Scotland's Proof of Concept Fund: data protection impact assessment (DPIA)
The data protection impact assessment provides information on how data collected as part of the proof of concept fund will be handled in line with current data protection laws.
6. Questions to identify data protection issues
6.1 Necessity
Personal data is required for delivery of grants, names and Email addresses need to be collected to communicate with individuals throughout the process. Gathering of special category data is the choice of the applicant however we are asking applicants for special category data to provide an overview of who is applying for and received PoC funding so that future policies can be developed that target unrepresented groups helping to create a fairer economy.
6.2 Justification
Ensuring applicants from all backgrounds have the ability to apply for PoC funding
6.3 Involvement of multiple organisations
The only party involved will be Scottish government Future economy team who will be processing applications.
6.4 Anonymity and pseudonymity
Names will be required so that grant letters can be sent to awarded applicants upon completion of application. Email addresses are required to be sent correct forms and or any communication needed with lead applicants and to inform applicants of any changes to privacy notice. The risk of this will be fully assessed within the risk section below. Other data such as special category data, will at first be linked to applicant’s name and then will be anonymised.
6.5 Technology
The use of Microsoft tools such as excel and outlook email for application information and administration is required due to functionality not existing within other available software. Risks will be appropriately covered below.
6.6 Identification methods
Names will be required so that grant letters can be sent to awarded applicants upon completion of application. Email addresses are required to be sent correct forms and or any communication needed with lead applicants and to inform applicants of any changes to privacy notice. The risk of this will be fully assessed within the risk section below
6.7 Sensitive/Special Category personal data
Ethnicity, age, gender and illness/ disability, socio economic status special category data will be collated for the purpose of informing policy development. This evidence will be a choice of the applicants.
6.8 Children or other vulnerable data subjects (people)
Not applicable
6.9 Data matching or linkage
No further data will be captured unless specified in this form.
6.10 Changes to data handling procedures
No changes other than contracting evaluator are expected. The DPIA and privacy notices will be reviewed with any changes. Individuals will be notified of any privacy notice changes
6.11 Statutory exemptions/protection
Not applicable
6.13 Automated decision making or profiling
The decision making of PoC awarded funding will be a made by a panel of experts who will not be privy to any data collected about the applicants.
6.14 Other risks
N/A
Contact
Email: spinouts@gov.scot