Found: Although the UK has the Human Rights Act 1998 and the Data Protection Act, the UK does not have specific

Question to the Home Office:

To ask His Majesty's Government what steps they are taking to ensure that any use of live facial recognition cameras by law enforcement bodies is subject to clear safeguards to protect privacy and human rights.

Answered by Lord Hanson of Flint - Minister of State (Home Office)

When deploying facial recognition technology, police forces must comply with existing legislation including the Human Rights Act 1998, Equality Act 2010, Data Protection Act 2018, Police and Criminal Evidence Act 1984, as well as their own published policies. For live facial recognition, police forces must also follow the College of Policing’s Authorised Professional Practice (APP) on Live Facial Recognition. Forces must also give due regard to the Surveillance Camera Code of Practice, which is supplemented by published policing policies.

On 4 December the Government launched a 10 week public consultation on law enforcement use of biometrics, facial recognition and similar technologies. We are consulting on a new legal framework to create consistent, durable rules and appropriate safeguards for biometrics and facial recognition. This framework will aim to strike the right balance between public protection and privacy. The consultation will close week commencing 9 Feb 2026.

Question to the Home Office:

To ask His Majesty's Government what plans they have to restrict the circumstances in which children may be added to facial recognition watchlists.

Answered by Lord Hanson of Flint - Minister of State (Home Office)

Facial recognition is a crucial tool that helps the police locate missing people, suspects, and those wanted by the courts.

In some cases, under the existing legal framework this includes vulnerable individuals such as missing children. When using facial recognition technology, police forces must comply with legislation including the Human Rights Act 1998, Equality Act 2010, Data Protection Act 2018, Police and Criminal Evidence Act 1984, as well as their own published policies. For live facial recognition, police forces must also follow the College of Policing’s Authorised Professional Practice (APP) on Live Facial Recognition.

This sets out the categories of people who may be included on a watchlist. These include individuals wanted by the police or the courts, suspects, missing or vulnerable people, or those posing a risk of harm to themselves or others. In each case, inclusion on a watchlist must be justified and authorised, and must pass the tests of necessity, proportionality and use for a policing purpose.

On 4^th December the Government launched a consultation on a new legal framework for law enforcement use of biometrics, facial recognition and similar technologies. During the consultation we want to hear views on when and how biometrics, facial recognition and similar technologies should be used, and what safeguards and oversight are needed.

Question to the Home Office:

To ask His Majesty's Government whether they plan to introduce limits on the circumstances in which police forces can add children to facial recognition watchlists.

Answered by Lord Hanson of Flint - Minister of State (Home Office)

Facial recognition is a crucial tool that helps the police locate missing people, suspects, and those wanted by the courts.

In some cases, under the existing legal framework this includes vulnerable individuals such as missing children. When using facial recognition technology, police forces must comply with legislation including the Human Rights Act 1998, Equality Act 2010, Data Protection Act 2018, Police and Criminal Evidence Act 1984, as well as their own published policies. For live facial recognition, police forces must also follow the College of Policing’s Authorised Professional Practice (APP) on Live Facial Recognition.

This sets out the categories of people who may be included on a watchlist. These include individuals wanted by the police or the courts, suspects, missing or vulnerable people, or those posing a risk of harm to themselves or others.In each case, inclusion on a watchlist must be justified and authorised, and must pass the tests of necessity, proportionality and use for a policing purpose.

On 4^th December the Government launched a consultation on a new legal framework for law enforcement use of biometrics, facial recognition and similar technologies. During the consultation we want to hear views on when and how biometrics, facial recognition and similar technologies should be used, and what safeguards and oversight are needed.

Question to the Department of Health and Social Care:

To ask the Secretary of State for Health and Social Care, what assessment his Department has made of making patient records owned by the patient.

Answered by Zubir Ahmed - Parliamentary Under-Secretary (Department of Health and Social Care)

Health records are not owned by patients, as the providers of care who create and maintain the records are the data controllers, although all patients have the right to access their records under the Data Protection Act 2018. Patients also have the legal right to ask for factual inaccuracies to be amended.

The general practice (GP) record can be viewed online on the NHS App, or by logging onto the National Health Service website. Individuals can alternatively contact their practice to view their record. To view a hospital record, individuals can ask the trust where they are a patient.

