Letting agent registration: privacy impact assessment
Assessment considering any potential privacy impacts that result from the implementation of the registration of letting agents.
Risks identified and appropriate solutions or mitigation actions proposed
Is the risk eliminated, reduced or accepted?
| Risk |
Ref |
Solution or mitigation |
Result |
|---|---|---|---|
| Legal compliance risk - Data stored by IT provider. |
Controller-processor contract in place between Scottish Ministers (the Data Controller) and with IT provider setting out steps that will be taken to minimise risk of inappropriate access to and use of personal data. |
reduce |
|
| Release of personal data due to insecure IT system. |
Working with IT developer to ensure appropriate safeguards are built into the system to prevent unauthorised access to personal data. |
reduce |
|
| Personal data compromised through inappropriate sharing of personal data in the administration and processing of applications. |
Clear and appropriate data/information sharing protocols agreed with relevant organisations. Privacy issues and data handling form a key part of staff training. |
reduce |
Contact
Email: PRS Regulation Team
There is a problem
Thanks for your feedback