Assurance

Information governance

National Data Platform (NDP) is a trusted source of information. Upholding the quality, availability, documentation, and security of data on the platform is important to us.

The Data Protection Officer oversees the governance of data and information held on the NDP and across the organisation. This covers records management, data quality, data protection and the controls needed to ensure information sharing is secure, proper and timely.

The main NES privacy notice tells you about our legal basis for handling personal data, your rights including that to complain, and how to contact the NES Data Protection Officer.

A NES privacy notice for each NDP resource will be given as it becomes available, telling you the specific:

• data controller
• purpose(s)
• types of information held and for how long
• legal basis for processing

and

• where the information comes from
• who the information is shared with
• if there are any automated decisions about you
• whether the information is sent outside the European Union.

It should be noted that personal and confidential information is always protected. Sensitive personal information, including that on race, health, sexuality and religion, is given extra safeguards.

Accessing information

You have the right to request access to information held by NES, as set out in the:

• UK’s Data Protection legislation for information about you
• Environmental Information (Scotland) Regulations 2004 for information relating to the environment
• Freedom of Information (Scotland) Act 2002 for all other information.

Find out more about requesting information on the NES corporate website Freedom of Information section.

As resources are added to the NDP, information will be provided on how various user groups may access these resources, in accordance with our overall governance arrangements.