As part of the 10-Year Health Plan, we are developing a single patient record which will give patients greater control over their records, and act as a patient passport to seamless care. It will provide a single, secure, and authoritative account of their data by bringing together all of a patient’s medical information from different records in one place, for example GP and hospital data, and patients will be able to view the record securely on the NHS App and add their own data, for example from a wearable device.

Question to the Department for Digital, Culture, Media & Sport:

To ask the Secretary of State for Culture, Media and Sport, how many disciplinary cases were concluded against civil servants in (a) her Department and (b) its agencies by (i) outcome and (ii) whether the primary allegation related to (A) performance and (B) conduct in the last twelve months.

Answered by Ian Murray - Minister of State (Department for Science, Innovation and Technology)

In the last 12 months, there have been 6 disciplinary cases that have concluded within DCMS. All related to an allegation of misconduct.

We cannot provide the outcome of closed disciplinary cases. Doing so would breach the Data Protection Act and risk identifying individual cases where the case count is five or less, as the information relates to someone other than the data subjects.

DCMS does not hold information regarding its agencies, including its arms-length and public bodies. This is because they are independent employers from the department.

Poor performance is addressed under a separate management procedure.

Question to the Home Office:

To ask the Secretary of State for the Home Department, with reference to the Written Statement entitled Consultation on a new legal framework for law enforcement use of biometrics, facial recognition and similar technologies, published on 4 December 2025, HCWS1129, what assessment her Department has made of current police practice regarding the deployment of facial recognition and related technologies; how operational consistency across police forces will be ensured under the proposed new framework; and what plans she has to strengthen oversight mechanisms, including independent scrutiny, to guarantee that law enforcement agencies use these technologies only within clearly defined legal parameters and with transparent accountability.

Answered by Sarah Jones - Minister of State (Home Office)

The Government recognises the importance of ensuring the use of facial recognition and similar biometric technologies by law enforcement remains proportionate to the seriousness of the harm being addressed. The consultation launched on 4 December seeks views on whether seriousness of harm should be a factor to decide how and when law enforcement organisations can acquire, retain, and use biometrics, facial recognition, and similar technology. The consultation also asks for views on what factors are relevant to consider when assessing ‘seriousness’ of harm and for which purposes should law enforcement organisations be allowed to use these technologies.

We do not intend to publish an impact assessment specifically on the potential implications for civil liberties as part of the consultation process. However, alongside the consultation we have published an equalities impact assessment which makes clear the Government’s commitment to building public trust by highlighting the specific legal frameworks that will be put in place and the statutory bodies for oversight, which will apply to everyone in England and Wales.

We recognise that to maintain public confidence we must ensure individual rights, privacy and data security are protected. We believe that the use of biometric and inferential technology should always be demonstrably ‘necessary’ and ‘proportionate’ to the objective being sought. Furthermore, a clear and consistent justification for interference with people’s rights is required. Threshold setting and decision making needs to be attributed to, and shared appropriately between, Parliament, Ministers, independent oversight bodies, and law enforcement organisations. The consultation seeks views on what factors are relevant to consider when assessing interference with privacy so as to ensure the legal framework reflects the views of the public.

When using facial recognition technology, police forces must comply with existing legislation including the Human Rights Act 1998, Equality Act 2010, Data Protection Act 2018, Police and Criminal Evidence Act 1984, as well as their own published policies. For live facial recognition, police forces must also follow the College of Policing’s Authorised Professional Practice (APP) on Live Facial Recognition.

Oversight of police practice regarding deployment of facial recognition and related technologies is currently provided by regulators and public bodies, including the Biometrics and Surveillance Camera Commissioner, the Information Commissioner, HMICFRS, Equality and Human Rights Commission, and the Independent Office for Police Conduct. The courts system also plays a vital role in ensuring the law is upheld.

The Government recognises the importance of independent scrutiny to ensure operational consistency across forces under new framework. That is why the consultation explained the government’s proposal to create a single regulatory and oversight body to oversee law enforcement use of biometrics, facial recognition and similar technologies.

