protection Act 2018 (Qualifying Competent Authorities) Regulations 2025
Data Protection Act 2018 (Qualifying Competent Authorities) Regulations 2025 View calendar - Add to calendar
Tuesday 9th September 2025 9:25 a.m.
Home Office

Second Delegated Legislation Committee - Debate
Subject: The draft Data Protection Act 2018 (Qualifying Competent Authorities) Regulations 2025
Data Protection Act 2018 (Qualifying Competent Authorities) Regulations 2025 View calendar - Add to calendar


Parliamentary Debates
Children’s Wellbeing and Schools Bill
59 speeches (17,670 words)
Tuesday 2nd September 2025 - Lords Chamber
Department for Education
Mentions:
1: Baroness Smith of Malvern (Lab - Life peer) processing of personal information as required or enabled by the Bill does not contravene the Data Protection Act - Link to Speech



Select Committee Documents
Monday 1st September 2025
Written Evidence - Jon-Paul Entwistle
AAC0182 - Autism Act 2009

Autism Act 2009 - Autism Act 2009 Committee

Found: .- The Data Protection Act 2018 (and GDPR) – through failure to provide full records or mishandling

Thursday 24th July 2025
Report - 6th Report - Forced Labour in UK Supply Chains

Human Rights (Joint Committee)

Found: For example, companies can be fined 4% of annual turnover for certain breaches of the Data Protection Act



Written Answers
Google
Asked by: Lord Taylor of Warwick (Non-affiliated - Life peer)
Friday 1st August 2025

Question to the Department for Science, Innovation & Technology:

To ask His Majesty's Government what assessment they have made of Google's "Data Boundary" solution; and what steps they are taking to protect the privacy of their data held on Google Cloud.

Answered by Baroness Jones of Whitchurch - Baroness in Waiting (HM Household) (Whip)

His Majesty’s Government has not made a formal assessment of Google's "Data Boundary" solution. However, it remains committed to ensuring that public sector data is managed securely and in line with UK law and regulations, including the Data Protection Act 2018 and UK GDPR.

The responsibility of managing a department’s digital and IT infrastructure ultimately falls within each Department’s own purview. However, departments are mandated to follow the GDS Cloud First policy and multi-region guidance, using cloud services that provide flexibility, resilience, and robust data governance. Additionally, the NCSC’s Cyber Assessment Framework and the Government Functional Standard for security set out the principles and baseline controls for managing security risks, particularly for critical systems and sensitive data.

Personation
Asked by: Lisa Smart (Liberal Democrat - Hazel Grove)
Wednesday 23rd July 2025

Question to the Home Office:

To ask the Secretary of State for the Home Department, if her Department has considered making identity theft a police recordable crime.

Answered by Diana Johnson - Minister of State (Home Office)

At present, identity theft is not a standalone criminal offence, but criminal acts which exploit stolen identities are already covered under existing legislation such as the Fraud Act 2006, Computer Misuse Act 1990, and Data Protection Act 2018. However, we recognise the evolving nature and increasing prevalence of identity-related crime and are taking additional proactive steps to address it. That is why the Independent Review of Fraud Offences will also consider whether a specific offence for identity theft is needed.

Alongside this, we will also consider whether to include further initiatives to prevent the misuse of stolen identities and strengthen protections for the public as part of the Government’s upcoming Fraud Strategy.



Secondary Legislation
National Health Service (Pharmaceutical and Local Pharmaceutical Services) (Miscellaneous Amendments) Regulations 2025
These Regulations amend the National Health Service (Pharmaceutical and Local Pharmaceutical Services) Regulations 2013 (S.I. 2013/349, as amended – “the PLPS Regulations”). The PLPS Regulations govern the arrangements in England, under Part 7 of the National Health Service Act 2006 (“the 2006 Act”), for the provision of pharmaceutical and local pharmaceutical services.
Department of Health and Social Care
Parliamentary Status - Text of Legislation - Made negative
Laid: Wednesday 3rd September - In Force: 1 Oct 2025

Found: Schedule 1 (special categories of personal data etc – health or social care purpose) to, the Data Protection Act

Global Irregular Migration and Trafficking in Persons Sanctions Regulations 2025
These Regulations are made under the Sanctions and Anti-Money Laundering Act 2018 (c. 13) to establish a sanctions regime for the purpose of preventing and combating people smuggling, trafficking in persons and the instrumentalisation of migration for the purpose of destabilising a country.
Foreign, Commonwealth & Development Office
Parliamentary Status - Text of Legislation - Made affirmative
Laid: Tuesday 22nd July - In Force: 23 Jul 2025

Found: licence. (6) In this regulation— “the data protection legislation” has the same meaning as in the Data Protection Act

Criminal Procedure Rules 2025
The Criminal Procedure Rules 2025:
Ministry of Justice
Parliamentary Status - Text of Legislation - Made negative
Laid: Tuesday 22nd July - In Force: 6 Oct 2025

Found: information about material, other than evidence, disclosed by the prosecutor; (e)Part 3 of the Data Protection Act

Financial Services and Markets Act 2023 (Mutual Recognition Agreement) (Switzerland) Regulations 2025
These Regulations implement provisions in the Agreement between the United Kingdom of Great Britain and Northern Ireland and the Swiss Confederation on Mutual Recognition in Financial Services done at Berne on 21st December 2023(52) (“the Agreement”).
HM Treasury
Parliamentary Status - Text of Legislation - Draft affirmative
Laid: Monday 21st July - In Force: Not stated

Found: . 2019/1043. (45)Section 391A of FSMA 2000 was amended by paragraph 50 of Schedule 2 to the Data Protection Act



Parliamentary Research
Data centres: planning policy, sustainability, and resilience - CBP-10315
Aug. 27 2025

Found: and retention of personal data by organisations including data centres must comply with the Data Protection Act



Bill Documents
Sep. 04 2025
Public Bill Committee Amendments as at 4 September 2025
Pension Schemes Bill 2024-26
Amendment Paper

Found: is no longer needed because of the general data protection override in section 183A of the Data Protection Act

Sep. 04 2025
Notices of Amendments as at 4 September 2025 - large print
Bus Services (No. 2) Bill [HL] 2024-26
Amendment Paper

Found: is no longer needed because of the general data protection override in section 183A of the Data Protection Act

Sep. 04 2025
Notices of Amendments as at 4 September 2025
Bus Services (No. 2) Bill [HL] 2024-26
Amendment Paper

Found: is no longer needed because of the general data protection override in section 183A of the Data Protection Act

Sep. 03 2025
Notices of Amendments as at 3 September 2025
Pension Schemes Bill 2024-26
Amendment Paper

Found: is no longer needed because of the general data protection override in section 183A of the Data Protection Act

Sep. 03 2025
Notices of Amendments as at 3 September 2025 - large print
Bus Services (No. 2) Bill [HL] 2024-26
Amendment Paper

Found: is no longer needed because of the general data protection override in section 183A of the Data Protection Act

Sep. 03 2025
Notices of Amendments as at 3 September 2025
Bus Services (No. 2) Bill [HL] 2024-26
Amendment Paper

Found: is no longer needed because of the general data protection override in section 183A of the Data Protection Act

Sep. 02 2025
Public Bill Committee Amendments as at 2 September 2025
Pension Schemes Bill 2024-26
Amendment Paper

Found: is no longer needed because of the general data protection override in section 183A of the Data Protection Act

Sep. 02 2025
Notices of Amendments as at 2 September 2025 - large print
Bus Services (No. 2) Bill [HL] 2024-26
Amendment Paper

Found: is no longer needed because of the general data protection override in section 183A of the Data Protection Act

Sep. 02 2025
Notices of Amendments as at 2 September 2025
Bus Services (No. 2) Bill [HL] 2024-26
Amendment Paper

Found: is no longer needed because of the general data protection override in section 183A of the Data Protection Act

Sep. 01 2025
Notices of Amendments as at 1 September 2025
Pension Schemes Bill 2024-26
Amendment Paper

Found: is no longer needed because of the general data protection override in section 183A of the Data Protection Act

Sep. 01 2025
HL Bill 101-IV Fourth marshalled list for Committee
Border Security, Asylum and Immigration Bill 2024-26
Amendment Paper

Found: following new Clause— “Exemption from UK GDPR: illegal migration and foreign criminals (1) The Data Protection Act

Jul. 24 2025
11th Report from the Select Committee on the Constitution
Crime and Policing Bill 2024-26
Select Committee report

Found: other legislation regulating access to personal data is arguably more narrowly framed; the Data Protection Act

Jul. 23 2025
HL Bill 129 (as amended on Report)
Employment Rights Bill 2024-26
Bill

Found: (4) In subsection (3)(a) “the data protection legislation” has the same meaning as in the Data Protection Act



Department Publications - Guidance
Sunday 31st August 2025
Department for Education
Source Page: Non-school alternative provision: voluntary national standards
Document: (PDF)

Found: It is important that proprietors are aware that, among other obligations, the Data Protection Act 2018

