The Civil Contingencies Act 2004 (Contingency Planning) (Scotland) Regulations 2005

© Crown Copyright 2005

Scottish Statutory Instruments printed from this website are printed under the superintendence and authority of the Controller of HMSO being the Queen's Printer of Acts of Parliament.

The legislation contained on this web site is subject to Crown Copyright protection. It may be reproduced free of charge provided that it is reproduced accurately and that the source and copyright status of the material is made evident to users.

It should be noted that the right to reproduce the text of Scottish Statutory Instruments does not extend to the Queen's Printer for Scotland imprints which should be removed from any copies of the Scottish Statutory Instrument which are issued or made available to the public. This includes reproduction of the Scottish Statutory Instrument on the Internet and on intranet sites. The Royal Arms may be reproduced only where they are an integral part of the original document.

The text of this Internet version of the Scottish Statutory Instrument has been prepared to reflect the text as it was Made. A print version is also available and is published by The Stationery Office Limited as the The Civil Contingencies Act 2004 (Contingency Planning) (Scotland) Regulations 2005, ISBN 0110697448. The print version may be purchased by clicking here. Braille copies of this Scottish Statutory Instrument can also be purchased at the same price as the print edition by contacting TSO Customer Services on 0870 600 5522 or e-mail: customer.services@tso.co.uk.

Further information about the publication of legislation on this website can be found by referring to the Frequently Asked Questions.

To ensure fast access over slow connections, large documents have been segmented into "chunks". Where you see a "continue" button at the bottom of the page of text, this indicates that there is another chunk of text available.

(a) body or person listed in paragraphs 19 to 22, 24, 25 28, 29 or 29A[2] of Part 3 of Schedule 1;

(b) a body or person listed in paragraph 23 of Part 3 of Schedule 1 which is a relevant railway operator;

(c) a body or person listed in paragraph 26 of Part 3 of Schedule 1 which is a relevant airport authority; and

(d) a person or body listed in paragraph 27 of Part 3 of Schedule 1 which is a relevant harbour authority;

"non lead Category 1 responders" has the meaning given in regulation 6(3);

"relevant airport operator" means an airport operator, within the meaning of section 82(1) of the Airports Act 1986[3], which is responsible for an airport through which, in the most recent year for which data is available, at least 50,000 passengers or 10,000 tonnes of freight and mail were transported;

"relevant harbour authority" means a harbour authority, within the meaning of section 46(1) of the Aviation and Maritime Security Act 1990[4], which is responsible for a harbour through which the average annual maritime traffic, calculated by reference to the most recent three years for which data is available, is at least 1.5 million tonnes of cargo or 200,000 passengers;

"relevant railway operator" means a person who holds a licence under section 8 of the Railways Act 1993[5] (operation of railway assets) in so far the licence relates to activity in Great Britain and in so far as the licence held is–

(a) a network licence (within the meaning of that Act);

(b) a passenger licence (within the meaning of that Act);

(c) a station licence (within the meaning of that Act); or

(d) a non passenger licence (meaning a licence authorising a person to be the operator of a train being used on a network for a purpose other than carrying passengers), where such licence is held for the purpose of operating trains for the carriage of goods by railway and connected purposes,

except where such a licence is held only for the purpose of carrying out light maintenance activities (within the meaning of that Act);

"responder" means a Category 1 responder or a Category 2 responder;

"Scottish Category 1 responder" means a person or body listed in Part 2 of Schedule 1;

"Scottish Category 2 responder" means–

(i) a body or person listed in paragraph 30 to 35 or paragraph 38 of Part 4 of Schedule 1;

(ii) a body or person listed in paragraph 36 of Part 4 of Schedule 1 which is a relevant airport operator; and

(iii) a body or person listed in paragraph 37 of Part 4 of Schedule 1 which is a relevant harbour authority;

"Sensitive information" has the meaning given by regulation 39;

"Strategic Co ordinating Group" has the meaning given by regulation 3(3);

"voluntary organisation" means a body (other than a Scottish public or local authority) whose activities are not carried on for profit.

    (2) In these Regulations, unless otherwise specified, any reference to a section, Part or Schedule is a reference to that section or Part of, or Schedule to, the Act.

Co operation with general Category 1 responders
     4. A Scottish Category 1 responder or a Scottish Category 2 responder may co operate with a general Category 1 responder in connection with the performance by that general Category 1 responder of a duty under section 2(1).

Joint discharge of functions etc.
     5. Each Scottish Category 1 responder may–

(a) make arrangements with another responder for the performance of a duty of the Scottish Category 1 responder under section 2(1) jointly with that other responder;

(b) make arrangements with another responder for that responder to perform such a duty on behalf of the Scottish Category 1 responder.