The Government envisage giving this body the necessary powers to provide assurance that law enforcement use of biometric technologies is legal, responsible, and necessary. These powers could include setting standards to assure scientific validity, issuing codes of practice and investigating instances where a technology has been misused, hacked or accessed without authorisation.

Question to the Home Office:

To ask the Secretary of State for the Home Department, with reference to the Written Statement entitled Consultation on a new legal framework for law enforcement use of biometrics, facial recognition and similar technologies, published on 4 December 2025, HCWS1129, what assessment she has made of the safeguards required to ensure that the use of facial recognition and similar biometric technologies by law enforcement remains proportionate to the seriousness of the harm being addressed; what steps she plans to take to ensure that the legal framework maintains public confidence in the protection of individual rights, privacy and data security; and whether she intends to publish an impact assessment on the potential implications for civil liberties as part of the consultation process.

Answered by Sarah Jones - Minister of State (Home Office)

The Government recognises the importance of ensuring the use of facial recognition and similar biometric technologies by law enforcement remains proportionate to the seriousness of the harm being addressed. The consultation launched on 4 December seeks views on whether seriousness of harm should be a factor to decide how and when law enforcement organisations can acquire, retain, and use biometrics, facial recognition, and similar technology. The consultation also asks for views on what factors are relevant to consider when assessing ‘seriousness’ of harm and for which purposes should law enforcement organisations be allowed to use these technologies.

We do not intend to publish an impact assessment specifically on the potential implications for civil liberties as part of the consultation process. However, alongside the consultation we have published an equalities impact assessment which makes clear the Government’s commitment to building public trust by highlighting the specific legal frameworks that will be put in place and the statutory bodies for oversight, which will apply to everyone in England and Wales.

We recognise that to maintain public confidence we must ensure individual rights, privacy and data security are protected. We believe that the use of biometric and inferential technology should always be demonstrably ‘necessary’ and ‘proportionate’ to the objective being sought. Furthermore, a clear and consistent justification for interference with people’s rights is required. Threshold setting and decision making needs to be attributed to, and shared appropriately between, Parliament, Ministers, independent oversight bodies, and law enforcement organisations. The consultation seeks views on what factors are relevant to consider when assessing interference with privacy so as to ensure the legal framework reflects the views of the public.

When using facial recognition technology, police forces must comply with existing legislation including the Human Rights Act 1998, Equality Act 2010, Data Protection Act 2018, Police and Criminal Evidence Act 1984, as well as their own published policies. For live facial recognition, police forces must also follow the College of Policing’s Authorised Professional Practice (APP) on Live Facial Recognition.

Oversight of police practice regarding deployment of facial recognition and related technologies is currently provided by regulators and public bodies, including the Biometrics and Surveillance Camera Commissioner, the Information Commissioner, HMICFRS, Equality and Human Rights Commission, and the Independent Office for Police Conduct. The courts system also plays a vital role in ensuring the law is upheld.

The Government recognises the importance of independent scrutiny to ensure operational consistency across forces under new framework. That is why the consultation explained the government’s proposal to create a single regulatory and oversight body to oversee law enforcement use of biometrics, facial recognition and similar technologies.

The Government envisage giving this body the necessary powers to provide assurance that law enforcement use of biometric technologies is legal, responsible, and necessary. These powers could include setting standards to assure scientific validity, issuing codes of practice and investigating instances where a technology has been misused, hacked or accessed without authorisation.

Question to the Home Office:

To ask the Secretary of State for the Home Department, with reference to the Written Statement entitled Consultation on a new legal framework for law enforcement use of biometrics, facial recognition and similar technologies, published on 4 December 2025, HCWS1129, what assessment her Department has made of the effectiveness of police practice in the deployment of facial recognition and other biometric technologies; and whether she plans to enhance oversight and independent scrutiny of that deployment.

Answered by Sarah Jones - Minister of State (Home Office)

The Government recognises the importance of ensuring the use of facial recognition and similar biometric technologies by law enforcement remains proportionate to the seriousness of the harm being addressed. The consultation launched on 4 December seeks views on whether seriousness of harm should be a factor to decide how and when law enforcement organisations can acquire, retain, and use biometrics, facial recognition, and similar technology. The consultation also asks for views on what factors are relevant to consider when assessing ‘seriousness’ of harm and for which purposes should law enforcement organisations be allowed to use these technologies.

