Violence Prevention Framework for Scotland: data protection impact assessment
The data protection impact assessment provides information on how data collected as part of the Violence Prevention Framework for Scotland will be handled in line with current data protection laws.
7. General Data Protection Regulation (GDPR) Principles
|
Principle |
Compliant – Yes/No |
Description of how you have complied |
|---|---|---|
|
6.1 Principle 1 – fair and lawful, and meeting the conditions for processing |
Yes |
Info/ data retained for purpose of completing framework document and for the duration of the project |
|
Principle |
Compliant – Yes |
Description of how you have complied - all data held in line with SG policy |
|
6.2 Principle 2 – purpose limitation |
Yes |
Limited to completion and publication of final framework document |
|
Principle |
Compliant – Yes |
Description of how you have complied
|
|
6.3 Principle 3 – adequacy, relevance and data minimisation |
Yes |
Data relevant to framework. The lived experience stories have been anonymized |
|
Principle |
Compliant – Yes |
Description of how you have complied
|
|
6.4 Principle 4 – accurate, kept up to date, deletion |
Yes |
Yes appropriate deletion was undertaken upon completion of the framework documentation |
|
Principle |
Compliant – Yes |
Description of how you have complied- Done at end of project |
|
6.5 Principle 5 – kept for no longer than necessary, anonymization |
Yes |
As per 6.3 |
|
Principle |
Compliant – Yes |
Description of how you have complied- as above |
|
6.6 GDPR Articles 12-22 – data subject rights |
Yes |
All parties consulted and permissions sought to use data |
|
Principle |
Compliant – Yes |
Description of how you have complied- Pre scoping agreement and disclaimers |
|
6.7 Principle 6 - security |
yes |
Marked official only available to staff working on framework |
|
Principle |
Compliant – yes/ |
Description of how you have complied- ERDM used for storage of data |
|
6.8 GDPR Article 44 - Personal data shall not be transferred to a country or territory outside the European Economic Area. |
yes |
No personal data was made public or shared beyond the Violence Reduction Team and deleted once anonymized |
Contact
Email: ViolenceReduction@gov.scot