Crofting consultation and analysis: data protection impact assessment
A consultation on proposals for legislative reform of crofting law was held between 6 June and 2 September 2024. This data protection impact assessment (DPIA) covers the data protection issues relating to the consultation and the subsequent independent analysis report.
6. Questions to identify data protection issues
6.1 Necessity
The only personal data that is required to complete the consultation is the respondent’s name, organisation, whether they are a crofter (Y/N) and email address, and whether they are responding as an individual or an organisation. Collecting a respondent’s email address allows a confirmation of the consultation response to be sent, as well as a way for the respondent to access their response and change their answers whilst the consultation period is underway. Collecting an organisation name or whether a respondent is a crofter does not raise data protection issues.
6.2 Proportionality
The collection of the data (name, organisation responding, whether they are a crofter (Y/N) and email addresses) is a minimally intrusive method of associating a response to an individual or an organisation. It also provides a service to respondents, who can revisit their submission and make amendments until the consultation closes.
6.3 Justification
In order to obtain an independent and objective analysis of the responses submitted, the Scottish Government will commission this analysis to an independent contractor.
The overall aim of the project is to provide a clear and concise report for publication, which reflects an independent and robust analysis of the consultation responses, in order to inform the next stage of crofting law reform.
6.4 Other risks
N/A