Your rights

Under certain circumstances, you have the following rights under data protection laws in relation to your personal information:

  • The right to be informed
  • The right to access your personal information.
  • The right to have personal information rectified if it is inaccurate or incomplete.
  • The right to have personal information erased.
  • The right to restrict processing of personal information.
  • The right to object to processing.

Your right to be informed

We must explain how we use your personal information. To do this we have produced this privacy notice, an easy read version will also be published at the earliest opportunity.

You can also speak to a health professional involved in your care or call the Scottish Coronavirus Helpline on 0800 030 8013.

How to exercise your rights

If you would like to exercise your data protection rights, you can do this by contacting the relevant body for that personal information as follows:

Data Lead data controller
NCDS Master Vaccination Record NES
Appointment Scheduling data NSS, your Health Board and your GP
Your GP record data Your GP
Vaccination Record (Vaccination Management Tool - National system) NES, your Health Board
Vaccination Record (Local systems) Your health board and your GP

Further information about these rights and how to exercise them

Contact details for specific data controllers if you have any specific questions

Your right to complain

If you are unhappy with any aspect of this privacy notice, or how your personal information is being processed in connection with coronavirus vaccinations, please contact Scottish Government using the details set out in Controllers’ contact details.

If you have a query about anything that's the responsibility of a specific data controller, please contact the Data Protection Officer of the organisation using the available contact details.

If you feel your information rights concern hasn't been resolved, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

The ICO is the supervisory authority responsible for data protection in the UK.

For further information, including independent data protection advice and information in relation to your rights, you can contact the Information Commissioner at:

The Information Commissioner
Wycliffe House
Water Lane

Tel: 0303 123 1113.


Visit the ICO web site to report any concerns.

Changes to this privacy notice

We keep our privacy notice under regular review.

This version was last updated on the date indicated

Related and third party services and websites

Further information about how your data is processed across NHS Scotland in connection with various elements of the Vaccination Programme is available: