National Fraud Initiative
Purpose and lawful basis for processing
The National Fraud Initiative (NFI) is the bi-annual data matching exercise carried out by the Auditor General and Audit Scotland. Public sector organisations, including over 100 in Scotland, and some private sector companies provide data sets which are matched based on risk. The objective of the exercise is the prevention and identification of fraud and/or error.
The lawful basis we rely on to process your personal data is article 6(1)(e) of the UK GDPR, which allows us to process personal data when this is necessary to perform our public tasks as a regulator.
What we need
The data sets we will provide to Audit Scotland include:
- Payroll data
- Pension data
- Trade creditors payment history
- Trade creditors standing data
Why we need it
We need to collect and provide these data sets to Audit Scotland to fulfil our regulatory obligations under the Public Finance and Accountability (Scotland) Act 2000, National Fraud Initiative (NFI).
What we do with it
We will use the data to participate in a national data matching exercise that assists in the prevention and detection of fraud and other crimes.
Data matching involves comparing computer records held by one body against other computer records held by the same or another body to see how far they match. This is usually personal information.
Computerised data matching allows potentially fraudulent claims and payments to be identified but the inclusion of personal data within a data matching exercise does not mean that any specific individual is under suspicion.
This information will be shared with Audit Scotland to allow a data matching exercise to be completed.
How long we keep it
We will retain your personal information in accordance with our retention policy.
What are your rights?
As an individual, you have certain rights regarding your own personal data.
For more information on your rights, please see ‘Your data protection rights’.
Do we use data processors?
No
Do we share your information?
We share the data sets with Audit Scotland. Information on how this data is processed by Audit Scotland can be found in their Privacy Notice.
This privacy notice is under development and will be expanded as new content is added to our website. Further information can be found at our existing website privacy policy page.