Data Protection

Types of Data

Collection

Use

Disclosure

Physical and mental health information comprised in an individual's medical record.

Such information may be provided to CLO by a client (i.e. a Health Board) in connection with a particular matter on which CLO is advising.

Such information may also be provided by the legal advisors appointed by the individual to whom the information relates, in order that the individual's claim, complaint or question can be adequately and appropriately investigated and responded to.

Such information may also be provided by witnesses of an event or of a course of behaviour, etc., in connection with a particular matter on which CLO is advising.

Such information is used, to the extent necessary, to provide the legal advice and assistance that has been sought by the client.

Such information will also be used to the extent necessary to comply with CLO's statutory and regulatory obligations.

CLO may disclose personal information that it holds to the following parties, in each case where CLO is required to do so in connection with a particular matter in respect of which CLO is advising:

• its client, where additional personal information, unknown to the client, has been provided to CLO by the legal advisors appointed by the individual to whom the information relates;
• counsel (that is a member of the Faculty of Advocates who is engaged to provide independent, expert legal advice), where counsel has been engaged by CLO;
• the court or tribunal, whichever is relevant;
• the procurator fiscal;
• the Scottish Legal Aid Board;
• the Compensation Recovery Unit;
• the legal advisers appointed by the individual to whom the information relates;
• the legal advisers of any co-defenders to any action in respect of which CLO is advising;
• expert witnesses, where expert witnesses have been engaged by CLO, to allow the expert witnesses to provide their statement and/or testimony;
• factual witness, where such witness have witnessed an event or a course of behaviour, etc, but such disclosure will be limited to that required to allow the factual witnesses to provide their statement and/or testimony;
• Law Accountants in order to allow them to carry out an assessment of costs; and
• Auditor of the Court of Session in order to allow him to carry out an assessment of costs.

CLO may also disclose personal information that it holds to the following parties, for the following specified purposes:

• the Scottish Government or other relevant body, where this is required in connection with any fatal accident inquiry, public inquiry or other statutory inquiry;
• relevant professional regulatory bodies, such as the General Medical Council, the General Dental Council, the Nursing and Midwifery Council, etc., where this is required in required in order to comply with any statutory or regulatory obligation;
• the police, upon receipt of a valid Section 29 request (or, after 25 May 2018, its equivalent under the GDPR);
• external auditors where required in connection with any audit of CLO activities; and
• service providers to CLO, e.g. IT providers, but such disclosure will be limited to that required for providing the relevant service and will only be effected with service providers who have entered into a contract with NSS in which robust data protection obligations and protections are contained.

Information relating to an employee (former or current) or to a claimant, comprised in an employee's or claimant's employment/HR record.

Such information may be provided to CLO by a client (i.e. a Health Board) in connection with a particular employment or civil litigation matter on which CLO is advising.

Such information may also be provided by the legal advisors or union representatives appointed by the individual to whom the information relates, in order that the individual's claim, employment claim, disciplinary action, complaint or question can be adequately and appropriately investigated and responded to.

Such information may also be provided by witnesses of an event or of a course of behaviour, etc, in connection with a particular matter on which CLO is advising.

Such information is used, to the extent necessary, to provide the legal advice and assistance that has been sought by the client.

Such information will also be used to the extent necessary to comply with CLO's statutory and regulatory obligations.

CLO may disclose personal information that it holds to the following parties, in each case where CLO is required to do so in connection with a particular matter in respect of which CLO is advising:

• its client, where additional personal information, unknown to the client, has been provided to CLO by the legal advisors or union representatives appointed by the individual to whom the information relates;
• counsel (that is a member of the Faculty of Advocates who is engaged to provide independent, expert legal advice), where counsel has been engaged by CLO;
• the court or tribunal, whichever is relevant;
• the procurator fiscal;
• the Scottish Legal Aid Board;
• the Compensation Recovery Unit;
• the legal advisers appointed by the individual to whom the information relates;
• the legal advisers of any co-defenders to any action in respect of which CLO is advising;
• expert witnesses, where expert witnesses have been engaged by CLO to allow the expert witnesses to provide their statement and/or testimony;
• factual witness, where such witness have witnessed an event or a course of behaviour, etc, but such disclosure will be limited to that required to allow the factual witnesses to provide their statement and/or testimony;
• professional mediators and/or the Advisory, Conciliation and Arbitration Service (ACAS);
• Law Accountants in order to allow them to carry out an assessment of costs; and
• Auditor of the Court of Session in order to allow him to carry out an assessment of costs.

