Winter Heating Payment: service level agreement between the Secretary of State for Work and Pensions and Scottish Ministers

18. Data Subject Requests

18.1 When either Party receives a right of access request from a data subject requesting copies of data shared by the other Party, they will for any relevant information they hold as an independent data controller and in line with Article 15 of the UK GDPR and ICO’s UK GDPR guidance on the right of access:

• confirm that they are processing any such personal data;
• provide a copy of the personal data held; and provide other supplementary information as appropriate.

18.2 In addition, if it appears the data subject is requesting information held by the other Party, they will also, at the same time, return the request to the sender with details of the correct address (of the other Party) as soon as reasonably practicable and within regulatory deadlines. The request itself must not be forwarded.

18.3 Details on how to make an access request to DWP can be found in the DWP Information Charter – The DWP Personal Information Charter can be found at this link - DWP Personal Information Charter

18.4 Details on how to make an access request to Scottish Ministers can be found in the Social Security Scotland Privacy Notice. The Social Security Scotland Privacy Notice can be found at this link Social Security Scotland Privacy Notice

18.5 Details of the specific data being shared can be found in the associated Data Sharing Agreement.

Address details below:

dataprotectionofficer@socialsecurity.gov.scot

[Redacted]