Sandeel fishing consultation: data protection impact assessment

The data protection impact assessment for the consultation on proposals to close fishing for sandeel in all Scottish waters, laying out how respondents data will be handled.


4. Data controllers and data processors/sub processors

4.1 Data controllers

Organisation: Scottish Ministers

Activities: Devolved Government

Is the organisation a public authority or body as set out in Part 2, Chapter 2, Section 7 of the Data Protection Act 2018?: Yes

Lawful basis for processing under UK General Data Protection Regulation (UK GDPR) Article 6 for the collection and sharing of personal data – general processing: Public task

Please note relevant legislation if using lawful basis *public task".: Public sector information regulations: statement of public task - gov.scot (www.gov.scot)

4.2 Data processors and sub processors

Organisation: Scottish Government

Activity: Data Processor

Processing data – analysis and evaluation of responses generated

Contract in place compliant with UK GDPR Art 28? Yes/No: N/A

Organisation: Scottish Government

Activity: Data Controller

Controlling data – informing data subjects of processing, responding to data subjects rights requests, keeping personal data secure, managing breach incidents, maintaining accurate records of data processing activities, ensure compliance with the UKGDPR

Contract in place compliant with UK GDPR Art 28? Yes/No: N/A

Contact

Email: sandeelconsultation@gov.scot

Back to top