Data Protection Act 1998

The Data Protection Act (1998) came into force on 1st March 2000.

The Data Protection Act requires all organisations which handle personal information to comply with a number of important principles regarding privacy and disclosure. All organisations are legally obliged to protect any personal information they hold. As a public body, the SPPA must also provide public access to official information.

The Agency follows the rules on data handling as outlined by the Scottish Government.