Service level agreement between the Secretary of State for Work and Pensions and Scottish Ministers in respect of Child Winter Heating Assistance

17. Right of access requests

17.1 The parties will work together, when appropriate, and are expected to comply with the Data Protection Act 2018 (DPA 2018) and EU General Data Protection Regulation (GDPR) (EU) 2016/679 and must respond to right of access requests accordingly.

17.2 DWP agrees to inform Scottish Ministers as soon as possible (within 3 working days) of all right of access requests received from Data Subjects requesting copies of data held by Scottish Ministers. Where necessary DWP will assist Scottish Ministers in processing the requests in line with the requirements of the DPA 2018 and GDPR.

17.3 Where DWP is also the Data Controller in respect of the same personal data, Scottish Ministers agree, to inform DWP as soon as possible (within 3 working days) of all right of access requests which may be received from the Data Subjects requesting copies of data held by DWP. Where necessary, Scottish Ministers will assist DWP in processing the requests in line with the requirements of the DPA 2018 and GDPR.

Address details below:

Social Security Scotland RAR
[REDACTED]

DWP RAR
[REDACTED]

17.4 Details of the specific data being shared can be found in the [REDACTED] Data

Sharing Agreement, as per Section 4 (Derivation).