Found: Article 14 UK GDPR; Data Protection Act 2018, including paragraphs 27 and 28 of Part 2 of Schedule 1

Found: personal information as defined by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act

Found: Justice Act (Northern Ireland) 2015) Order (Northern Ireland) 2015 SR 2015/370, at para 2.1; Data Protection Act

Found: treated as confidential clinical data and protected in accordance with UK GDPR requirements, the Data Protection Act

Question

To ask the Secretary of State for Digital, Culture, Media and Sport, what information her Department holds on the number of serious data breaches involving special category information since July 2024.

Answered by Stephanie Peacock - Parliamentary Under-Secretary of State (Department for Digital, Culture, Media and Sport)

Under the UK General Data Protection Regulation and the Data Protection Act 2018, personal data breaches which pose a risk to individuals must be reported to the Information Commissioner’s Office (ICO), the independent data protection regulator.

The ICO publishes information on personal data breaches reported to it through its Data Security Incident Trends dashboard: https://ico.org.uk/action-weve-taken/complaints-and-concerns-data-sets/data-security-incident-trends/ . The Government does not hold information on the number of data breaches centrally.

Found: • There would be audit trails of who has accessed a patient’s data and UK GDPR and the Data Protection Act

Found: misleading statements 09520 09520 - Obstructing the inspection of overseas information systems (Data Protection Act

Found: requesting a higher-level check than the legislation allows is unlawful and could be a breach of the Data Protection Act

Found: requesting a higher-level check than the legislation allows is unlawful and could be a breach of the Data Protection Act

Found: requesting a higher-level check than the legislation allows is unlawful and could be a breach of the Data Protection Act

Found: I will comply with UK Data Protection Act 2018, relevant privacy regulations and all professional codes

Found: Data Protection Act 2018 and General Data Protection Regulations should not stand in the way of good,

Found: Law enforcement authorities are required to operate under Part 3 of the Data Protection Act 2018 (DPA

Found: Organisations should still ensure they adhere to the principles outlined in the Data Protection Act 2018

Found: processed for law enforcement purposes by a competent authority as defined in section 30 of the Data Protection Act

Found: The UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (DPA 2018) put in

Found: binding on the Department.The Department will process your personal data in accordance with the Data Protection Act

Found: Your answers will be treated in strict confidence in accordance with the Data Protection Act, and the

Found: with the diary, the GPS data would be treated in strict confidence in accordance with the Data Protection Act

Found: handle personal and health information confidentially and in accordance with UK GDPR and the Data Protection Act

Found: polygraph test will be shared within this context as necessary and in accordance with the Data Protection Act

Found: Data protection and data sharing The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act

Found: Data protection and data sharing The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act

Found: to third parties only in compliance with the UK General Data Protection Regulation and the Data Protection Act

Found: Climate Change DepCon Deposit Consent Dft Department for Transport DP Dynamic Positioning DPA Data Protection Act

Found: contract with Service Providers incorporates the overarching principles contained within the Data Protection Act

Found: You are bound by the Data Protection Act 2018 and subsequent versions thereof, and must ensure that

Found: publication or disclosure in accordance with the Freedom of Information Act 2000 and the Data Protection Act

Found: publication or disclosure in accordance with the Freedom of Information Act 2000 and the Data Protection Act

Found: .................. 4 Legal duties under the UK General Data Protection Regulation and the Data Protection Act

Found: protection and data sharing 4 Legal duties under the UK General Data Protection Regulation and the Data Protection Act

Found: including in relation to the UK the GBVS Supplier Terms and Conditions 6 OFFICIAL OFFICIAL Data Protection Act

Found: information, including photographs or biometrics must be operated and managed in compliance with the Data Protection Act

Found: adjudication records, including CCTV/ Pin Phone /Video evidence (if permitted under GDPR and the Data Protection Act

Found: information, including photographs or biometrics must be operated and managed in compliance with the Data Protection Act

Found: Under the Data Protection Act 2018 data controllers (for example Defence) are obliged to comply with

Found: against the Member in respect of an offence occurring during the Membership Year under the Data Protection Act

Found: Member in respect of an offence occurring during the 62 Membership Year under the Data Protection Act

