Data Protection Act 1998

The Data Protection Act (1998) came into force on 1st March 2000.

The Data Protection Act requires all organisations which handle personal information to comply with a number of important principles regarding privacy and disclosure. All organisations are legally obliged to protect any personal information they hold. As a public body, the SPPA must also provide public access to official information.

The Agency follows the rules on data handling as outlined by the Scottish Government.

Link to Scottish Government Website