National Records of Scotland

Preserving the past, Recording the present, Informing the future

Data Protection Impact Assessments

Data Protection Impact Assessments

National Records of Scotland (NRS) uses data protection impact assessments (DPIAs), also known as privacy impact assessments (PIAs), to help us identify the most effective way of complying with our data protection obligations and meeting individuals' expectations of privacy.

DPIAs are a tool organisations can use to identify and reduce risks to privacy. They help minimise the risks of harm to individuals through the misuse of their personal information.

Our use of DPIAs helps ensure NRS follows an approach of privacy by design. We use DPIAs to systematically analyse how a particular project will affect the privacy of individuals and to address and resolve any issues which are identified at an early stage. This methodology enables the design of more efficient and effective processes for the handling of personal data.

The General Data Protection Regulation (GDPR), which came into effect on 25 May 2018, requires DPIAs to be carried out when using new technologies, and when the processing is likely to result in a high risk to the rights and freedoms of individuals. It is NRS policy to carry out DPIAs for all projects which involve the handling of personal data and which may have an impact on privacy.

The Information Commissioner has issued a code of practice on conducting privacy impact assessments and NRS complies with this code.

NRS Data Protection Impact Assessments

Recent DPIAs that NRS has carried out are published below.

2018

Access to Census data for data linkage projects in the BioQuarter and ADRN-S Regional Safe Settings

This DPIA covers the arrangements for researchers to access Census data as part of data linkage projects via the Administrative Data Research Network (Scotland) (ADRN-S) at the National Safe Haven or the Regional Safe Settings administered by ADRN-S.

NRS-DPIA-2018-2 - Data Protection Impact Assessment - Umbrella DPIA - Access to Census data for data linkage projects in the BioQuarter and ADRN-S Regional Safe Settings (659 KB PDF)

Access to Census microdata in the BioQuarter and ADRN-S Regional Safe Settings

This proposal aims to provide more convenient access arrangements for Scottish-based researchers seeking to analyse the secure microdata files from Scotland’s Census 2011. 

NRS-DPIA-2018-1 - Data Protection Impact Assessment - Access to Census microdata in the BioQuarter and ADRN-S Regional Safe Settings (412 KB PDF)