Friday 29th August 2025
Ministry of Housing, Communities and Local Government
Source Page: Planning Skills Delivery Fund: privacy notice
Document: Planning Skills Delivery Fund: privacy notice (webpage)

Found: following is to explain your rights and give you the information you are be entitled to under the Data Protection Act

Monday 25th August 2025
Foreign, Commonwealth & Development Office
Source Page: Mental health support for British nationals in Oman
Document: Mental health support for British nationals in Oman (webpage)

Found: Office holds and uses data for purposes notified to the Information Commissioner under the Data Protection Act

Tuesday 19th August 2025
Department for Digital, Culture, Media & Sport
Source Page: Community and Engagement Survey: Information for Participants
Document: Community and Engagement Survey: Information for Participants (webpage)

Found: All information will be processed in compliance with the Data Protection Act 2018 and General Data Protection

Tuesday 19th August 2025
Department for Digital, Culture, Media & Sport
Source Page: Community and Engagement Survey Privacy Notice
Document: Community and Engagement Survey Privacy Notice (webpage)

Found: Verian adheres to the following industry requirements: The UK GDPR, UK Data Protection Act 2018, the

Thursday 31st July 2025
Department for Energy Security & Net Zero
Source Page: CCUS East Coast Cluster Network Optimisation: projects market survey
Document: (webpage)

Found: may be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Friday 25th July 2025
Home Office
Source Page: Foreign Influence Registration Scheme: information notices
Document: (PDF)

Found: such as financial statements, then this information will be handled in accordance with the Data Protection Act

Thursday 24th July 2025
Home Office
Source Page: Afghan schemes: funding instructions 2025 to 2026 and interim data sharing protocol
Document: (PDF)

Found: “Data Protection Legislation” means (i) the UK GDPR, (ii) the Data Protection Act 2018 (‘DPA 2018’)



Department Publications - Consultations
Friday 29th August 2025
Department for Energy Security & Net Zero
Source Page: Extending the ECO4 end date
Document: (PDF)

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Friday 29th August 2025
Department for Energy Security & Net Zero
Source Page: Nuclear Safeguards (EU Exit) Regulations 2019 and the Nuclear Safeguards (Fees) Regulations 2021: proposed changes
Document: (PDF)

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Saturday 23rd August 2025
Department for Energy Security & Net Zero
Source Page: Contracts for Difference: reforms to the Clean Industry Bonus, Allocation Round 8
Document: (PDF)

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Friday 8th August 2025
Department for Energy Security & Net Zero
Source Page: Smart metering policy framework post 2025
Document: (PDF)

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Thursday 7th August 2025
Department for Business and Trade
Source Page: Consumer Scotland super-complaint application
Document: (PDF)

Found: These include the Data Protection Act 2018 and relevant employment legislation.

Thursday 7th August 2025
Department for Business and Trade
Source Page: Consumer Scotland super-complaint application
Document: (PDF)

Found: These include the Data Protection Act 2018 and relevant employment legislation.

Wednesday 6th August 2025
Ministry of Justice
Source Page: Proposal on the future of Stirling SSCS Tribunal Hearing Centre
Document: (PDF)

Found: to information regimes (these are primarily the Freedom of Information Act 2000 (FOIA), the Data Protection Act

Monday 4th August 2025
Department for Energy Security & Net Zero
Source Page: Smart Secure Electricity Systems Programme (SSES): enduring governance
Document: (PDF)

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Wednesday 30th July 2025
Department for Business and Trade
Source Page: Late payments: tackling poor payment practices
Document: (PDF)

Found: maximum fine amount at 2% of annual turnover, in line with comparable regulations – namely The Data Protection Act

Wednesday 23rd July 2025
Department for Energy Security & Net Zero
Source Page: Hydrogen blending into the GB gas transmission network
Document: (PDF)

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Wednesday 23rd July 2025
Department for Energy Security & Net Zero
Source Page: Consumer-led flexibility: consumer engagement
Document: (PDF)

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Tuesday 22nd July 2025
Cabinet Office
Source Page: Consultation on the NSI Act Notifiable Acquisition Regulations
Document: (PDF)

Found: the Freedom of Information Act 2000, the Environmental Information Regulations 2004, and the Data Protection Act



Department Publications - Statistics
Thursday 28th August 2025
Department for Digital, Culture, Media & Sport
Source Page: Evaluation of the Youth Investment Fund Phase 2: interim report
Document: (PDF)

Found: data, including the European General Data Protection Regulation (EU) 2016/679 (GDPR), the UK Data Protection Act

Thursday 31st July 2025
Ministry of Justice
Source Page: Proven reoffending statistics: July and September 2023
Document: (PDF)

Found: (Trustworthiness pillar, T6 Data governance) To comply with this and with the Data Protection Act of

Thursday 31st July 2025
Ministry of Justice
Source Page: HMPPS Annual Digest, April 2024 to March 2025
Document: (PDF)

Found: Low numbers are suppressed to prevent disclosure in accordance with the Data Protection Act 2018 and

Thursday 31st July 2025
Ministry of Justice
Source Page: HMPPS Annual Digest, April 2024 to March 2025
Document: (PDF)

Found: aggregate totals, preventing identification of individuals and infringement of the GDPR and Data Protection Act

Friday 25th July 2025
Department for Work and Pensions
Source Page: Sector-based Work Academy Programmes (SWAPs) Management Information, April 2021 to June 2025
Document: (ODS)

Found: Figures fewer than 5 are supressed due to rounding to avoid disclosure required by the Data Protection Act



Department Publications - Policy and Engagement
Wednesday 6th August 2025
Department for Energy Security & Net Zero
Source Page: CCUS future network strategy
Document: (PDF)

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Wednesday 6th August 2025
Department for Energy Security & Net Zero
Source Page: Evolution of economic regulation for CO2 storage
Document: (PDF)

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Wednesday 23rd July 2025
Department for Energy Security & Net Zero
Source Page: Improving the visibility of distributed energy assets
Document: (PDF)

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act



Department Publications - Transparency
Monday 4th August 2025
Department for Digital, Culture, Media & Sport
Source Page: The National Lottery Community Fund annual report and accounts 2024 to 2025
Document: (PDF)

Found: The UK GDPR, alongside the amended Data Protection Act 2018 and the Privacy and Electronic Communications

Tuesday 29th July 2025
Department for Digital, Culture, Media & Sport
Source Page: Gambling Commission annual report and accounts 2024 to 2025
Document: (PDF)

Found: procedures in place to maintain compliance with General Data Protection Regulation (GDPR), the Data Protection Act

Tuesday 22nd July 2025
Cabinet Office
Source Page: Royal Mail Statutory Pension Scheme 2024-2025
Document: (PDF)

Found: In line with the GDPR and the Data Protection Act 2018, the Scheme has ensured that: • contracts with

Tuesday 22nd July 2025
Cabinet Office
Source Page: Royal Mail Statutory Pension Scheme 2024-2025
Document: (PDF)

Found: In line with the GDPR and the Data Protection Act 2018, the Scheme has ensured that: • contracts

Monday 21st July 2025
HM Treasury
Source Page: HM Treasury annual report and accounts 2024 to 2025
Document: (PDF)

Found: were considered under the terms of the UK General Data Protection Regulation (UK GDPR) and Data Protection Act



Department Publications - News and Communications
Wednesday 23rd July 2025
HM Treasury
Source Page: NS&I Chair to step down
Document: Framework Document (PDF)

Found: information is received by either party under the Freedom of Information Act 2000, or the Data Protection Act



Non-Departmental Publications - Statistics
Sep. 04 2025
Law Commission
Source Page: Fourteenth programme of law reform
Document: (PDF)
Statistics

Found: framework regulating data protection currently comprises of the following main laws: (1) the Data Protection Act

Sep. 04 2025
HM Revenue & Customs
Source Page: Understanding the Lifetime ISA: Non-holder quantitative research
Document: (webpage)
Statistics

Found: awarded this in August 2008.The UK General Data Protection Regulation (UK GDPR) and the UK Data Protection Act

Aug. 21 2025
HM Prison and Probation Service
Source Page: HM Prison and Probation Service workforce quarterly: June 2025
Document: (ODS)
Statistics

Found: Low numbers are suppressed to prevent disclosure in accordance with the Data Protection Act, 1998.

Aug. 21 2025
HM Prison and Probation Service
Source Page: HM Prison and Probation Service workforce quarterly: June 2025
Document: (Excel)
Statistics

Found: Low numbers are suppressed to prevent disclosure in accordance with the Data Protection Act, 2018.

Aug. 21 2025
HM Prison and Probation Service
Source Page: HM Prison and Probation Service workforce quarterly: June 2025
Document: (ODS)
Statistics

Found: Low numbers are suppressed to prevent disclosure in accordance with the Data Protection Act, 2018.

Aug. 21 2025
HM Prison and Probation Service
Source Page: HM Prison and Probation Service workforce quarterly: June 2025
Document: (ODS)
Statistics

Found: Low numbers are suppressed to prevent disclosure in accordance with the Data Protection Act, 2018.

Aug. 21 2025
Planning Inspectorate
Source Page: Planning Inspectorate Ministerial Measures - Experimental Statistics 21 August 2025
Document: (PDF)
Statistics

Found: Responsible for Information training and they understand their responsibilities under the Data Protection Act

Aug. 15 2025
Low Pay Commission
Source Page: Low Pay Commission call for research
Document: (webpage)
Statistics

Found: GDPR, and any applicable national implementing Laws as amended from time to time; (ii) the Data Protection Act

Aug. 15 2025
Low Pay Commission
Source Page: Low Pay Commission call for research
Document: (webpage)
Statistics

Found: “DPA 2018” the Data Protection Act 2018.

Aug. 01 2025
Regulatory Policy Committee
Source Page: Late Payments - Tackling Poor Payment Practices: options assessment - RPC opinion (green-rated)
Document: OA (PDF)
Statistics

Found: maximum fine amount at 2% of annual turnover, in line with comparable regulations – namely The Data Protection Act

Aug. 01 2025
Environment Agency
Source Page: The Environment Agency's regulation of waste pneumatic tyres and their export
Document: (PDF)
Statistics

Found: Important: When creating an intelligence record you must adhere to both the Data Protection Act (2018

Jul. 31 2025
HM Prison and Probation Service
Source Page: HMPPS Annual Digest, April 2024 to March 2025
Document: (PDF)
Statistics

Found: Low numbers are suppressed to prevent disclosure in accordance with the Data Protection Act 2018 and

Jul. 31 2025
HM Prison and Probation Service
Source Page: HMPPS Annual Digest, April 2024 to March 2025
Document: (PDF)
Statistics

Found: aggregate totals, preventing identification of individuals and infringement of the GDPR and Data Protection Act

Jul. 24 2025
Centre for Connected and Autonomous Vehicles
Source Page: Automated vehicles and sanctions systems
Document: (PDF)
Statistics

Found: The UK General Data Protection Regulation (UK GDPR) and the UK Data Protection Act 2018 (DPA) Ipsos



Non-Departmental Publications - Open consultation
Sep. 04 2025
Intellectual Property Office
Source Page: Consultation on changes to the UK designs framework
Document: (PDF)
Open consultation

Found: These are primarily the Freedom of Information Act 2000 (FOIA)5F 6 Data Protection Act 2018 (DPA)6F

Sep. 04 2025
Intellectual Property Office
Source Page: Consultation on changes to the UK designs framework
Document: (PDF)
Open consultation

Found: These are primarily the Freedom of Information Act 2000 (FOIA)5F 6 Data Protection Act 2018 (DPA)6F

Aug. 06 2025
Marine Accident Investigation Branch
Source Page: Amendments to the MAIB regulations
Document: (PDF)
Open consultation

Found: protection legislation, where “the data protection legislation” has the same meaning as in the Data Protection Act

Aug. 06 2025
Marine Accident Investigation Branch
Source Page: Amendments to the MAIB regulations
Document: (PDF)
Open consultation

Found: The MAIB will process your personal data in accordance with the Data Protection Act and, in most circumstances



Non-Departmental Publications - Guidance and Regulation
Sep. 03 2025
Office of Financial Sanctions Implementation
Source Page: General Licence INT/2022/1710676 Revoked
Document: (PDF)
Guidance and Regulation

Found: to third parties only in compliance with the UK General Data Protection Regulation and the Data Protection Act

Sep. 02 2025
Defence and Security Accelerator
Source Page: Competition: Defence Innovation Loans FY25/26 Cycle 4
Document: (PDF)
Guidance and Regulation

Found: We particularly draw to your attention the Bribery Act 2010, the Data Protection Act 2018, the Fraud

Aug. 18 2025
Serious Fraud Office
Source Page: Joint SFO-CPS Corporate Prosecution Guidance
Document: Joint SFO-CPS Corporate Prosecution Guidance (webpage)
Guidance and Regulation

Found: proportionate, and made in accordance with applicable data protection legislation, including the Data Protection Act

Aug. 08 2025
Planning Inspectorate
Source Page: Nationally Significant Infrastructure Projects - Advice on working with public bodies in the infrastructure planning process: Annex A – Cyfoeth Naturiol Cymru / Natural Resources Wales
Document: Nationally Significant Infrastructure Projects - Advice on working with public bodies in the infrastructure planning process: Annex A – Cyfoeth Naturiol Cymru / Natural Resources Wales (webpage)
Guidance and Regulation

Found: Wales is also subject to the provisions of the Environmental Information Regulations 2004, the Data Protection Act

Jul. 30 2025
Government Operational Research Service
Source Page: The AQuA Book
Document: DESNZ Annual report (PDF)
Guidance and Regulation

Found: amounts paid are not disclosed as doing so would conflict with BEIS’ legal obligation under the data protection act

Jul. 23 2025
Office of Financial Sanctions Implementation
Source Page: OFSI General Licence INT/2022/1679676
Document: (PDF)
Guidance and Regulation

Found: to third parties only in compliance with the UK General Data Protection Regulation and the Data Protection Act

Jul. 22 2025
Regulator of Social Housing
Source Page: Memorandum of Understanding between the Regulator of Social Housing and The Health and Safety Executive (Building Safety Regulator)
Document: (PDF)
Guidance and Regulation

Found: with arrangements under this MoU, each party will ensure that they fully comply with the Data Protection Act



Non-Departmental Publications - Transparency
Aug. 28 2025
The Insolvency Service
Source Page: Insolvency Service FOI responses: July to September 2025
Document: (PDF)
Transparency

Found: Data Protection Act 2018 and the General Data Protection Regulation (GDPR) 49.

Aug. 06 2025
UK Hydrographic Office
Source Page: UK Hydrographic Office 2024-2025 Annual Report released
Document: (PDF)
Transparency

Found: Managing Public Money, The Hydrographic Office Trading Fund Order 1996, Public Records Act, Data Protection Act

Aug. 04 2025
The National Lottery Community Fund
Source Page: The National Lottery Community Fund annual report and accounts 2024 to 2025
Document: (PDF)
Transparency

Found: The UK GDPR, alongside the amended Data Protection Act 2018 and the Privacy and Electronic Communications

Jul. 30 2025
Civil Nuclear Constabulary
Source Page: The response to an FOI asking for the contracts register 2025
Document: (PDF)
Transparency

Found: disclosure of this information would breach the fair processing principle contained in the Data Protection Act

Jul. 29 2025
Civil Nuclear Constabulary
Source Page: CNPA Annual Report and Accounts 2024/25
Document: (PDF)
Transparency

Found: General Data Protection Regulation (GDPR) We comply with the Data Protection Act 2018 and with the

Jul. 29 2025
National Citizen Service
Source Page: National Citizen Service Trust annual report and accounts 2024 to 2025
Document: (PDF)
Transparency

Found: personal data on NCS participants, including ‘special category data’, in compliance with the Data Protection Act

Jul. 29 2025
Science Museum Group
Source Page: Science Museum Group Annual Report and Accounts 2024 to 2025
Document: (PDF)
Transparency

Found: protection We responded to 1,150 requests from individuals exercising their rights under the Data Protection Act

Jul. 23 2025
Crown Prosecution Service
Source Page: Crown Prosecution Service annual report and accounts 2024 - 2025
Document: (PDF)
Transparency

Found: teams ensure that data is effectively managed in line with the principles of UKGDPR, the Data Protection Act

Jul. 22 2025
Committee on Standards in Public Life
Source Page: Response to FOI request about staff training in AI
Document: (PDF)
Transparency

Found: the UK General Data Protection Regulation and section 34(1) of the Data Protection Act

Jul. 22 2025
Forensic Science Regulator
Source Page: Forensic Science Regulator annual report for 2023 to 2024
Document: (PDF)
Transparency

Found: (9) In subsection (8)(a) “the data protection legislation” has the same meaning as in the Data Protection Act

Jul. 22 2025
Maritime and Coastguard Agency
Source Page: Maritime and Coastguard Agency framework agreement
Document: (PDF)
Transparency

Found: under the Freedom of Information Act 2000, the environmental information regulations, or the Data Protection Act

Jul. 22 2025
NHS Business Services Authority
Source Page: NHSBSA annual report and accounts 2024 to 2025
Document: (PDF)
Transparency

Found: is subject to the requirements of the General Data Protection Regulation (GDPR) and the Data Protection Act

Jul. 22 2025
NHS Business Services Authority
Source Page: NHSBSA annual report and accounts 2024 to 2025
Document: (PDF)
Transparency

Found: is subject to the requirements of the General Data Protection Regulation (GDPR) and the Data Protection Act

Jul. 22 2025
Nuclear Decommissioning Authority
Source Page: Nuclear Decommissioning Authority: Annual Report and Accounts 2024 to 2025
Document: (PDF)
Transparency

Found: responded to all Subject Access Requests within the allotted timeframes allowed under the Data Protection Act

Jul. 21 2025
Driver and Vehicle Licensing Agency
Source Page: DVLA annual report and accounts 2024 to 2025
Document: (PDF)
Transparency

