The General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (the DPA) together form a new framework for regulating the processing of personal data in the UK from 25 May 2018, replacing the former Data Protection Act 1998.
Our Privacy Notices
Our Corporate Privacy notice provides information about how the Scottish Parliament processes personal data and the rights that you have. You can find our Privacy notice, together with individual privacy statements covering all of our processing activities on our privacy notice page
Data Protection Policy
More information on how the SPCB ensures that it complies with data protection legislation is set out in our Data Protection Policy
How to request information that the Parliament holds about you
Following Brexit, we will update any references to the GDPR to the UK GDPR in due course.