Care Home Services (Visits to and by Care Home Residents) (Scotland) Regulations 2026: data protection impact assessment

Data Protection Officer (DPO)

Advice from DPO

The DPIA demonstrates compliance with UK GDPR principles and addresses risks adequately.

The risks are low and will be managed through the statutory Code of Practice and existing GDPR duties.

The legal basis is clear, and safeguards like transparency and data minimisation are built in. You can move forward with implementation, just make sure providers understand their responsibilities. No further ICO action is needed unless the proposal changes.

Action

No further action needed unless the proposal changes.

I confirm that the Care Home Services (Visits to and by Care Home Residents) (Scotland) Regulations 2026 has been sufficiently assessed in compliance with the requirements of the UKGDPR and Data Protection Act 2018

Ian Turner, Deputy Director, Social Care and National Care Service Development

12 January 2026