Found: number of payments, no further information is disclosed, as in doing so would conflict with the Data Protection Act

Jul. 21 2025
Trade Remedies Authority
Source Page: TRA Annual Report and Accounts 2024-25
Document: (PDF)
Transparency

Found: data protection legislation: the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act

Jul. 21 2025
Trade Remedies Authority
Source Page: TRA Annual Report and Accounts 2024-25
Document: (PDF)
Transparency

Found: data protection legislation: the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act



Non-Departmental Publications - Policy and Engagement
Aug. 12 2025
Medicines and Healthcare products Regulatory Agency
Source Page: Health Institution Exemption – Stakeholder survey
Document: (PDF)
Policy and Engagement

Found: Your rights under the UK General Data Protection Regulation and the UK Data Protection Act 2018 apply

Jul. 21 2025
HM Revenue & Customs
Source Page: Modernising and mandating tax adviser registration with HMRC
Document: (PDF)
Policy and Engagement

Found: (6) In this section— “the data protection legislation” has the same meaning as in the Data Protection Act

Jul. 21 2025
HM Revenue & Customs
Source Page: Enhancing HMRC’s powers: tackling tax adviser facilitated non-compliance
Document: (PDF)
Policy and Engagement

Found: (meaning of “control”); “the data protection legislation” has the same meaning as in the Data Protection Act

Jul. 21 2025
HM Revenue & Customs
Source Page: Proposals to close in on promoters of marketed tax avoidance
Document: (PDF)
Policy and Engagement

Found: the purpose of this Chapter; “data protection legislation” has the same meaning as in the Data Protection Act

Jul. 21 2025
Medicines and Healthcare products Regulatory Agency
Source Page: Medicines and Medical Devices Act 2021 – Stakeholder survey
Document: (PDF)
Policy and Engagement

Found: Data Privacy This Review complies with data protection legislation including the Data Protection Act



Non-Departmental Publications - News and Communications
Aug. 06 2025
UK Hydrographic Office
Source Page: UK Hydrographic Office 2024–2025 Annual Report released
Document: UK Hydrographic Office Annual Report and Accounts for 2024 to 2025 (PDF)
News and Communications

Found: Managing Public Money, The Hydrographic Office Trading Fund Order 1996, Public Records Act, Data Protection Act

Jul. 23 2025
NS&I
Source Page: NS&I Chair to step down
Document: Framework Document (PDF)
News and Communications

Found: information is received by either party under the Freedom of Information Act 2000, or the Data Protection Act



Arms Length Bodies Publications
Aug. 21 2025
NHS England
Source Page: Standard alternative provider medical services contract
Document: Standard alternative provider medical services contract (PDF)
NHS Standard Contract

Found: Patient vaccination status. 3A.3.2.3 “processing” has the meaning given by section 3(4) of the Data Protection Act

Aug. 21 2025
NHS England
Source Page: Standard general medical services (GMS) contract
Document: Standard general medical services (GMS) contract (PDF)
NHS Standard Contract

Found: 11A.2.2 In clause 11A.2: “processing” has the meaning given by section 3(4) of the Data Protection Act

Aug. 21 2025
NHS England
Source Page: Standard personal medical services (PMS) agreement
Document: Standard personal medical services (PMS) agreement (PDF)
NHS Standard Contract

Found: section 129 (regulations as to pharmaceutical services) of the 2006 Act; “DPA 2018” means the Data Protection Act

Aug. 18 2025
NHS England
Source Page: NHS Federated Data Platform data protection impact assessment – National Data Integration Tenant minimum viable product
Document: NHS Federated Data Platform data protection impact assessment – National Data Integration Tenant minimum viable product (webpage)
Regulatory

Found: Under section 10(3) of the Data Protection Act 2018 (DPA), this requires a condition in Part 2 of Schedule

Jul. 23 2025
NHS England
Source Page: NHS FDP product data protection impact assessment – Cancer 360
Document: NHS FDP product data protection impact assessment – Cancer 360 (PDF)
Data and statistics

Found: Legal basis under UK GDPR & Data Protection Act 2018 (DPA 2018): Article 6 – Personal Data To be completed

Jul. 23 2025
NHS England
Source Page: NHS FDP product data protection impact assessment – Timely Care Hub
Document: NHS FDP product data protection impact assessment – Timely Care Hub (PDF)
Data and statistics

Found: Legal basis under UK GDPR & Data Protection Act 2018 (DPA 2018): Article 6 – Personal Data To be completed

Jul. 23 2025
NHS England
Source Page: NHS FDP product data protection impact assessment – London Ambulance Service, My Clinical Feedback (LAS MCF)
Document: NHS FDP product data protection impact assessment – London Ambulance Service (LAS) My Clinical Feedback (PDF)
Regulatory

Found: NHS Act 2006 LAS Dataset NHS Act 2006 NHS Act 2006 NHS Act 2006 Legal basis under UK GDPR & Data Protection Act

Jul. 23 2025
NHS England
Source Page: NHS FDP product data protection impact assessment – Transport cancellation
Document: NHS FDP product data protection impact assessment – Transport cancellation (PDF)
Data and statistics

Found: Legal basis under UK GDPR & Data Protection Act 2018 (DPA 2018): Article 6 – Personal Data To be completed

Jul. 23 2025
NHS England
Source Page: NHS FDP product data protection impact assessment – Covid validated vaccination events
Document: NHS FDP product data protection impact assessment – Covid validated vaccination events (VVEs) (PDF)
Guidance

Found: Social Care Act 2012 s.261(5)(d) and s.13Z3 (e) and (f) Legal basis under UK GDPR & Data Protection Act

Jul. 23 2025
NHS England
Source Page: NHS FDP product data protection impact assessment – flu vaccination events
Document: NHS FDP product data protection impact assessment – flu vaccination events (PDF)
Guidance

Found: and Social Care Act 2012 s.261(5)(d) and s.13Z3 (e) and (f) Legal basis under UK GDPR & Data Protection Act

Jul. 23 2025
NHS England
Source Page: NHS FDP product data protection impact assessment – National vaccination programme reporting
Document: NHS FDP product data protection impact assessment – National vaccination programme reporting (PDF)
Guidance

Found: Legal basis under UK GDPR & Data Protection Act 2018 (DPA 2018): Article 6 – Personal Data - Article

Jul. 23 2025
NHS England
Source Page: NHS FDP product data protection impact assessment – Ambulance data services dashboard
Document: NHS FDP product data protection impact assessment – Ambulance data services dashboard (ADS) (PDF)
Data and statistics

Found: and Social Care Act 2012 s261(5)(d) and s13Z3 (e) and (f) Legal basis under UK GDPR & Data Protection Act



Draft Secondary Legislation
The Financial Services and Markets Act 2023 (Mutual Recognition Agreement) (Switzerland) Regulations 2025
These Regulations implement provisions in the Agreement between the United Kingdom of Great Britain and Northern Ireland and the Swiss Confederation on Mutual Recognition in Financial Services done at Berne on 21st December 2023(52) (“the Agreement”).
HM Treasury

Found: . 2019/1043. (45)Section 391A of FSMA 2000 was amended by paragraph 50 of Schedule 2 to the Data Protection Act



Deposited Papers
Friday 1st August 2025
Ministry of Justice
Source Page: Framework Document between the Ministry of Justice and HM Prison and Probation Service. Incl. annex. 35p.
Document: MOJ-HMPPS_Framework_2025__web_.pdf (PDF)

Found: information is received by either party under the Freedom of Information Act 2000, or the Data Protection Act

Friday 1st August 2025
Ministry of Justice
Source Page: Framework Document between Ministry of Justice and Office of the Public Guardian. Incl. annex. 40p.
Document: MOJ-OPG_Framework_2025__web_.pdf (PDF)

Found: information is received by either party under the Freedom of Information Act 2000, or the Data Protection Act

Wednesday 23rd July 2025
Department for Transport
Source Page: I. Executive Agency Framework Document: the Maritime and Coastguard Agency. Incl. annex. 50p. II. Letter dated 11/07/2025 from Mike Kane MP to the Deposited Papers Clerk regarding a document for deposit in the House libraries. 1p.
Document: Accessible_241001-MCA_FD_FINAL__2_.pdf (PDF)

Found: under the Freedom of Information Act 2000, the environmental information regulations, or the Data Protection Act

Wednesday 23rd July 2025
Home Office
Source Page: Ransomware legislative proposals: reducing payments to cyber criminals and increasing incident reporting. Government response. Incl. annex. 89p.
Document: Ransomware_legislative_proposals__22_July_2025_.pdf (PDF)

Found: access to information regimes, primarily the Freedom of Information Act 2000 (FOIA) and the Data Protection Act




Data Protection Act 2018 mentioned in Scottish results


Scottish Government Publications
Thursday 4th September 2025

Source Page: Details relating to the meeting between the First Minister and Eric Trump: FOI release
Document: Details relating to the meeting between the First Minister and Eric Trump: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 4th September 2025

