Question to the Department for Digital, Culture, Media & Sport:

To ask the Secretary of State for Culture, Media and Sport, given the passage of the Data (Use and Access) Act 2025 how does the Department ensure compliance with data protection requirements relating to the processing of special category data, including data relating to health or protected characteristics.

Processing of personal data, and especially special category data, is subject to a Data Protection Impact Assessment, confirming the lawful basis for processing. There is no automated decision making in DCMS affecting individuals. The DPIA process identifies potential risks and documents the appropriate measures to mitigate those risks.