Data Protection

The General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (the DPA) together form a new framework for regulating the processing of personal data in the UK from 25 May 2018, replacing the former Data Protection Act 1998.

Our Privacy Notices

Our Corporate Privacy notice provides information about how the Scottish Parliament processes personal data and the rights that you have.  You can find our Privacy notice, together with individual privacy statements covering all of our processing activities on our privacy notice page

Data Protection Policy

More information on how the SPCB ensures that it complies with data protection legislation is set out in our Data Protection Policy

Person signing forms Photo: iStock/Yevgen Timashov

Making a Subject Access Request

How to request information that the Parliament holds about you

This website is using cookies.
We use cookies to ensure that we give you the best experience on our website. If you continue without changing your settings, we’ll assume that you are happy to receive all cookies on this website.