Source Page: Todrig New Woodland (25FGS84239) Creation ecological report: EIR release
Document: EIR 202500459116 - Information Released - Annex (PDF)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 4th September 2025
Energy and Climate Change Directorate
Source Page: Electricity market deep dive session information: EIR release
Document: Electricity market deep dive session information: EIR release (webpage)

Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act

Thursday 4th September 2025

Source Page: Correspondence from Deputy First Minister which includes the phrase “full fiscal autonomy”: FOI release
Document: Correspondence from Deputy First Minister which includes the phrase “full fiscal autonomy”: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the  Data Protection Act

Thursday 4th September 2025
Energy and Climate Change Directorate
Source Page: Mey Battery Energy Storage System information: EIR release
Document: Mey Battery Energy Storage System information: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 4th September 2025

Source Page: Correspondence between the Scottish Government and the Scottish Fiscal Commission which includes the phrase “full fiscal autonomy” FOI release
Document: Correspondence between the Scottish Government and the Scottish Fiscal Commission which includes the phrase “full fiscal autonomy” FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 4th September 2025

Source Page: Correspondence between Scottish Ministers and ScotRail regarding Iona: FOI release
Document: Correspondence between Scottish Ministers and ScotRail regarding Iona: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 4th September 2025
Energy and Climate Change Directorate
Source Page: NESO gate status, developer engagement and grid capacity queries: EIR release
Document: NESO gate status, developer engagement and grid capacity queries: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 4th September 2025
Communications and Ministerial Support Directorate
Source Page: Details of Deputy First Minister's visit to City Holdings Ltd Housing Development: FOI release
Document: Details of Deputy First Minister's visit to City Holdings Ltd Housing Development: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 4th September 2025
Propriety and Ethics Directorate
Source Page: Queries regarding the use of secretariat members email accounts: FOI release
Document: Queries regarding the use of secretariat members email accounts: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 4th September 2025
Energy and Climate Change Directorate
Source Page: Correspondence from Senior Special Adviser which includes the phrase “zonal pricing”: FOI release
Document: FOI 202500459477 - Information released - Annex A and B (PDF)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 4th September 2025

Source Page: Small Vessel Replacement Programme (SVRP): FOI release
Document: Small Vessel Replacement Programme (SVRP): FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 4th September 2025
Energy and Climate Change Directorate
Source Page: Harbour Energy meetings and materials: EIR release
Document: Harbour Energy meetings and materials: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 4th September 2025
Marine Directorate
Source Page: Spiorad na Mara Offshore Wind Farm Scoping Report and Marine Mammal Assessment: EIR release
Document: Spiorad na Mara Offshore Wind Farm Scoping Report and Marine Mammal Assessment: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 4th September 2025
Equality, Inclusion and Human Rights Directorate
Source Page: Correspondence regarding the Human Rights Bill not being in the Programme for Government 2024/25: FOI release
Document: FOI 202500456329 - Information Released - Documents (PDF)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 4th September 2025
Energy and Climate Change Directorate
Source Page: Briefing materials and minutes between Scottish Government Ministers and Officials regarding zonal pricing meeting: FOI release
Document: Briefing materials and minutes between Scottish Government Ministers and Officials regarding zonal pricing meeting: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 3rd September 2025
International Trade and Investment Directorate
Source Page: Minister for Business meeting with PetroChina: FOI release
Document: Minister for Business meeting with PetroChina: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 2nd September 2025

Source Page: Correspondence regarding the Nexo championship in Aberdeenshire: FOI release
Document: Correspondence regarding the Nexo championship in Aberdeenshire: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Friday 29th August 2025
Learning Directorate
Education Reform Directorate
Source Page: Attainment Scotland Fund Evaluation: School Survey Report, 2025
Document: Attainment Scotland Fund Evaluation: School Survey Report, 2025 (PDF)

Found: We work in line with the UK General Data Protection Regulation (GDPR), the Data Protection Act 2018 and

Thursday 28th August 2025

Source Page: Social Security Scotland staff suspension queries: FOI release
Document: Social Security Scotland staff suspension queries: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 28th August 2025
People Directorate
Source Page: Scottish Government staff disciplinary and grievance statistics: FOI release
Document: Scottish Government staff disciplinary and grievance statistics: FOI release (webpage)

Found: out in Article 5(1) of the UK General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 28th August 2025
Marine Directorate
Source Page: Details of Equinor New Energy Ltd's proposal: EIR Review
Document: Details of Equinor New Energy Ltd's proposal: EIR Review (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 28th August 2025
Marine Directorate
Source Page: Details of Equinor New Energy Ltd's proposal: EIR release
Document: Details of Equinor New Energy Ltd's proposal: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 28th August 2025
Energy and Climate Change Directorate
Source Page: Zonal pricing impact on wind farm building in Scotland: EIR release
Document: Zonal pricing impact on wind farm building in Scotland: EIR release (webpage)

Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act

Wednesday 27th August 2025
Economic Development Directorate
Source Page: Contract with Navantia UK Ltd for Fleet Solid Support Ships documentation: FOI release
Document: Contract with Navantia UK Ltd for Fleet Solid Support Ships documentation: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 25th August 2025
Constitution Directorate
Source Page: House of Commons Scottish Affairs Committee correspondence: FOI release
Document: FOI 202500467668 - Information released - Annex A and B (PDF)

Found: nciples in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 21st August 2025
Justice Directorate
Source Page: Scotland for Decrim communications: FOI release
Document: Scotland for Decrim communications: FOI release (webpage)

Found: regulate the relationship between FOISA, the UK General Data Protection Regulation and the Data Protection Act

Thursday 21st August 2025
Justice Directorate
Source Page: National Ugly Mugs communications: FOI release
Document: National Ugly Mugs communications: FOI release (webpage)

Found: regulate the relationship between FOISA, the UK General Data Protection Regulation and the Data Protection Act

Wednesday 20th August 2025
Population Health Directorate
Source Page: Alcohol industry investment and public health messaging: FOI release
Document: Alcohol industry investment and public health messaging: FOI release (webpage)

Found: regulate the relationship between FOISA, the UK General Data Protection Regulation and the Data Protection Act

Wednesday 20th August 2025
Environment and Forestry Directorate
Source Page: Carbon Credit Pilot – blended finance mechanism considerations correspondence: FOI release
Document: Carbon Credit Pilot – blended finance mechanism considerations correspondence: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 20th August 2025
Safer Communities Directorate
Source Page: Preventing sexual exploitation research paper information: FOI release
Document: Preventing sexual exploitation research paper information: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 20th August 2025
Energy and Climate Change Directorate
Source Page: Sanqhuar II aviation condition discharge queries: EIR release
Document: Sanqhuar II aviation condition discharge queries: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 20th August 2025

Source Page: Information on various health related matters: FOI release
Document: Information on various health related matters: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 19th August 2025
Justice Directorate
Safer Communities Directorate
Source Page: Scottish Crime Recording Standard: Crime Recording and Counting Rules
Document: Scottish Crime Recording Standard crime recording and counting rules (PDF)

Found: telecommunications offences 84/003 Disclosure of information 84/004 Interception of communications 84/005 Data Protection Act

Tuesday 19th August 2025

Source Page: Nursing pay comparisons and prescribing queries: FOI release
Document: Nursing pay comparisons and prescribing queries: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 19th August 2025

Source Page: Forestry Grant Scheme (FGS) Environmental Impact Assessment (EIA) screening opinion for Colmslie: EIR release
Document: EIR 202500474833 - Information released - Annex (PDF)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 19th August 2025
International Trade and Investment Directorate
Source Page: Seapeak Maritime communications: FOI release
Document: Seapeak Maritime communications: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 19th August 2025
Energy and Climate Change Directorate
Source Page: Nuclear industry correspondence: EIR release
Document: Nuclear industry correspondence: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 18th August 2025
Marine Directorate
Source Page: Scoping report for the Stromar Offshore Wind Farm project: EIR release
Document: Scoping report for the Stromar Offshore Wind Farm project: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 18th August 2025
Marine Directorate
Source Page: Clarification on the Royal Society for the Protection of Birds (RSPB) consultation in Stromar Wind Farm scoping process: EIR release
Document: Clarification on the Royal Society for the Protection of Birds (RSPB) consultation in Stromar Wind Farm scoping process: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 18th August 2025

Source Page: Kneecap performance at Trnsmt documentation: FOI release
Document: Kneecap performance at Trnsmt documentation: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 18th August 2025

Source Page: Gresham House Forest Growth and Sustainability Fund and woodland creation scheme contracts: EIR release
Document: EIR 202500474203 - Information released - Annex A (PDF)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 18th August 2025
People Directorate
Source Page: Formal complaints regarding Special Advisers: FOI release
Document: Formal complaints regarding Special Advisers: FOI release (webpage)

Found: out in Article 5(1) of the UK General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 18th August 2025

