Scottish Health Survey: data protection impact assessment (DPIA)

2. Document metadata

2.1 Name of Project:

Scottish Health Survey

2.2 Author of report:

Julie Landsberg, Health & Social Care Analysis

2.3 Date of report:

Latest version, April 2023,

First version April 2018.

2.4 Name of Information Asset Owner (IAO) of relevant business unit:

Nicola Edge and Anita Morrison, Heads of Health & Social Care Analysis

2.5 Date for review of DPIA

The DPIA was reviewed in November 2019 and updated for GDPR compliance.

The DPIA was reviewed in May 2021 and updated to reflect:

• telephone interviewing
• home working
• online self-completions
• the inclusion of Intake24
• development of the SHeS dashboard
• linkage with NHS data

The DPIA was reviewed in April 2023 and updated to reflect:

• the switch back to face-to-face interviewing
• change in process for the child boost sample
• inclusion of Intake24 again in 2024

The DPIA was reviewed in June 2025 and updated to reflect:

• ONS no longer being involved
• Reverting back to paper self-completions
• Discontinuation of the supplementary tables
• Removal of a question on gender
• University of Cambridge requiring the sex and age of the respondent for Intake24 processing
• ACM Global Laboratories storing some SHeS data on a US server.