We do not intend to publish an impact assessment specifically on the potential implications for civil liberties as part of the consultation process. However, alongside the consultation we have published an equalities impact assessment which makes clear the Government’s commitment to building public trust by highlighting the specific legal frameworks that will be put in place and the statutory bodies for oversight, which will apply to everyone in England and Wales.

We recognise that to maintain public confidence we must ensure individual rights, privacy and data security are protected. We believe that the use of biometric and inferential technology should always be demonstrably ‘necessary’ and ‘proportionate’ to the objective being sought. Furthermore, a clear and consistent justification for interference with people’s rights is required. Threshold setting and decision making needs to be attributed to, and shared appropriately between, Parliament, Ministers, independent oversight bodies, and law enforcement organisations. The consultation seeks views on what factors are relevant to consider when assessing interference with privacy so as to ensure the legal framework reflects the views of the public.

When using facial recognition technology, police forces must comply with existing legislation including the Human Rights Act 1998, Equality Act 2010, Data Protection Act 2018, Police and Criminal Evidence Act 1984, as well as their own published policies. For live facial recognition, police forces must also follow the College of Policing’s Authorised Professional Practice (APP) on Live Facial Recognition.

Oversight of police practice regarding deployment of facial recognition and related technologies is currently provided by regulators and public bodies, including the Biometrics and Surveillance Camera Commissioner, the Information Commissioner, HMICFRS, Equality and Human Rights Commission, and the Independent Office for Police Conduct. The courts system also plays a vital role in ensuring the law is upheld.

The Government recognises the importance of independent scrutiny to ensure operational consistency across forces under new framework. That is why the consultation explained the government’s proposal to create a single regulatory and oversight body to oversee law enforcement use of biometrics, facial recognition and similar technologies.

The Government envisage giving this body the necessary powers to provide assurance that law enforcement use of biometric technologies is legal, responsible, and necessary. These powers could include setting standards to assure scientific validity, issuing codes of practice and investigating instances where a technology has been misused, hacked or accessed without authorisation.

Question to the Department for Science, Innovation & Technology:

To ask the Secretary of State for Science, Innovation and Technology, pursuant to the answer of 9 December to Question 96093, what steps the Government is taking to safeguard individuals from non-sexually explicit deepfakes, digital impersonation, and the misuse of personal identity.

Answered by Kanishka Narayan - Parliamentary Under Secretary of State (Department for Science, Innovation and Technology)

Solutions that help to determine what media is real and what is AI-generated are key to tackling a range of AI risks. The government is undertaking work to explore the potential methods for detecting AI-generated content.

The UK’s Online Safety Act has introduced duties on in scope services to tackle digital impersonation where it amounts to an existing offence, including false statements about a candidate's character or conduct ahead of or during an election.

The UK also has strong data protection laws to help tackle the misuse of personal identity, through the UK GDPR and the Data Protection Act 2018. These laws require that any personal data processing is lawful, fair and transparent.

Question to the Department for Science, Innovation & Technology:

To ask the Secretary of State for Science, Innovation and Technology, what mechanisms are in place to ensure that UK institutions and companies comply with the GDPR, the Data Protection Act 2018, and other relevant national security requirements when sharing genomic data internationally.

Answered by Ian Murray - Minister of State (Department for Science, Innovation and Technology)

The UK has one of the most robust data protection regimes in the world, with all organisations required to comply with our legislation to safeguard UK personal data when transferring it overseas. Failure to do so can result in enforcement action.

Our data regulator, the Information Commissioner’s Office, has powers to take enforcement action and issue hefty fines. Individuals who consider that their data has been misused can also take legal action.

Question to the Department for Digital, Culture, Media & Sport:

To ask the Secretary of State for Culture, Media and Sport, what assessment she has made of the current operational status of the IPSO Arbitration Scheme, including whether arbitrators are presently being appointed to claims, and what evaluation she has made of the implications of any such delays for the public’s ability to access timely and effective redress.

Answered by Ian Murray - Minister of State (Department for Science, Innovation and Technology)

The UK has a self-regulatory system for the press, which is independent from Government. This is vital to ensure the public has access to accurate and trustworthy information from a range of different sources. The Government therefore does not intervene in or evaluate the work of IPSO.

