Question to the Cabinet Office:

To ask the Minister for the Cabinet Office, given the passage of the Data (Use and Access) Act 2025, how does the Department ensure compliance with data protection requirements relating to the processing of special category data, including data relating to health or protected characteristics.

The Cabinet Office maintains a robust data protection governance framework to ensure all personal data, including special category data and data relating to protected characteristics, is processed in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025.

Following the passage of the 2025 Act, the Department continues to mandate rigorous Data Protection Impact Assessments (DPIAs) for high-risk processing, alongside a standard practice of conducting comprehensive data protection compliance audits across the entire Cabinet Office.