Chamber and committees

All corporately managed Scottish Government mobile phone communications are secured in line with National Cyber Security Centre standards.

The Scottish Government has robust processes and procedures in place to ensure all corporately managed mobile phones are monitored and continually assessed using industry standard security tooling to ensure compliance with our policies.

Whenever personal data is shared, the processing must comply with the UK General Data Protection Regulation (UK GDPR). The UK GDPR requires the careful assessment of compliance with the key principles of the legislation on a case by case basis. This means demonstrating that each instance of data sharing is necessary and proportionate to meet a specific purpose, it has a lawful basis and it is within the expectations of the individuals’ whose data it is. Therefore, the Scottish Government has no over-arching agreement with the UK Government as data sharing agreements are put in place for individual projects that adhere to the Information Commissioner’s Office (ICO) Data Sharing Code of Practice.

The Scottish Government does not hold the information requested centrally. Where data sharing agreements are put in place under certain data sharing powers in Part 5 of the Digital Economy Act 2017, these are recorded on a register of information which can be found at: Register of Information sharing agreements under chapters 1, 2, 3 and 4 of part 5 of the Digital Economy Act 2017 - GOV.UK. These can only be established where there is a clear legal gateway to undertake the sharing. Requests for UK government data which have been delayed or are in the process of being resolved are part of continued policy development. To support this, the Office of the Chief Statistician established its UK Data Sharing Team in 2022 following the COVID-19 pandemic and in response to the need for greater data sharing across the UK. The team provides advice and guidance on request to support Scottish Government in accessing data from UK Government departments for statistics and research. Delays often occur in identifying the appropriate legal gateway or in demonstrating technical and security requirements.

The Scottish Government is working with UK departments to resolve barriers to data sharing, such as those evidenced in the Independent Review of the UK Statistics Authority by Professor Denise Lievesley (Independent Review of the UK Statistics Authority 2023 - 2024 - GOV.UK) which noted “systemic and cultural barriers to responsible data sharing between government departments”. In addition, it is working with the UK Government to continue to implement the Digital Economy Act which is expected to improve data sharing processes across programme for government policy areas in the future.

The Scottish Government complies with the General Data Protection Regulation requirements in relation to the use of mobile phones by ensuring where applicable that Data Protection Impact Assessments and Privacy Notices are completed.

The Scottish Government ensures that corporately managed mobile phones are replaced when they no longer receive operating system or security updates.

The Scottish Government do not hold central records for how many mobile phones it has purchased in the last 5 years as they are purchased by individual business areas to meet their requirements through delegated purchasing. The information requested could only be obtained at disproportionate cost.

All corporately managed Scottish Government mobile phones are audited monthly for compliance in line with our Cyber Security principals. Any remediation actions identified are investigated and addressed as necessary.

The Scottish Government expects and relies on our Integrated Joint Boards and Health Boards to plan and deliver services to meet the needs of local populations. Local planning is expected to take account of the particular needs of these populations, and decisions on the provision of services will be based on ensuring fair and equitable access to services wherever this is possible.

The Scottish Government works with territorial Health Boards to ensure services meet the needs of local populations. NHS Boards set out service delivery in annually produced Delivery Plans, reviewed and discussed with the Scottish Government. These plans describe how Boards will deliver services to meet the needs of their own communities, including the particular needs of rural areas, with a focus on fair and equitable access to services.

At the national level, a Board-led working group has been convened to develop a framework for safe, quality and sustainable healthcare services across our rural and island communities.

The number of cancelled operations under ‘non-clinical/capacity reasons’ is the most granular level of detail that’s provided from PHS’s website, breakdown as follows: