Publication - Impact assessment
Care Home Services (Visits to and by Care Home Residents) (Scotland) Regulations 2026: data protection impact assessment
Data protection impact assessment undertaken to consider the impacts on personal information as a result of The Care Home Services (Visits to and by Care Home Residents) (Scotland) Regulations 2026.
3. Data Controllers
3.1 Organisation
Care home providers
3.2 Activities
Safeguarding the health, safety and wellbeing in adult care homes by facilitating meaningful contact with Essential Care Supporters.
3.3 Is the organisation a public authority or body as set out in Part 2, Chapter 2, Section 7 of the Data Protection Act 2018?
No
3.4 Lawful basis for processing under UK General Data Protection Regulation (UK GDPR) Article 6 for the collection and sharing of personal data – general processing
The processing of personal data is necessary for compliance with section 14 of the Care Reform (Scotland) Act 2025.
3.5 Lawful basis for processing under UK General Data Protection Regulation (UK GDPR) Article 9 – special category data or Article 10 – criminal convictions data
No special category data or criminal convictions data is required and will therefore not be gathered.
3.6 Law Enforcement – if any law enforcement processing will take place – lawful basis for processing under Part 3 of the Data Protection Act 2018
No law enforcement processing with take place.
3.7 Legal gateway for any sharing of personal data between organisations:
No personal data is to be shared between organisations