Winter Heating Payment: service level agreement between The Secretary of State for Work and Pensions and Scottish Ministers

18. Data Subject Requests

18.1 The parties will work together, when appropriate, and are expected to comply with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018 (DPA 2018) and must respond to right of access requests accordingly.

18.2 DWP agrees to inform Scottish Ministers as soon as possible (within 3 working days) of all right of access requests received from Data Subjects requesting copies of data held by Scottish Ministers. Where necessary, DWP will assist Scottish Ministers in processing the requests in line with the requirements of the UK GDPR and DPA 2018.

18.3 Scottish Ministers agree to inform DWP as soon as possible (within 3 working days) of all right of access requests which may be received from Data Subjects requesting copies of data held by DWP. Where necessary, Scottish Ministers will assist DWP in processing the requests in line with the requirements of the UK GDPR and DPA 2018.

Address details below:

Social Security Scotland Data Protection Team

[Redacted]

DWP Right of Access Request

[Redacted]

18.4 Details of the specific data being shared can be found in the '[Redacted] Data Sharing Agreement' as referenced in Section 4 (Derivation) of this Agreement.