As the Deputy will be aware, the General Data Protection Regulation (GDPR) and the Data Protection Act 2018 came into effect in May 2018 and formalised data sharing arrangements. This was subsequently supplemented by the Data Sharing and Governance Act 2019. In this context, I am informed by my Department that a schedule of the personal or person specific dataset as requested by the Deputy is not available for the last 20 years.
The work of my Department does not generally involve the collection or sharing of personal datasets. Personal data are only shared by my Department where there is a specific and legitimate need for such sharing, and details of what data is held or shared are set out in our Data Protection Statements which are published on our website.
Where personal data are shared, my Department has in place Data Sharing Agreements which set out in detail the roles and responsibilities of the bodies involved in the data sharing activity along with the technical safeguards that protect such personal data.
My Department has internal Records Management policies, Data Protection Policies and electronic systems in place to ensure good governance in data protection and records management, and we are mindful of our obligations under the Data Protection Act 2018.