Identification of Category 1 responder with lead responsibility
     6. —(1) If more than one Category 1 responder which has functions which are exercisable in a particular police area is subject to a particular duty under section 2(1)(a) to (f) in relation to an emergency or an emergency of a particular kind, paragraph (2) applies.

    (2) Where this paragraph applies, the Scottish Category 1 responders referred to in paragraph (1) may co-operate with each other and general Category 1 responders referred to in paragraph (1) for the purpose of identifying which of them will be the Category 1 responder with lead responsibility for performing that duty in relation to that emergency or an emergency of that particular kind in that police area.

    (3) If, pursuant to paragraph (2) and analogous provision in regulations made by a Minister of the Crown under Part 1, one of the Scottish or general Category 1 responders referred to in paragraph (1) is identified as being the Category 1 responder with lead responsibility for performing a duty under section 2(1)(a) to (f) in relation to an emergency or an emergency of a particular kind in a particular police area, the other Category 1 responders in that police area which are subject to that duty in relation to that emergency or an emergency of that particular kind are referred to in these regulations as "non-lead Category 1 responders".

Role of Scottish Category 1 responder with lead responsibility
     7. If, pursuant to regulation 6, a Scottish Category 1 responder has been identified as the Category 1 responder with lead responsibility in a particular police area for the performance of a particular duty under section 2(1)(a) to (f) in relation to an emergency or an emergency of a particular kind, that Scottish Category 1 responder must–

(a) take the lead responsibility in performing that duty in that police area in relation to that emergency or an emergency of that particular kind;

(b) consult the Scottish and general Category 1 responders which–


(i) have functions which are exercisable in that police area, and

(ii) are non-lead Category 1 responders in relation to that duty in so far as it applies to that emergency or an emergency of that particular kind,



in the course of performing that duty;

(c) ensure that those non lead Category 1 responders are kept informed of how the Scottish Category 1 responder with the lead responsibility is performing the duty; and

(d) co-operate with those non lead Category 1 responders (and in particular, co-operate for the purpose of ensuring so far as is reasonably practicable that those non-lead Category 1 responders approve of the way in which the Scottish Category 1 responder with lead responsibility is performing the duty).

Role of Scottish Category 1 responders which do not have lead responsibility
     8. —(1) Paragraph (2) applies if a Scottish Category 1 responder has been identified as the responder with lead responsibility in a police area for the performance of a particular duty under section 2(1)(a) to (f) in relation to an emergency or an emergency of a particular kind under regulation 6 or, in the case of a general Category 1 responder, under an analogous provision in regulations made by a Minister of the Crown under Part 1.

    (2) Where this paragraph applies, the other Scottish Category 1 responders which have functions which are exercisable in that police area and which are non-lead Category 1 responders in relation to that duty in so far as it applies to that emergency or an emergency of that particular kind–

(a) must co operate with the Scottish or general Category 1 responder with lead responsibility for performing that duty in connection with the performance of the duty by the Scottish or general Category 1 responder with lead responsibility;

(b) must provide any information to the Scottish or general Category 1 responder with lead responsibility for performing that duty which it considers will assist that responder in performing that duty (unless the information is sensitive information);

(c) must assist the Scottish or general Category 1 responder with lead responsibility for performing that duty with any exercises or training that that Scottish or general Category 1 responder wishes to carry out in connection with that duty; and

(d) need not perform that duty to the extent that to do so would unnecessarily duplicate the performance of that duty by the Scottish or general Category 1 responder which has lead responsibility for performing that duty in that police area.

Existing emergency planning duties
     9. Scottish Category 1 responders need not perform a duty under section 2(1) in relation to any emergency which is–

(a) a major accident, within the meaning of regulation 2(1) of the Control of Major Accident Hazards Regulations 1999[6], resulting from developments in the course of the operation of an establishment to which Part 2 of those Regulations applies;

(b) a major accident, within the meaning of regulation 2(1) of the Pipelines Safety Regulations 1996[7], involving a dangerous fluid (within the meaning of those Regulations) which is in, or has been conveyed in, a pipeline to which those Regulations apply; or

(c) a radiation emergency, within the meaning of regulation 2 of the Radiation (Emergency Preparedness and Public Information) Regulations 2001[8], which results from work with ionising radiation (within the meaning of those Regulations) to which those Regulations apply.

    (4) Any guidance issued under paragraph (1) or assessment issued under paragraph (2) must be in writing.

Community risk register
     12. —(1) As part of the Strategic Co ordinating Group, Scottish Category 1 responders which have functions which are exercisable in a particular police area must co-operate with each other and with general Category 1 responders which have functions which are exercisable in maintaining a register ("the community risk register") of the assessment carried out by each Scottish Category 1 responder under section 2(1)(a).

    (2) For the purpose of complying with paragraph (1), each Scottish Category 1 responder must, subject to paragraph (3), from time to time inform the other relevant Scottish and general Category 1 responders of the assessment carried out by it under section 2(1)(a).

