Current status: Answered by Jenny Gilruth on 18 June 2024
To ask the Scottish Government whether it will commit to (a) reviewing and (b) deleting, if found to be infringing UK GDPR and/or ethical standards for health research, the data gathered from 134,000 children who participated in the Health and Wellbeing Census survey in 2022 reportedly without being informed of what the Information Commissioner’s Office has described as the "serious risks" of being able to identify individuals by using their Scottish Candidate Numbers as part of their email addresses.
The HWB Census underwent an Ethics Peer Review in line with the Scottish Government social research: protocols and guidance. Scottish Government social research: protocols and guidance - gov.scot (www.gov.scot)
In light of the ICO's recommendations, the Scottish Government is introducing enhanced technical and organisational measures to ensure that any data which contains the SCN and is processed for statistical and research purposes will have a pseudonym created. The SCN and the method of pseudonymisation will be held separately. These enhanced measures have been agreed with the ICO.