Back to Making an application to SEPA

Radioactive substances authorisation

Purpose and lawful basis for processing

SEPA is responsible for regulating radioactive substances activities, and we collect and use personal information to enable us to carry out our regulatory duties under the Regulatory Reform (Scotland) Act 2014 and the Environmental Authorisations (Scotland) Regulations 2018 (EASR).

The lawful basis we rely on to process your personal data is article 6(1)(e) of the UK GDPR, which allows us to process personal data when this is necessary to perform our public tasks as a regulator. 

What we need

Notifications  

During the process of notifying us of a radioactive substances activity, we will ask you to provide the following personal information: 

• Name of person who will be in control of the activity; and 
• Name, phone number, address and email of the person making the notification. 

This information will be held on a register. 

Registrations 

During the process of applying for a registration or permit, we will ask you to provide details of the legal person who will be in control of the activity as well as the following personal information for the person that we may contact about the application and the contact for invoicing purposes: 

• Name 
• Address including postcode 
• Email address 
• Telephone number 
• Position/Designation 

In addition, for applications for a new permit, we will ask you to provide information on who is responsible for protection and safety with regard to public exposure from the radioactive substances activity, and information on the competences and training of staff involved in the radioactive substances activity.  

We will also ask you to provide personal information where this is required in administering authorisations.  For example, in applying for transfer of a radioactive substances authorisation, we will ask you to provide details of the transferee as well as the person who is currently in control of the activity.

Why we need it

We'll use this information to contact you about the application, issue a registration or permit and carry out our regulatory duties.

What we do with it

We use your personal data to carry out our regulatory duties, which may include:

• granting and administering of authorisations and maintaining registers
• investigating environmental complaints
• undertaking formal enforcement action
• maintaining our own accounts and records

How long we keep it

We will only retain your personal information for as long as it is required for the legal basis noted above. Thereafter, your data will be confidentially destroyed.

What are your rights?

As an individual, you have certain rights regarding your own personal data.

For more information on your rights, please see ‘Your data protection rights’.

Do we use data processors?

No

Do we share your information?

SEPA is required to make the information on the Register publicly available and the information you provide may be placed on SEPA’s public register which may be in any format including electronically on our web pages.  The placement of such information will be subject to redaction of personal information unless this information is required as part of our Public Task and will be subject to any Commercial Confidentiality Claims or National Security Directions.