Source Page: Maintenance operations at Stobo Hope: EIR release
Document: EIR 202500474226 - Information released - Annex (PDF)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 14th August 2025
Energy and Climate Change Directorate
Source Page: Storm overflow documentation: EIR release
Document: Storm overflow documentation: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 14th August 2025
Agriculture and Rural Economy Directorate
Source Page: Queries regarding rural payments claimed on agricultural land: EIR release
Document: Queries regarding rural payments claimed on agricultural land: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 13th August 2025
Marine Directorate
Source Page: Data on culls at Applecross and Couldoran salmon farms: EIR release
Document: Data on culls at Applecross and Couldoran salmon farms: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 13th August 2025
Marine Directorate
Source Page: Economic link to vessel Patricia Marta OB113 query: EIR release
Document: Economic link to vessel Patricia Marta OB113 query: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 13th August 2025
Agriculture and Rural Economy Directorate
Source Page: Wildlife Incident Investigation Scheme and contamination of wildlife by poisons information: EIR release
Document: Wildlife Incident Investigation Scheme and contamination of wildlife by poisons information: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 13th August 2025
Digital Directorate
Source Page: Guidance given to public bodies on software systems: FOI release
Document: Guidance given to public bodies on software systems: FOI release (webpage)

Found: future, as part of the SC3’s new Cyber Observatory (outlined above).Under the UK GDPR and the Data Protection Act

Wednesday 13th August 2025

Source Page: Correspondence regarding the First Minister's show at the Edinburgh Fringe: FOI release
Document: Correspondence regarding the First Minister's show at the Edinburgh Fringe: FOI release (webpage)

Found: constitutes personal data as defined by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act

Tuesday 12th August 2025

Source Page: Funding of Edinburgh’s tram transport network documentation: EIR release
Document: Funding of Edinburgh’s tram transport network documentation: EIR release (webpage)

Found: applicant and disclosure would contravene the data protection principles in Schedule 1 to the Data Protection Act

Tuesday 12th August 2025
Scottish Procurement and Property Directorate
Source Page: Private consultants expenditure: FOI release
Document: Private consultants expenditure: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 12th August 2025
Scottish Procurement and Property Directorate
Source Page: Private consultants expenditure: FOI release
Document: FOI 202500470980 - Information released - Attachments 1 - 3 (PDF)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 12th August 2025
Communications and Ministerial Support Directorate
Source Page: Scottish Government Executive Team correspondence regarding home and hybrid working: FOI release
Document: Scottish Government Executive Team correspondence regarding home and hybrid working: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 12th August 2025

Source Page: A77 essential road safety junction improvement queries: EIR release
Document: A77 essential road safety junction improvement queries: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 12th August 2025
Lifelong Learning and Skills Directorate
Source Page: Cabinet Secretary for the Constitution, External Affairs and Culture's visit to Glasgow and Clyde College documentation: FOI release
Document: Cabinet Secretary for the Constitution, External Affairs and Culture's visit to Glasgow and Clyde College documentation: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 12th August 2025
Population Health Directorate
Source Page: Cross government arrangement for future pandemic preparedness meeting information: FOI release
Document: FOI 202500473819 - Information released - Annex (PDF)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 12th August 2025
Marine Directorate
Source Page: Correspondence regarding Genesis II: EIR release
Document: Correspondence regarding Genesis II: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 12th August 2025
Energy and Climate Change Directorate
Source Page: Scotland’s Public Sector Heat Decarbonisation Fund documentation: EIR release
Document: Scotland’s Public Sector Heat Decarbonisation Fund documentation: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 12th August 2025
Energy and Climate Change Directorate
Source Page: Scotland’s Public Sector Heat Decarbonisation Fund documentation: EIR release
Document: EIR 202500473687 - Information released - Annex A - H (PDF)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 12th August 2025
Energy and Climate Change Directorate
Source Page: Spittal to Beauly overhead power line project documentation: EIR release
Document: Spittal to Beauly overhead power line project documentation: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 12th August 2025
Safer Communities Directorate
Source Page: Football related disorder roundtable documentation: FOI release
Document: Football related disorder roundtable documentation: FOI release (webpage)

Found: protection principles in the UK General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 11th August 2025
Energy and Climate Change Directorate
Source Page: Projects that have received funding from the Just Transition Fund: EIR release
Document: Projects that have received funding from the Just Transition Fund: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 11th August 2025
Marine Directorate
Source Page: Mowi, Salmon Scotland and Loch Hourn correspondence: EIR release
Document: Mowi, Salmon Scotland and Loch Hourn correspondence: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 11th August 2025
Justice Directorate
Source Page: Victims, Witnesses and Justice Reform (Scotland) Bill documentation: FOI release
Document: Victims, Witnesses and Justice Reform (Scotland) Bill documentation: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 11th August 2025
International Trade and Investment Directorate
Source Page: Details of the Business Minister's recent meetings in Beijing: FOI release
Document: Details of the Business Minister's recent meetings in Beijing: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 11th August 2025
Performance, Delivery and Resilience Directorate
Source Page: Scottish Government’s Resilience Room documentation regarding Galloway wildfire: FOI release
Document: Scottish Government’s Resilience Room documentation regarding Galloway wildfire: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 11th August 2025
Energy and Climate Change Directorate
Source Page: Meeting notes regarding Discussion on Zonal Pricing and Reformed National Market: EIR Review
Document: Meeting notes regarding Discussion on Zonal Pricing and Reformed National Market: EIR Review (webpage)

Found: applicant and disclosure would contravene the data protection principles in Schedule 1 to the Data Protection Act

Monday 11th August 2025
Marine Directorate
Source Page: Marine Fund grant for Empowering Communities for Marine Environment Restoration project: EIR release
Document: Marine Fund grant for Empowering Communities for Marine Environment Restoration project: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 7th August 2025

Source Page: Information relating to the Award of Supply of Transport Planning services #2: FOI release
Document: Information relating to the Award of Supply of Transport Planning services #2: FOI release (webpage)

Found: applicant and disclosure would contravene the data protection principles in Schedule 1 to the Data Protection Act

Thursday 7th August 2025
Local Government and Housing Directorate
Source Page: Review of the Building Standards Operating and Performance Frameworks for Verifiers
Document: Review of the Building Standards Operating and Performance Frameworks for Verifiers (PDF)

Found: on the performance of the Verifier Verifier must ensure that the requirements of UK GDPR and Data Protection Act

Thursday 7th August 2025
Population Health Directorate
Source Page: Evaluation of the Impact of Scottish Government Funding: Gender Identity Healthcare
Document: Evaluation of the Impact of Scottish Government Funding: Gender Identity Healthcare (PDF)

Found: conducted online via Microsoft Teams; they were recorded and managed in compliance with UK Data Protection Act

Thursday 7th August 2025
Marine Directorate
Source Page: Ministerial correspondence with Salmon Scotland Chief Executive: EIR release
Document: Ministerial correspondence with Salmon Scotland Chief Executive: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 7th August 2025
Health Workforce Directorate
Chief Nursing Officer Directorate
Source Page: NHSScotland Employment Checks Policy Equality Impact Assessment Results
Document: NHSScotland Employment Checks Policy Equality Impact Assessment Results (PDF)

Found: • is clear that legislation, particularly the Human Rights Act 1998, and Data Protection Act 2018

Thursday 7th August 2025
Marine Directorate
Source Page: Framework Document between The Scottish Government and Crown Estate Scotland
Document: Framework Document between The Scottish Government and Crown Estate Scotland (PDF)

Found: also register with Information Commissioners Office and ensure that it complies with the Data Protection Act

Thursday 7th August 2025

Source Page: Correspondence between Cabinet Secretary for Transport and Caledonian Maritime Assets Limited (CMAL): FOI release
Document: Correspondence between Cabinet Secretary for Transport and Caledonian Maritime Assets Limited (CMAL): FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 7th August 2025

Source Page: Correspondence regarding MV Isle of Islay delay: FOI release
Document: Correspondence regarding MV Isle of Islay delay: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 7th August 2025
Communications and Ministerial Support Directorate
Source Page: Cabinet Secretary for Finance and Local Government correspondence with the MSP for Dundee City East: FOI release
Document: FOI 202500471344 - Information released - Annex (PDF)

Found: 1998 and any Act that replaces the Data Protection Act.

