Question to the Department for Business and Trade:

To ask the Secretary of State for Business and Trade, what steps his Department is taking to ensure compliance with data protection requirements under the Data (Use and Access) Act 2025 relating to the processing of special category data, including data relating to health or protected characteristics.

Data Protection Impact Assessments (DPIAs) are automatically triggered within the Department's governance system where a processing activity involves the use of special category data, including health data or data relating to protected characteristics. Data Protection advisors review these assessments and provide advice to ensure that appropriate safeguards are in place in line with UK GDPR requirements and Information Commissioner's Office (ICO) guidance. Where substantial public interest is relied upon as the condition for processing special category data, an Appropriate Policy Document is put in place.