Who has direct access to the information?
Does Public Health Scotland have plans to share the information with anyone else or any other organisation?
Can you please advise why formal consent was not asked for in storing personal data of this nature?
Can you please advise why people were not advised how they could access what information - such as this – Public Health Scotland holds on them and how they can request either removal or edit of the information?
What checks has Public Health Scotland made to ensure that gathering, storing and using the information on ethnicity linked to booster vaccines is compliant with GDPR and the Data Protection Act 2018?
Has there been an equality and diversity impact assessment of the decision to gather ethnicity data during the booster vaccine programme?