Thursday 7th August 2025
People Directorate
Source Page: Scottish Government staff promotion statistics: FOI release
Document: Scottish Government staff promotion statistics: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 6th August 2025
Local Government and Housing Directorate
Source Page: Former Minister for Housing correspondence regarding Reinforced Autoclaved Aerated Concrete (RAAC): EIR release
Document: Former Minister for Housing correspondence regarding Reinforced Autoclaved Aerated Concrete (RAAC): EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 6th August 2025

Source Page: Correspondence regarding Middle East humanitarian aid: FOI release
Document: Correspondence regarding Middle East humanitarian aid: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 6th August 2025
Energy and Climate Change Directorate
Source Page: First Minister correspondence regarding fast-tracking Scotland’s energy transition: EIR release
Document: First Minister correspondence regarding fast-tracking Scotland’s energy transition: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 6th August 2025
Performance, Delivery and Resilience Directorate
Source Page: First Minister’s Scotland 2050 Conference speech information: FOI release
Document: FOI 202500471428 - Information released - Annex B (PDF)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 6th August 2025
Safer Communities Directorate
Source Page: Youth Violence Summit information: FOI release
Document: Youth Violence Summit information: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 6th August 2025
Marine Directorate
Source Page: Fishing for Litter Scotland project expenditure from the Marine Fund: EIR release
Document: Fishing for Litter Scotland project expenditure from the Marine Fund: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 6th August 2025
Energy and Climate Change Directorate
Source Page: Briefing on energy market considerations: EIR Review
Document: Briefing on energy market considerations: EIR Review (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 5th August 2025
Environment and Forestry Directorate
Source Page: Seagull attack documentation: EIR release
Document: EIR 202500470080 - Information released - Annex A and B (PDF)

Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act

Tuesday 5th August 2025

Source Page: Safety Audit findings for the Lothianburn/Hillend junction and trunk road: EIR release
Document: Safety Audit findings for the Lothianburn/Hillend junction and trunk road: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 5th August 2025
International Trade and Investment Directorate
Source Page: Preparatory work completed by Scottish Government regarding USA tariffs: FOI release
Document: Preparatory work completed by Scottish Government regarding USA tariffs: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 5th August 2025
International Trade and Investment Directorate
Source Page: Scottish Enterprise funding for companies in the defence sector: FOI release
Document: Scottish Enterprise funding for companies in the defence sector: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 5th August 2025
Energy and Climate Change Directorate
Source Page: Meeting notes regarding Discussion on Zonal Pricing and Reformed National Market: FOI release
Document: Meeting notes regarding Discussion on Zonal Pricing and Reformed National Market: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 5th August 2025
Energy and Climate Change Directorate
Source Page: Carbon Removers and Green Hydrogen export to Germany: FOI release
Document: Carbon Removers and Green Hydrogen export to Germany: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 5th August 2025
Communications and Ministerial Support Directorate
Source Page: Scottish Government's news release on the UK Government's Spending Review: FOI release
Document: Scottish Government's news release on the UK Government's Spending Review: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 5th August 2025

Source Page: Scottish Forestry grant payments for the Lost Forest, phases 1 and 2: EIR release
Document: EIR 202500458836 - Information Released - Annex (PDF)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 5th August 2025
Energy and Climate Change Directorate
Source Page: Return on capital and renewables: EIR Review
Document: Return on capital and renewables: EIR Review (webpage)

Found: applicant and disclosure would contravene the data protection principles in Schedule 1 to the Data Protection Act

Tuesday 5th August 2025

Source Page: Correspondence regarding peak rail fares: FOI release
Document: Correspondence regarding peak rail fares: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 5th August 2025
Energy and Climate Change Directorate
Source Page: Briefings to Ministers on the electricity market and/or wider net zero issues: FOI Review
Document: Briefings to Ministers on the electricity market and/or wider net zero issues: FOI Review (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 5th August 2025
Communications and Ministerial Support Directorate
Source Page: Ministerial correspondence regarding "Debate Night": FOI release
Document: Ministerial correspondence regarding "Debate Night": FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 5th August 2025

Source Page: Road and junction alterations - Swallow Roundabout, Dundee: EIR release
Document: Road and junction alterations - Swallow Roundabout, Dundee: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Tuesday 5th August 2025

Source Page: Documents held on ERDM system containing the phrase 'full fiscal autonomy': FOI release
Document: Documents held on ERDM system containing the phrase 'full fiscal autonomy': FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 4th August 2025
Energy and Climate Change Directorate
Source Page: Cost analysis on heat pump policy: EIR release
Document: Cost analysis on heat pump policy: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 4th August 2025
Equality, Inclusion and Human Rights Directorate
Source Page: Equality and Human Rights Fund information: FOI release
Document: FOI 202500468614 - Information released - Annex (PDF)

Found: individuals with regard to the processing of Personal Data to which a Party is subject including the Data Protection Act

Monday 4th August 2025

Source Page: Technical review of the Bonjedward House access from A68: EIR release
Document: Technical review of the Bonjedward House access from A68: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 4th August 2025

Source Page: Road upgrades, repairs and costs correspondence with Scottish Greens: EIR release
Document: Road upgrades, repairs and costs correspondence with Scottish Greens: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Monday 4th August 2025
Lifelong Learning and Skills Directorate
Source Page: Education portfolio questions documentation: FOI release
Document: Education portfolio questions documentation: FOI release (webpage)

Found: relationship between FOISA, the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act

Monday 4th August 2025
Social Security Directorate
Source Page: Winter Fuel Payment documentation: FOI release
Document: Winter Fuel Payment documentation: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulations and in section 34(1) of the Data Protection Act

Thursday 31st July 2025

Source Page: Lamb Hill and Castle Hill Environmental Impact Assessment screening opinion: EIR Review
Document: EIR 202500468157 - Information released - Annex (PDF)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 31st July 2025

Source Page: Tradebe documentation: FOI release
Document: Tradebe documentation: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 31st July 2025
Population Health Directorate
Source Page: Running Out Racism correspondence and meetings: FOI release
Document: Running Out Racism correspondence and meetings: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 31st July 2025
Population Health Directorate
Source Page: Running Out Racism correspondence and meetings: FOI release
Document: FOI 202500459291 - Information Released - Documents (PDF)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 31st July 2025

Source Page: Phase stage diagram for the traffic light sequence at the Myrekirk roundabout: FOI release
Document: Phase stage diagram for the traffic light sequence at the Myrekirk roundabout: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 31st July 2025

Source Page: Screening opinions requiring Environmental Impact Assessment consent: EIR release
Document: Screening opinions requiring Environmental Impact Assessment consent: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 31st July 2025
Energy and Climate Change Directorate
Source Page: Glenmuckloch to Glenglass Reinforcement Project communications: EIR Review
Document: Glenmuckloch to Glenglass Reinforcement Project communications: EIR Review (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 31st July 2025

Source Page: Forestry Grant Scheme (FGS) application information: EIR release
Document: Forestry Grant Scheme (FGS) application information: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 31st July 2025
Safer Communities Directorate
Source Page: Scottish Violence Reduction Unit funding correspondence: FOI release
Document: Scottish Violence Reduction Unit funding correspondence: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Thursday 31st July 2025
Safer Communities Directorate
Source Page: Scottish Violence Reduction Unit funding correspondence: FOI release
Document: FOI 202500468570 - Information Released - Annex (PDF)

Found: relevant court of law, or directives or requirements of any regulatory body including the Data Protection Act

Wednesday 30th July 2025

Source Page: A96 Traffic Regulation Orders and traffic study: EIR release
Document: A96 Traffic Regulation Orders and traffic study: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 30th July 2025

Source Page: Ernst & Young correspondence regarding the Scottish Government Bonds Financial Advisor contract: FOI release
Document: FOI 202500466583 - Information released - Annex (PDF)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 30th July 2025
Communications and Ministerial Support Directorate
Source Page: Ministerial salary increase timing and messaging records: FOI Review
Document: Ministerial salary increase timing and messaging records: FOI Review (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 30th July 2025
Population Health Directorate
Source Page: National Institute of Disability Management and Research (NIDMAR) training programme queries: FOI release
Document: FOI 202500466819 - Information released - Documents (PDF)

Found: relevant court of law, or directives or requirements of any regulatory body including the Data Protection Act

Wednesday 30th July 2025
Population Health Directorate
Source Page: National Institute of Disability Management and Research (NIDMAR) training programme queries: FOI release
Document: National Institute of Disability Management and Research (NIDMAR) training programme queries: FOI release (webpage)

Found: because personal data is protected under the UK General Data Protection Regulation (GDPR) and the Data Protection Act

Wednesday 30th July 2025
Marine Directorate
Source Page: Wrasse fishing season information: EIR release
Document: Wrasse fishing season information: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 30th July 2025

Source Page: Kneecap correspondence: FOI release
Document: Kneecap correspondence: FOI release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Wednesday 30th July 2025
Marine Directorate
Source Page: Mass stranding of pilot whales information: EIR release
Document: Mass stranding of pilot whales information: EIR release (webpage)

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act




Data Protection Act 2018 mentioned in Welsh results


Welsh Committee Publications
Wednesday 25th June 2025
PDF - Letter from the Leader of Cardiff Council to the Chair in relation to the Bus Services (Wales) Bill - 25 June 2025

Inquiry: Report on the Bus Services (Wales) Bill


Found: SWYDDFA’R ARWEINYDD LEADER'S OFFICE Your information is processed under the Data Protection Act 2018


PDF - 01 May 2025

Inquiry: The Welsh Government’s Legislative Consent Memorandum on the Data (Use and Access) Bill


Found: provided by UK legislation set out in the General Data Protection Regulation (GDPR) and the Data Protection Act


PDF - Explanatory Memorandum

Inquiry: Homelessness and Social Housing Allocation (Wales) Bill


Found: or use of information that would contravene data protection legislation, as defined by the Data Protection Act


PDF - Homelessness and Social Housing Allocation (Wales) Bill, as introduced

Inquiry: Homelessness and Social Housing Allocation (Wales) Bill


Found: information which would contravene data protection legislation (within the meaning of the Data Protection Act


PDF - EM - The Legislative Reform (Disclosure of Adult Social Care Data) Order 2025

Inquiry: Report on the Statutory Instrument Consent Memorandum for the Legislative Reform (Disclosure of Adult Social Care Data) Order 2025


Found: Data Protection Act 2018).


