Information assurance and data protection: appropriate policy document
How we meet legal obligations and requirements under data protection law, and how we protect special category and criminal convictions personal data and processing for the purposes of law enforcement.
Legal information
This policy meets the requirement Schedule 1 to the Data Protection Act 2018 that an appropriate policy document is in place where the processing of special category data is necessary for the purposes of performing obligations or rights in connection with employment, social security or social protection.
It meets the requirement at Schedule 1 to the Data Protection Act 2018 that an appropriate policy document be in place where the processing of special category data is necessary for reasons of substantial public interest. The conditions under which data may be processed for reasons of substantial public interest are set out at paragraphs 6 to 28 of Schedule 1 to the Data Protection Act 2018.
The Scottish Government (Scottish Ministers) is named as a competent authority for the purpose of Part 3 of the Data Protection Act 2018 which applies to the processing of personal data by such authorities for law enforcement purposes, these are described above.
Contact
Information Assurance and Data Protection Branch: dpa@gov.scot
There is a problem
Thanks for your feedback