Statistical disclosure control (SDC) is the application of methods to reduce the risk of personal identifiable information about data subjects.

Methods for SDC usually restrict or reduce the detail of the data released. 

A statistical disclosure assessment, which is described in this protocol, determines whether SDC should be applied and this is a process which is necessary for documenting evidence that a standardised process of risk assessment has taken place in compliance with data protection law.

This SDC protocol sets out guidance and practices for PHS staff to follow on 'statistical disclosure control'.

The protocol describes considerations of risk that should be applied when data is being released, including into the public domain.

General enquiries

If you have an enquiry relating to this publication, please email

Media enquiries

If you have a media enquiry relating to this publication, please contact the Communications and Engagement team.

Requesting other formats and reporting issues

If you require publications or documents in other formats, please email

To report any issues with a publication, please email

Older versions of this publication

Versions of this publication released before 16 March 2020 may be found on the Data and Intelligence, Health Protection Scotland or Improving Health websites.

Last updated: 20 November 2023
Was this page helpful?