CLO may also disclose personal information that it holds to the following parties, for the following specified purposes:

• the Scottish Government or other relevant body, where this is required in connection with any fatal accident inquiry, public inquiry or other statutory inquiry;
• relevant professional regulatory bodies, such as the General Medical Council, the General Dental Council, the Nursing and Midwifery Council, etc., where this is required in required in order to comply with any statutory or regulatory obligation;
• the police, upon receipt of a valid Section 29 request (or, after 25 May 2018, its equivalent under the GDPR);
• external auditors where required in connection with any audit of CLO activities; and
• service providers to CLO, e.g. IT providers, but such disclosure will be limited to that required for providing the relevant service and will only be effected with service providers who have entered into a contract with NSS in which robust data protection obligations and protections are contained.

Address and relevant financial information relating to property or property-related transactions in respect of which an individual is a party.

Such information may be provided to CLO by a client (i.e. a Health Board), or by other professional advisors or service providers appointed by a client, in connection with a particular property or property-related transaction on which CLO is advising.

Such information may also be provided by the legal and/or other professional advisors appointed by the individual to whom the information relates, in order that the property or property-related transaction with which the individual is connected can be actioned.

Such information is used, to the extent necessary, to provide the legal advice and assistance that has been sought by the client.

Such information will also be used to the extent necessary to comply with CLO's statutory and regulatory obligations.

CLO may disclose personal information that it holds to the following parties, in each case where CLO is required to do so in connection with a particular matter in respect of which CLO is advising:

• its client or its client's other professional advisors and service providers, where additional personal information, unknown to the client, has been provided to CLO by the legal appointed by the individual to whom the information relates;
• the legal advisers and/or other professional advisers appointed by the individual to whom the information relates; and
• Scottish Government for reporting and/or authorisation purposes;
• public registers, such as the Land Register, Sasine Register or Books of Council and Session, where registration of deeds in connection with the relevant property transaction is required or appropriate;
• public authorities, where change of property ownership information requires to be provided;
• Law Accountants in order to allow them to carry out an assessment of costs; and
• Auditor of the Court of Session in order to allow him to carry out an assessment of costs.

CLO may also disclose personal information that it holds to the following parties, for the following specified purposes:

• external auditors where required in connection with any audit of CLO activities; and
• service providers to CLO, e.g. IT providers, but such disclosure will be limited to that required for providing the relevant service and will only be effected with service providers who have entered into a contract with NSS in which robust data protection obligations and protections are contained.

Information relating to potentially fraudulent or criminal activity in which an individual has been engaged or of which an individual has had knowledge.

Such information may be provided to CLO by a client (i.e. a Health Board or Practitioner and Counter Fraud Services, a strategic business unit within NSS) in connection with a particular matter on which CLO is advising.

Such information is used, to the extent necessary, to provide the legal advice and assistance that has been sought by the client.

Such information will also be used to the extent necessary to comply with CLO's statutory and regulatory obligations.

CLO may disclose personal information that it holds to the following parties, in each case where CLO is required to do so in connection with a particular matter in respect of which CLO is advising:

• its client, where additional personal information, unknown to the client, has been provided to CLO by the legal advisors appointed by the individual to whom the information relates;
• counsel (that is a member of the Faculty of Advocates who is engaged to provide independent, expert legal advice), where counsel has been engaged by CLO;
• the court or tribunal, whichever is relevant;
• the legal advisers  appointed by the individual to whom the information relates;
• the procurator fiscal; and
• factual witness, where such witness have witnessed an event or a course of behaviour, etc, but such disclosure will be limited to that required to allow the factual witnesses to provide their statement and/or testimony.

CLO may also disclose personal information that it holds to the following parties, for the following specified purposes:

• the police, for the purposes of reporting potentially fraudulent or criminal activity;
• relevant professional regulatory bodies, such as the General Medical Council, the General Dental Council, the Nursing and Midwifery Council, etc., where this is required in order to comply with client instructions; and
• service providers to CLO, e.g. IT providers, but such disclosure will be limited to that required for providing the relevant service and will only be effected with service providers who have entered into a contract with NSS in which robust data protection obligations and protections are contained.