However, under Section 179 of the Data Protection Act every three years the Secretary of State must lay before Parliament a report on the use and effectiveness of alternative dispute resolution procedures, such as arbitration, in cases involving a failure or alleged failure by relevant media organisations to comply with data protection legislation. The most recent report was presented to Parliament in May 2024 and was carried independently of DCMS by David Rossington, as the Independent Reviewer. The report is published on the Gov.uk website: https://assets.publishing.service.gov.uk/media/67d2ded5fb8db2176d5e97d0/Formatted_240312_SECOND_REPORT_UNDER_SECTION_179_OF_THE_DATA_PROTECTION_ACT_v3__FINAL__accessible.pdf.

Question to the Department for Education:

To ask the Secretary of State for Education, whether she plans to carry out a data privacy impact assessment for the Children’s Wellbeing and Schools Bill.

Answered by Georgia Gould - Minister of State (Education)

The department is ensuring that measures outlined in the Children’s Wellbeing and Schools Bill align with data protection principles, as set out in the Data Protection Act 2018, UK General Data Protection Regulations (UK GDPR) and the Data (Use and Access) Act 2025.

The department has met its obligation under Article 36(4) of UK GDPR to consult with the Information Commissioner’s Office (ICO) on relevant measures involving the use of personal data, such as the Children Not in School registers.

The department is engaging with the ICO to ensure that any data protection risks identified are properly mitigated and is carrying out data protection impact assessments, where relevant.

Found: , the Police and Justice Act 2006 (c. 48) and amended by paragraph 45 of Schedule 19 to the Data Protection Act

Found: , the Police and Justice Act 2006 (c. 48) and amended by paragraph 45 of Schedule 19 to the Data Protection Act

Found: In accordance with section 182(2) of the Data Protection Act 2018, the Secretary of State has consulted

Found: statutory obligations relating to the management of personal data in LEDS arising from the Data Protection Act

Found: statutory obligations relating to the management of personal data in LEDS arising from the Data Protection Act

Found: “DPA 2018” means the Data Protection Act 2018“Default” means any breach of the obligations of the Supplier

Found: “DPA 2018” means the Data Protection Act 2018“Default” means any breach of the obligations of the Supplier

Found: statutory obligations relating to the management of personal data in LEDS arising from the Data Protection Act

Found: statutory obligations relating to the management of personal data in LEDS arising from the Data Protection Act

Found: following is to explain your rights and give you the information you are be entitled to under the Data Protection Act

Found: may be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Found: “DPA 2018” means the Data Protection Act 2018“Default” means any breach of the obligations of the Supplier

Found: will be processed in accordance with the MRS Code of Conduct, and in compliance with the Data Protection Act

Found: “DPA 2018” means the Data Protection Act 2018“Default” means any breach of the obligations of the Supplier

Found: process data only within the limits of UK data protection laws, including the UK GDPR and the Data Protection Act

Found: holds and uses data for purposes notified to the Information Commissioner under GDPR and the Data Protection Act

Found: State by order to make provisions which are equivalent to those in Part 1 of the CPIA 1996 Data Protection Act

Found: State by order to make provisions which are equivalent to those in Part 1 of the CPIA 1996 Data Protection Act

Found: with data protection law, including the UK General Data Protection Regulation (GDPR) and the Data Protection Act

Found: commissions or agencies from time to time carrying out functions on its behalf; DPA 2018 means the Data Protection Act

Found: General measures The Data Protection Act 2018 (DPA), which came into force in May 2018, requires periodic

Found: General measures The Data Protection Act 2018 (DPA), which came into force in May 2018, requires periodic

Found: authority, must comply with the ECHR (under section 6 of the Human Rights Act 1998) as well as the Data Protection Act

Found: National Cyber Security Centre (NCSC) guidance, General Data Protection Regulations (GDPR), the Data Protection Act

Found: biometric information is sensitive personal information and is handled in accordance with the Data Protection Act

Found: compliance with its duties is achieved under the UK General Data Protection Regulation) and the Data Protection Act

Found: compliance with its duties is achieved under the UK General Data Protection Regulation) and the Data Protection Act

