Publication - Impact assessment
Scottish Health Survey: data protection impact assessment (DPIA)
Reports on and assesses against any potential privacy impacts as a result of undertaking the Scottish Health Survey.
9. Data Protection Officer (DPO)
9.1 The DPO may give additional advice, please indicate how this has been actioned.
- Advice from DPO - Add further information about the linkage of the survey results with health record data. Action – Further details were added.
- Advice from DPO - Clarify the position in relation to third party organisations involved. Action - Discussed with ScotCen and clarified references to third parties.
- Advice from DPO - Confirm that there is a privacy notice for the survey. Action - Referred to the survey privacy notice in section 3.3 and provided a web link.
- Advice from DPO - Explain that a transfer risk assessment has been conducted in relation to ACM Global Laboratories storing some data relating to the survey saliva samples on a US server. Note that the UK-US data bridge has been identified as the formal safeguard. (June 2025). Action – Details added as advised.