The Scottish Courts and Tribunals Service (SCTS) has released an updated version of its Privacy Notice, along with new and improved resources to help individuals better understand and exercise their data protection rights.
The Privacy Notice has been refreshed across several key areas, including the Overview, Data Protection Principles, Your Rights, How to Complain, and General Information. These updates aim to strengthen transparency and ensure the notice remains clear, accurate and aligned with current data protection law.
As part of the review, individual notices have been updated to reflect:
- revised and updated links, with outdated references removed
- reviewed retention periods
- reviewed lawful bases, now explicitly referencing relevant legislation where required
- removal of automated decision‑making content unless directly applicable
- updated information on SCTS data protection complaints process
The section covering processing by SCTS Headquarters and administrative processing within courts has also been expanded. It now provides more detail on what personal data is processed, why it is required, how it is used, and when and why SCTS may share personal data with other organisations.
In addition to updating the Privacy Notice, SCTS has introduced new resources to support individuals in exercising their data rights. This includes a new ‘Your Data Protection Rights’ information guide, which explains each right in plain language and highlights when and how individuals can use them.
SCTS has also launched a new Individual Rights Request form, making it easier for people to request actions such as erasure, rectification, restriction or objection to processing. An updated Subject Access Request (SAR) form is now available too, providing a clearer structure to help data subjects submit requests and supply the information needed to process them efficiently.
SCTS encourages all court users and members of the public who interact with our services to review the updated Privacy Notice and the new rights‑related resources to ensure they are fully informed about how their personal data is managed and the rights available to them.