Found: Child Maintenance Schemes is achieved under the UK General Data Protection Regulation and the Data Protection Act

Found: compliance with its duties is achieved under the UK General Data Protection Regulation and the Data Protection Act

Found: costs recovered or received for work done for other departments; • Freedom of information and data protection act

Found: information is received by either party under the Freedom of Information Act 2000, or the Data Protection Act

Found: to information regimes (these are primarily the Freedom of Information Act 2000 (FOIA), the Data Protection Act

Found: Section 8(d) of the Data Protection Act 2018 states that this will include processing of personal data

Found: Section 8(d) of the Data Protection Act 2018 states that this will include processing of personal data

Found: The Home Office will process your personal data in accordance with the Data Protection Act and, in the

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Found: be processed under the general processing regime set out in the UK GDPR and Part 2 of the Data Protection Act

Found: ‘Biometric data’ is defined in the Data Protection Act 2018 as “personal data resulting f rom specific

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Found: Existing regulation on data privacy will continue to apply, in particular the Data Protection Act 2018

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Found: Data Protection All information will be processed in compliance with the Data Protection Act 2018 and

Found: For example, the Data Protection Act 2018 sets a maximum penalty limit of either £17.5 million or 4%

Found: accountable to the public, it is important we respond to formal requests for information (Data Protection Act

Found: • Non-Compliance with Data Protection Act and General Data Protection Regulation – GLAA is still

Found: • Non-Compliance with Data Protection Act and General Data Protection Regulation – GLAA is still

Found: protection requirements contained within the UK General Data Protection Regulation and the Data Protection Act

Found: This will ensure compliance with the law in terms of its duties under the Data Protection Act 1998,

Found: can request this information through the Subject Access Request (SAR) process set out in the Data Protection Act

Found: special category data, we rely on substantial public interest, and our condition under the Data Protection Act

Found: submit requests for information held by the LAA under the Freedom of Information Act 2000 and Data Protection Act

Found: submit requests for information held by the LAA under the Freedom of Information Act 2000 and Data Protection Act

Found: a data controller, comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act

Found: information is received by either party under the Freedom of Information Act 2000, or the Data Protection Act

Found: “DPA 2018” the Data Protection Act 2018.

Found: “DPA 2018” the Data Protection Act 2018.

Found: “DPA 2018” the Data Protection Act 2018.

Found: GDPR, and any applicable national implementing Laws as amended from time to time; (ii) the Data Protection Act

Found: “DPA 2018” the Data Protection Act 2018.

Found: “DPA 2018” the Data Protection Act 2018.

Found: “DPA 2018” the Data Protection Act 2018.

Found: “DPA 2018” the Data Protection Act 2018.

Found: to information regimes (these are primarily the Freedom of Information Act 2000 (FOIA), the Data Protection Act

Found: Regulations 2004 (EIR), however any disclosure will be in line with the requirements of the Data Protection Act

Found: to how those classes of information are defined) in the Freedom of Information Act 2000 and Data Protection Act

Found: to how those classes of information are defined) in the Freedom of Information Act 2000 and Data Protection Act

Found: accordance with UK information access legislation (the Freedom of Information Act 2000, the Data Protection Act

Found: accordance with UK information access legislation (the Freedom of Information Act 2000, the Data Protection Act

Found: Management 18.1 How data will be processed ● The PSFA complies with the Data Protection Act

Found: to third parties only in compliance with the UK General Data Protection Regulation and the Data Protection Act

Found: to third parties only in compliance with the UK General Data Protection Regulation and the Data Protection Act

Found: We particularly draw to your attention the Bribery Act 2010, the Data Protection Act 2018, the Fraud

Found: ascribed to it in the Data Protection Legislation; Data Protection Legislation means: (a) Data Protection Act

Found: ascribed to it in the Data Protection Legislation; Data Protection Legislation means: (a) Data Protection Act

Found: to third parties only in compliance with the UK General Data Protection Regulation and the Data Protection Act

Found: information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act

Found: which relates to our obligations in employment law, paired with Schedule 1 part 1(1) of the Data Protection Act

Found: We particularly draw to your attention the Bribery Act 2010, the Data Protection Act 2018, the Fraud