Found: against the Member in respect of an offence occurring during the Membership Year under the Data Protection Act

Found: against the Member in respect of an offence occurring during the Membership Year under the Data Protection Act

Found: or Local Authority in respect of an offence occurring during the Membership Year under the Data Protection Act

Found: v) Data Protection Act Legislation (incorporating General Data Protection Regulations (GDPR)) a) The

Found: v) Data Protection Act Legislation (incorporating General Data Protection Regulations (GDPR)) • a)

Found: and within 12 months. 3.9.3.3 Data protection compliance For compliance with the Data Protection Act

Found: Decent Homes Plus DHS Decent Home Standard DIO Defence Infrastructure Organisation DPA Data Protection Act

Found: of Defence – Tri-Service Accommodation Regulations Vol.1 v6 54 For compliance with the Data Protection Act

Found: Relationship & Full Address of Relatives: Full Service and/or Parent Unit Address: PART 4: DATA PROTECTION ACT

Found: are not qualified teachers to carry out specified work in schools • Equality Act 2010 • Data Protection Act

Found: are not qualified teachers to carry out specified work in schools • Equality Act 2010 • Data Protection Act

Found: Data Protection Act 2018, the UK GDPR and the Data (Use and Access) Act 2025 – ‘data protection laws

Found: Data Protection Act 2018 and the UK GDPR 92.

Found: includes the seven golden rules for sharing information and considerations with regard to the Data Protection Act

Found: early-years-practitioners-using-cyber-security-to-protect-your- settings. 37 This includes the Data Protection Act

Found: early-years-practitioners-using-cyber-security-to-protect-your-settings. 50 This includes the Data Protection Act

Found: early-years-practitioners-using-cyber-security-to-protect-your-settings 56 This includes the Data Protection Act

Found: early-years-practitioners-using-cyber-security-to-protect-your-settings 73 This includes the Data Protection Act

Found: Data Protection Act 2018, the UK GDPR and the Data (Use and Access) Act 2025 – ‘data protection laws

Found: about their child, provided that no relevant exemptions apply to their disclosure under the Data Protection Act

Found: about their child, provided that no relevant exemptions apply to their disclosure under the Data Protection Act

Found: and their characteristics including items described as ‘sensitive personal data’ within the Data Protection Act

Found: and their characteristics including items described as ‘sensitive personal data’ within the Data Protection Act

Found: personal information of another person if releasing would contravene any of the provisions in the Data Protection Act

Found: request if its disclosure will not contravene any of the data protection principles of the Data Protection Act

Found: another person if releasing it would contravene any of the Data Protection Principles under the Data Protection Act

Found: another person if releasing it would contravene any of the Data Protection Principles under the Data Protection Act

Found: information would, amongst other things, contravene one of the data protection principles of the Data Protection Act

Found: request if its disclosure will not contravene any of the data protection principles of the Data Protection Act

Found: personal information of another person if releasing would contravene any of the provisions in the Data Protection Act

Found: another person if releasing it would contravene any of the Data Protection Principles under the Data Protection Act

Found: personal information of another person if releasing would contravene any of the provisions in the Data Protection Act

Found: personal information of another person if releasing would contravene any of the provisions in the Data Protection Act

Found: In the 2019/20 year: a) how many personal data breaches (under either the Data Protection Act 2018

Found: for Information- General User training and they understand their responsibilities under the Data Protection Act

Found: Your answers will be treated in strict confidence in accordance with the Data Protection Act, and the

Found: Confidential patient data remains protected under the UK General Data Protection Act (UK GDPR). 19

Found: may be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Found: be disclosed in accordance with UK legislation (the Freedom of Information Act 2000, the Data Protection Act

Found: sensitive, for instance, because the Home Office has a duty to protect personal data under the Data Protection Act

Found: requesting a higher-level check than the legislation allows is unlawful and could be a breach of the Data Protection Act

Found: requesting a higher-level check than the legislation allows is unlawful and could be a breach of the Data Protection Act

Found: requesting a higher-level check than the legislation allows is unlawful and could be a breach of the Data Protection Act

Found: The Data Protection Act 2018 governs how we use personal data.

