Health and Wellbeing Census: privacy notice for children and young people

How the data is collected and stored

How is the information about my health and wellbeing shared with you?

The transferring of individual level data between local authorities with the Scottish Government uses secure transfer systems.

How do you store the data about my health and wellbeing?

The storage of this data about your health and wellbeing within Scottish Government, is managed effectively by the Analytical Data Infrastructure Unit (within the Scottish Government).

Why do you need the data about my health and wellbeing, and for what purpose?

The individual data about your health and wellbeing is collected by the Scottish Government’s Education Analytical Services for statistical and research purposes only for the performance of a task carried out for reasons of public interest.

Will I be able to be identified from the data?

No.  The Scottish Government will not publish or make publicly available any information that allows for you to be identified, nor will data be used by Scottish Government to take any direct actions on you as a result of this information.

Should I have known that data about my health and wellbeing was being shared with you?

Yes.  Schools and/or local authorities who originally collected the data from you are required to provide privacy notices to you to explain how your personal data will be collected and used, and who it will be shared with.

How long will you keep the data about my health and wellbeing?

Data held about your health and wellbeing within the Scottish Government is managed effectively by secure systems on secure servers and is exploited as a valuable corporate resource, subject to confidentiality restraints.

The personal data we hold about your health and wellbeing will be stored for longer periods as the data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes and is subject to implementation of the appropriate technical and organisational measures required by the GDPR in order to safeguard the rights and freedoms of individuals.