Crofting consultation and analysis: data protection impact assessment
A consultation on proposals for legislative reform of crofting law was held between 6 June and 2 September 2024. This data protection impact assessment (DPIA) covers the data protection issues relating to the consultation and the subsequent independent analysis report.
4. Data controllers and data processors/sub processors
4.1 Data controllers
Organisation
Scottish Ministers
Activities
Devolved Government
Is the organisation a public authority or body as set out in Part 2, Chapter 2, Section 7 of the Data Protection Act 2018?
Yes
Lawful basis for processing under UK General Data Protection Regulation (UK GDPR) Article 6 for the collection and sharing of personal data – general processing
The lawful basis for processing personal data will be public task.
The 2023/24 Programme for Government makes the commitment to develop and consult on proposals to reform crofting law.
4.1 Data processors and sub processors
Organisation
The Lines Between Ltd
Activity
The contractor for the consultation analysis will be the Data Processor and will be responsible for the organisation, input and analysis of the consultation responses, as well as the preparation of the final consultation analysis report for the Scottish Government.
Contract in place compliant with UK GDPR Art 28? Yes/No
Yes