Found: polygraph test will be shared within this context as necessary and in accordance with the Data Protection Act

Found: handle personal and health information confidentially and in accordance with UK GDPR and the Data Protection Act

Found: Information contains some data that we believe is within the definition of “personal data” under the Data Protection Act

Found: to third parties only in compliance with the UK General Data Protection Regulation and the Data Protection Act

Found: “Data Protection Legislation ” means (i) the Data Protection Act 2018 and any successor or equivalent

Found: This is a Subject Access Request under the Data Protection Act 2018.

Found: This is a Subject Access Request under the Data Protection Act 2018.

Found: OFFICIAL SENSITIVE (when complete) Page 6 of 7 Section 5: Enforced subject access The Data Protection Act

Found: Document two:Scanned identity documents can be submitted by email to [email protected] Data Protection Act

Found: This also sets out the rights under the Data Protection Act 2018 and explains how you can access your

Found: This also sets out the rights under the Data Protection Act 2018 and explains how you can access your

Found: signing the agreement seafarers automatically agree to sensitive personal data (as defined in the Data Protection Act

Found: You must also be aware of your responsibilities under the Data Protection Act 2018 and the General Data

Found: Data Protection Act

Found: information, including photographs or biometrics must be operated and managed in compliance with the Data Protection Act

Found: information, including photographs or biometrics must be operated and managed in compliance with the Data Protection Act

Found: adjudication records, including CCTV/ Pin Phone /Video evidence (if permitted under GDPR and the Data Protection Act

Found: [email protected] line with government policy, and in accordance with the provisions of the Data Protection Act

Found: [email protected] line with government policy, and in accordance with the provisions of the Data Protection Act

Found: Ofsted IDSR service, you must recognise the privacy of that data and always comply with the Data Protection Act

Found: Ofsted IDSR service, you must recognise the privacy of that data and always comply with the Data Protection Act

Found: Ofsted IDSR service, you must recognise the privacy of that data and always comply with the Data Protection Act

Found: Ofsted IDSR service, you must recognise the privacy of that data and always comply with the Data Protection Act

Found: Independent schools are subject to the Data Protection Act 2018, but are not bound by the Freedom of

Found: .................................................................................... 5 The Data Protection Act

Found: example, the GP, education providers - any information must be processed in accordance with the Data Protection Act

Found: In accordance with the Data Protection Act 2018, consent must be freely given, specific, informed and

Found: access to medical records, has the hospital’s policy for access for such experts under the Data Protection Act

Found: This also sets out your rights under the Data Protection Act 2018 and explains how you can access your

Found: This also sets out your rights under the Data Protection Act 2018 and explains how you can access your

Found: on this form accords with the terms of the Planning Inspectorate’s registration under the Data Protection Act

Found: Protection User Organisations are expected to ensure that they are properly registered under the Data Protection Act

Found: This legislation is the UK General Data Protection Regulation (GDPR)34 and the Data Protection Act 2018

Found: “DPA 2018” the Data Protection Act 2018.

Found: “DPA 2018” the Data Protection Act 2018.

Found: “DPA 2018” the Data Protection Act 2018.

Found: software or system that the Supplier is required to develop under this Contract; "DPA 2018" the Data Protection Act

Found: information regimes (these are primarily the Freedom of Information Act 2000 (FOIA), the Data Protection Act

Found: 5.4 Regarding Data Protection The UK General Data Protection Regulation (UKGDPR) and the Data Protection Act

Found: continue to ensure they adhere to the UK General Data Protection Regulation UK (GDPR) and the Data Protection Act

Found: set out in Article 5 of the UK General Data Protection Regulation and section 34(1) of the Data Protection Act

Found: organisation a public authority or body as set out in Part 2, Chapter 2, Section 7 of the Data Protection Act

Found: set out in Article 5 of the UK General Data Protection Regulation and section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and section 34(1) of the Data Protection Act

Found: the data protection principles set out in the UK General Data Protection Regulation and the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in Section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in Section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: are the data subject, and so it is subject to the General Data Protection Regulation and the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in Section 34(1) of the Data Protection Act

Found: the organisation a public authority or body as set out in Part 2, Chapter 2, Section 7 of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in Section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in Section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: individuals, and disclosing this would contravene the data protection principles on Schedule 1 of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in Section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in Section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in Section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in Section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and section 34(1) of the Data Protection Act

Found: storage, use and disposal of lettings information is strictly controlled to comply with the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: offences 84/003 Disclosure of information 84/004 Interception of communications 84/005 Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: disclosed to any person outwith Aberdeen City Council, or as a result of a request under the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Articl e 5(1) of the General Data Protection Regulation and in Section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: the data protection principles set out in the UK General Data Protection Regulation and the Data Protection Act

Found: GDPR, Data Protection Act 2018.