Found: that they are compliant with the General Data Protection Regulations (GDPR) and accompanying Data Protection Act

Found: In this clause, "data protection legislation" has the same meaning as in the Data Protection Act 2018

Found: In this clause, "data protection legislation" has the same meaning as in the Data Protection Act 2018

Found: the purpose of ‘Equality of Opportunity or Treatment’ [UK GDPR Article 9(2)(a and g); and Data Protection Act

Found: For example, the Data Protection Act 2018 sets a maximum penalty limit of either £17.5 million or 4%

Found: Data is obscured where the annual headcount for a staff group is 500 or less, in line with The Data Protection Act

Found: Data is obscured where the annual headcount for a staff group is 500 or less, in line with The Data Protection Act

Found: vaccinations and immunisations, where “processing” has the same meaning as in section 3(4) of the Data Protection Act

Found: , the Police and Justice Act 2006 (c. 48) and amended by paragraph 45 of Schedule 19 to the Data Protection Act

Found: , the Police and Justice Act 2006 (c. 48) and amended by paragraph 45 of Schedule 19 to the Data Protection Act

Found: to information regimes (these are primarily the Freedom of Information Act 2000 (FOIA), the Data Protection Act

Found: information is received by either party under the Freedom of Information Act 2000, or the Data Protection Act

Found: information is received by either party under the Freedom of Information Act 2000, or the Data Protection Act

Found: The Home Office will process your personal data in accordance with the Data Protection Act and, in the

Found: to information regimes (these are primarily the Freedom of Information Act 2000 (FOIA), the Data Protection Act

Found: ‘Biometric data’ is defined in the Data Protection Act 2018 as “personal data resulting f rom specific

Found: For example, the Data Protection Act 2018 sets a maximum penalty limit of either £17.5 million or 4%

Found: • Footnotes have been added to key legal materials, including the Data Protection Act 2018, the Human

Found: is received by either party under the Freedom of Information Act 2000, or the Data Protection Act

Found: is received by either party under the Freedom of Information Act 2000, or the Data Protection Act

Found: is received by either party under the Freedom of Information Act 2000, or the Data Protection Act

Found: is received by either party under the Freedom of Information Act 2000, or the Data Protection Act

Found: is received by either party under the Freedom of Information Act 2000, or the Data Protection Act

Found: is received by either party under the Freedom of Information Act 2000, or the Data Protection Act

Found: is received by either party under the Freedom of Information Act 2000, or the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: out in Article 5(1) of the UK General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: the performance of the Verifier Verifier must ensure that the requirements of UK GDPR and Data Protection Act

Found: legal data gateway has therefore been created to support compliance with the UK GDPR and the Data Protection Act

Found: also register with Information Commissioners Office and ensure that it complies with the Data Protection Act

Found: must also register with Information Commissioners Office and ensure that it complies with the Data Protection Act

Found: individuals with regard to the processing of Personal Data to which a Party is subject including the Data Protection Act

Found: principles in Article 5(1) o f the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act

Found: individuals) and disclosing it would contravene the data protection principles in Schedule 1 to the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Articl e 5(1) of the General Data Protection Regulation and in Section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: are the data subject, and so it is subject to the General Data Protection Regulation and the Data Protection Act

Found: They are also required by the Data Protection Act 2018/GDPR to appoint a Data Protection Officer (though

Found: principes in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: There are potential exemptions under the Data Protection Act 2018 which can allow data controllers to

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act

Found: reasons of substantial public interest and identify a condition from Schedule 1, Part 2 of the Data Protection Act

Found: European Union (Withdrawal) Act 2018 (and see section 205(4)) (the "UK GDPR"); (iii) the Data Protection Act

Found: data with those areas of the UK Government on an ad hoc basis, it would be done so under the Data Protection Act

Found: accordingly), “Processor” have the meanings set out in UK GDPR; “Data Protection Laws” means the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: Approved Organisations must ensure that the requirements of the Data Protection Act and other legislation

Found: your individual rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act

Found: with regard to the proc;essing of Personal Data to wh ich a Party is subject including the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: data subject, and so it is subject to the General Data Protection Regulation (GDPR) and the Data Protection Act

Found: nciples in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: breach data protection principles under Article 5(1) of the UK GDPR and section 34(1) of the Data Protection Act