PDF - Building Safety (Wales) Bill, as introduced

Inquiry: Building Safety (Wales) Bill


Found: (9) In this section— “the data protection legislation” has the same meaning as in the Data Protection Act


PDF - Explanatory Memorandum.

Inquiry: Building Safety (Wales) Bill


Found: Subsection (9) provides that “the data protection legislation” has the same meaning as in the Data Protection Act


PDF - Letter from the Leader of Cardiff Council to the Chair in relation to the Bus Services (Wales) Bill – 25 June 2025

Inquiry: Report on the Bus Services (Wales) Bill


Found: SWYDDFA’R ARWEINYDD LEADER'S OFFICE Your information is processed under the Data Protection Act 2018


PDF - Supplementary LCM

Inquiry: Legislative Consent: Children’s Wellbeing and Schools Bill


Found: Education Act 2002 • The Academies Act 2010 • School Standards and Framework Act 1998 • Data Protection Act


PDF - Explanatory Memorandum

Inquiry: Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill


Found: Information Commissioner's Office (ICO) is the independent regulatory office dealing with the Data Protection Act


PDF - Bill

Inquiry: Environment (Principles, Governance and Biodiversity Targets) (Wales) Bill


Found: 25 (4) In this section, “the data protection legislation” has the same meaning as in the Data Protection Act


PDF - Supplementary LCM

Inquiry: Legislative Consent: Children’s Wellbeing and Schools Bill


Found: The Education Act 2002  The Academies Act 2010  School Standards and Framework Act 1998  Data Protection Act



Welsh Government Publications
Friday 4th July 2025

Source Page: Distribution Sub Group meeting: 4 July 2025
Document: Paper 09 (PDF)

Found: Data was supplied via postcodes and handled in accordance with the 1998 Data Protection Act with special

Thursday 19th June 2025

Source Page: Patterns of attainment in reading and numeracy: September 2018 to August 2024
Document: Patterns of attainment in reading and numeracy: September 2018 to August 2024 (webpage)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Tuesday 17th June 2025

Source Page: Homelessness and Social Housing Allocation (Wales) Bill: impact assessments
Document: Data protection impact assessment (webpage)

Found: Section 8 of the Data Protection Act 2018 (“the 2018 Act”) supplements Article 6(1) of the UK GDPR by

Monday 16th June 2025

Source Page: FOI release 24727: Wales and West Housing Association
Document: Doc 1 (PDF)

Found: Information Act 2000 (the “FOIA”), the Environmental Information Regulations 2004 (the “EIR”), the Data Protection Act

Monday 16th June 2025

Source Page: FOI release 24727: Wales and West Housing Association
Document: Doc 2 (PDF)

Found: Information Act 2000 (the “FOIA”), the Environmental Information Regulations 2004 (the “EIR”), the Data Protection Act

Monday 16th June 2025

Source Page: FOI release 24727: Wales and West Housing Association
Document: Wales and West Housing Association (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Wednesday 11th June 2025

Source Page: FOI release 24708: Staff policies
Document: Doc 1 (PDF)

Found: Act 2010 4.2 Gender Recognition Act 2004 4.3 UK General Data Protection Regulation and Data Protection Act

Wednesday 11th June 2025

Source Page: FOI release 24699: Indian Office
Document: Indian Office (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)

Monday 9th June 2025

Source Page: FOI release 24700: Planning Applications
Document: Planning Applications (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Friday 6th June 2025

Source Page: FOI release 24466: Planning inspectors
Document: Internal Review (PDF)

Found: data protection principles, or (b) would do so if the exemptions in section 24(1) of the Data Protection Act

Friday 6th June 2025

Source Page: FOI release 24466: Planning inspectors
Document: Planning inspectors (PDF)

Found: dictated by data protection regulations; General Data Protection Regulations UK (UK GDPR) and Data Protection Act

Wednesday 4th June 2025

Source Page: FOI release 24689: Brexit
Document: Brexit (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Tuesday 3rd June 2025

Source Page: FOI release 24688: Newtown Bypass
Document: Newtown Bypass (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Tuesday 3rd June 2025

Source Page: Attendance of pupils in maintained schools: 2 September 2024 to 23 May 2025
Document: Attendance of pupils in maintained schools: 2 September 2024 to 23 May 2025 (webpage)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Tuesday 20th May 2025

Source Page: FOI release 24539: Free School Meals
Document: Free School Meals (PDF)

Found: Education Act 1996 and that their processing of personal data is in line with UK GDPR and the Data Protection Act

Monday 19th May 2025

Source Page: Small Grants – Environment (water): general rules booklet 2025
Document: Small Grants – Environment (water): general rules booklet 2025 (webpage)

Found: in accordance with the obligations and duties under the Freedom of Information Act 2000, the Data Protection Act

Monday 19th May 2025

Source Page: FOI release 23214: River Basin Management Plans
Document: River Basin Management Plans (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Monday 19th May 2025

Source Page: Rights, respect, equality anti-bullying guidance
Document: Rights, respect, equality: statutory guidance for schools and settings (draft) (PDF)

Found: protection legislation, such as the EU General Data Protection Regulation (GDPR) and the UK Data Protection Act

Monday 19th May 2025

Source Page: Development management manual
Document: Development management manual (without annexes) (PDF)

Found: However, under the Data Protection Act 1998, the addresses and other contact information of private

Thursday 15th May 2025

Source Page: Commons Act 2006: apply under section 38
Document: Commons Act 2006: apply under section 38 (PDF)

Found: Organisation (if applicable) Date You must keep a copy of your completed form Data Protection Act

Wednesday 14th May 2025

Source Page: Welsh Government’s standard conditions for the supply of services
Document: Standard conditions for the supply of services (PDF)

Found: this Contract in respect of which such Party is liable to the other; DPA 2018 means the Data Protection Act

Monday 12th May 2025

Source Page: Partnership arrangements for care and support: guidance
Document: Part 9 statutory guidance: partnership arrangements (PDF)

Found: other duties, including its duties under the General Data Protection Regulations 2018, the Data Protection Act

Thursday 8th May 2025

Source Page: Assets Collaboration Programme Wales Phase 3 (ACPW3): grant offer letter
Document: Grant offer letter (webpage)

Found: Information Act 2000 (the “FOIA”), the Environmental Information Regulations 2004 (the “EIR”), the Data Protection Act

Wednesday 7th May 2025

Source Page: Access Broadband Cymru: sample standard grant letter
Document: Access Broadband Cymru: sample standard grant letter (webpage)

Found: Information Act 2000 (the “FOIA”), the Environmental Information Regulations 2004 (the “EIR”), the Data Protection Act

Tuesday 6th May 2025

Source Page: Attendance of pupils in maintained schools: 2 September 2024 to 25 April 2025
Document: Attendance of pupils in maintained schools: 2 September 2024 to 25 April 2025 (webpage)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Monday 28th April 2025

Source Page: Iaith Athrawon Yfory Incentive Scheme: guidance for ITE partnerships from 2023 and 2024
Document: Iaith Athrawon Yfory Incentive Scheme: guidance for ITE partnerships from 2023 and 2024 (webpage)

Found: Information Regulations 2004 (the “EIR”) the General Data Protection Regulation (GDPR) and Data Protection Act

Monday 28th April 2025

Source Page: National multi-agency practice framework for children’s services
Document: National multi-agency practice framework for children’s services (webpage)

Found: their legal obligations, namely the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act

Thursday 24th April 2025

Source Page: FOI release 24584: Ceredigion Local Development Plan
Document: Doc 1 (PDF)

Found: Under the UK GDPR, Data Protection Act 2018 and the Freedom of Information Act 2000 the contents of

Thursday 24th April 2025

Source Page: FOI release 24584: Ceredigion Local Development Plan
Document: Ceredigion Local Development Plan (PDF)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Tuesday 22nd April 2025

Source Page: Attendance of pupils in maintained schools: 2 September 2024 to 11 April 2025
Document: Attendance of pupils in maintained schools: 2 September 2024 to 11 April 2025 (webpage)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act



Welsh Written Answers
WQ96336
Asked by: Gareth Davies (Welsh Conservative Party - Vale of Clwyd)
Friday 2nd May 2025

Question

What Welsh Government guidance is provided to GP practices regarding charging patients for accessing their medical records?

Answered by Cabinet Secretary for Health and Social Care

The General Data Protection Regulations and the Data Protection Act 2018 were made by the UK government and apply to the four nations of the UK. GP practices cannot charge patients for reasonable access to their medical record. Guidance for GPs has been issued by the BMA to help practices in understanding their statutory obligations. bma-access-to-health-records-nov-19.pdf