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: the data protection principles set out in the UK General Data Protection Regulation and the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: processes in place to support the individual’s right to access their own personal data under the Data Protection Act

Found: the data protection principles set out in the UK General Data Protection Regulation and the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: obligations under the Network and Information Systems Regulations 2018, UK GDPR, and the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: by Pye Tait Consulting and reported anonymously to the Scottish Government in line with the Data Protection Act

Found: requests. 50 Respondents considered existing data protection frameworks, such as UK GDPR and the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: 1998, the Data Protection Act 2018 and any statutory modification or re-enactment thereof and the

Found: remains current and compliant with relevant statutory requirements, including GDPR and the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: Information (Scotland) Act 2002, the Environmental Information (Scotland) Regulations 2004 and the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: DPA 2018: Data Protection Act 2018.

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: Article 5(1) of the General Data Protection Regulations (GDPR) and in Section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: process your personal data in line with the UK General Data Protection Regulation 2018 and the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: process your personal data in line with the UK General Data Protection Regulation 2018 and the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: principles in Article 5(1) of the General Data Protection Regulation and in section 34(1) of the Data Protection Act

Found: delivering these responsibilities, should information held by TfW trigger the obligations under the Data Protection Act

Found: Information Regulations 2004 (the 'EIR') the UK General Data Protection Regulation (GDPR) and Data Protection Act

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Found: personal data underlying these statistics is processed in accordance with the requirements of the Data Protection Act

Found: Welsh Government in accordance with its obligations and duties under the: Your rights under the Data Protection Act

Found: explains Welsh Government’s processing and use of your personal data and your rights under the Data Protection Act

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)

Found: ‘Personal data’ is defined in sections 3(2) and 3(3) of the Data Protection Act 2018 and means any information

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Found: in accordance with the obligations and duties under the Freedom of Information Act 2000, the Data Protection Act

Found: in accordance with the obligations and duties under the Freedom of Information Act 2000, the Data Protection Act

Found: in accordance with the obligations and duties under the Freedom of Information Act 2000, the Data Protection Act

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)

Found: in accordance with the obligations and duties under the Freedom of Information Act 2000, the Data Protection Act

Found: Data flow for Careers Wales’ customer relationship management system (Atlas) Data sharing The Data Protection Act

Found: ‘Personal data’ is defined in sections 3(2) and 3(3) of the Data Protection Act 2018 and means any information

Found: collection and disclosure obligations, including those in the Freedom of Information Act 2000 and Data Protection Act

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)

Found: POLICIES AND GUIDANCE Dignity at Work 19 June 2026 accordance with the Data Protection Act

Found: Act 2010 4.2 Gender Recognition Act 2004 4.3 UK General Data Protection Regulation and Data Protection Act

Found: in accordance with the obligations and duties under the Freedom of Information Act 2000, the Data Protection Act

Found: in accordance with the obligations and duties under the Freedom of Information Act 2000, the Data Protection Act

Found: would breach the data protection principles set out in Article 5(1) of the UK GDPR and the Data Protection Act

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Found: personal data underlying these statistics is processed in accordance with the requirements of the Data Protection Act

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)

Found: personal data within the meaning of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Found: Data Protection 5.60 Local authorities must ensure that they comply with the Data Protection Act

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Found: Information Act 2000 (the “FOIA”), the Environmental Information Regulations 2004 (the “EIR”), the Data Protection Act

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 1998 (‘the DPA 2018’)

Found: protection legislation such as the EU General Data Protection Regulation (GDPR) and the UK Data Protection Act

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Found: personal data underlying these statistics are processed in accordance with the requirements of the Data Protection Act

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)

Found: ‘Personal data’ is defined in sections 3(2) and (3) of the Data Protection Act 2018 (‘the DPA 2018’)