Found: handling or processing of such data by you is fully compliant with the requirements of the Data Protection Act

Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: authorities are expected to have robust data protection processes under the UK GDPR and the Data Protection Act

Found: approach would be fully compliant with the UK General Data Protection Regulations (GDPR) and the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: with regard to the processing of Personal Data to which a Party is subject including the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: information I give will be treated confidentially and securely, in accordance with the terms of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: support with completing the form, please contact md_fisheries_data_collection@gov.scot Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article (5) (1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: (4) In this section, “the data protection legislation” has the same meaning as in the Data Protection Act

Found: The amendment replaces subsection (8) to refer to new section 183A of the Data Protection Act 2018 (

Found: purpose for which it is disclosed, and (b) handled and stored in accordance with— (i) the Data Protection Act

Found: Section 61, page 49, leave out lines 24 to 27 and insert— ‘(8) But see also section 183A of the Data Protection Act

Found: purpose for which it is disclosed, and (b) handled and stored in accordance with— (i) the Data Protection Act

Found: Irranca-Davies 16 Section 24, page 12, after line 21, insert— ‘( ) But see also section 183A of the Data Protection Act

Found: purpose for which it is disclosed, and (b) handled and stored in accordance with— (i) the Data Protection Act

Found: protection of prohibitions and restrictions etc on processing: relevant enactments) of the Data Protection Act

Found: Irranca-Davies 16 Section 24, page 12, after line 21, insert— ‘( ) But see also section 183A of the Data Protection Act

Found: Irranca-Davies 16 Section 24, page 12, after line 21, insert— ‘( ) But see also section 183A of the Data Protection Act

Found: However, the provisions under section 39 need to be read alongside section 183A of the Data Protection Act

Found: Housing Registers as they are no longer required as a consequence of section 183A of the Data Protection Act

Found: no longer needed as a result of the general data protection override in section 183A of the Data Protection Act

Found: longer needed as a result of the general data protection override in section 183A of the Data Protection Act

Found: no longer necessary because of the general data protection override in section 183A of the Data Protection Act

Found: (5) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements

Found: Housing Registers as they are no longer required as a consequence of section 183A of the Data Protection Act

Found: Housing Registers as they are no longer required as a consequence of section 183A of the Data Protection Act

Found: Irranca-Davies 16 Section 24, page 12, after line 21, insert— ‘( ) But see also section 183A of the Data Protection Act

Found: Irranca-Davies 16 Section 24, page 12, after line 21, insert— ‘( ) But see also section 183A of the Data Protection Act

Found: protection of prohibitions and restrictions etc on processing: relevant enactments) of the Data Protection Act

Found: However, the provisions under section 39 need to be read alongside section 183A of the Data Protection Act

Found: However, the provisions under section 39 need to be read alongside section 183A of the Data Protection Act

Found: Irranca-Davies 16 Section 24, page 12, after line 21, insert— ‘( ) But see also section 183A of the Data Protection Act

Found: purpose for which it is disclosed, and (b) handled and stored in accordance with— (i) the Data Protection Act

Found: purpose for which it is disclosed, and (b) handled and stored in accordance with— (i) the Data Protection Act

Found: Section 61, page 49, leave out lines 24 to 27 and insert— ‘(8) But see also section 183A of the Data Protection Act

Found: (2) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements

Found: (2) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements

Found: The amendment replaces subsection (8) to refer to new section 183A of the Data Protection Act 2018 (

Found: (2) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements

Found: (2) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements

Found: (2) But see also section 183A of the Data Protection Act 2018 (c. 12) (protection of requirements

Found: (4) In this section, “the data protection legislation” has the same meaning as in the Data Protection Act

Found: letter adds that the provisions under section 39 need to be read alongside section 183A of the Data Protection Act

Found: The Data Protection Act 2018, Freedom of Information Act 2000 and the Environmental Information Regulations

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Found: used by the Welsh Government in accordance with its obligations and duties under the: • The Data Protection Act

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Found: supplied by you in this form, is in accordance with the terms of our registration under the Data Protection Act

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Found: personal data underlying these statistics is processed in accordance with the requirements of the Data Protection Act