    (3) Paragraph (2) does not apply to the extent that an assessment carried out by a Scottish Category 1 responder contains sensitive information and the Scottish Category 1 responder has reasonable grounds to believe that informing the other relevant Scottish and general Category 1 responders of the assessment would–

(a) in the case of sensitive information of the kind specified by paragraph (1)(a) of regulation 39, adversely affect national security;

(b) in the case of sensitive information of the kind specified by paragraph (1)(b), (c) or (d) of regulation 39, adversely affect the confidentiality of the information.

    (4) In performing its duties under section 2(1)(a) and (b), a Scottish Category 1 responder must have regard to any relevant community risk register maintained under this regulation.

Multi-agency plans
     16. —(1) Scottish Category 1 responders which have–

(a) functions which are exercisable in relation to a particular police area, and

(b) a duty under section 2(1)(d) in relation to an emergency or an emergency of a particular kind,

must consider whether it would be appropriate to perform that duty in relation to that emergency or an emergency of that particular kind by way of a multi-agency plan.

    (2) In paragraph (1), a "multi-agency plan" means a plan maintained by more than one Scottish Category 1 responder acting jointly.

Voluntary organisations
     17. —(1) In performing its duty under section 2(1)(c) or (d) (duty to plan to continue to perform functions or to respond, should an emergency occur), a Scottish Category 1 responder must have regard to the activities of voluntary organisations which carry on activities–

(a) in the area in which the functions of that Scottish Category 1 responder are exercisable; and

(b) which are relevant in an emergency.

    (2) For the purposes of paragraph (1), voluntary organisations carry on activities which are relevant in an emergency if they carry on activities for the purpose of–

(a) preventing an emergency;

(b) reducing, controlling or mitigating the effects of an emergency; or

(c) taking other action in connection with an emergency.

    (3) For the purposes of paragraph (2), it is immaterial if the voluntary organisation also carries on activities for other purposes.

Procedure for determining whether an emergency has occurred
     18. —(1) Any plan maintained by a Scottish Category 1 responder by virtue of section 2(1)(c) must include a procedure for determining whether an emergency has occurred which is likely to seriously obstruct the Scottish Category 1 responder in the performance of its functions.

    (2) Any plan maintained by a Scottish Category 1 responder by virtue of section 2(1)(d) must include a procedure for determining whether–

(a) an emergency has occurred which makes it necessary or desirable for it to take action to prevent the emergency, to reduce, control or mitigate its effects or otherwise in connection with it; and

(b) it would be able to take that action without changing the deployment of resources or acquiring additional resources.

    (3) The procedure required under paragraph (1) or (2) must–

(a) identify the person who should determine whether an emergency of the kind specified in paragraph (1) or (2) (as appropriate) has occurred or enable that person to be identified;

(b) specify the procedure which that person should adopt in taking that decision;

(c) specify the persons who should be consulted before such a decision is taken; and

(d) specify the persons who should be informed once such a decision is taken.

Training and exercises
     19. Every plan maintained by a Scottish Category 1 responder by virtue of section 2(1)(c) or (d) must include arrangements for–

(a) the carrying out of exercises for the purpose of ensuring that the plan is effective; and

(b) the provision of training of–


(i) an appropriate number of suitable staff of the Scottish Category 1 responder; and

(ii) such other persons as that Scottish Category 1 responder considers necessary,



for the purposes of ensuring that those persons can carry out plans maintained by virtue of section (2)(1)(c) or (d) effectively.

Plan revision
     20. If the Scottish Ministers issue guidance or an assessment under regulation 11 to a Scottish Category 1 responder, that responder must consider whether that guidance or assessment makes it necessary or expedient to add to or modify plans maintained under section 2(1)(c) or (d).

Alarming the public unnecessarily
     24. In performing its duty under section 2(1)(g), a Scottish Category 1 responder must have regard to the importance of not alarming the public unnecessarily.

Training and exercises
     25. The arrangements maintained by a Scottish Category 1 responder under section 2(1)(g) must include arrangements for–

(a) the carrying out of exercises for the purpose of ensuring that the arrangements are effective; and

(b) the provision of training of–


(i) an appropriate number of suitable staff of the Scottish Category 1 responder; and

(ii) such other persons as that Scottish Category 1 responder considers necessary,



for the purpose of ensuring that the arrangements can be implemented effectively.

Identification of Category 1 responder with lead responsibility for warning, informing and advising
     26. —(1) If more than one Category 1 responder which has functions which are exercisable in a particular police area is subject to a duty under section 2(1)(g) in relation to an emergency or an emergency of a particular kind, paragraph (2) applies.

    (2) Where this paragraph applies, the Scottish Category 1 responders referred to in paragraph (1) must co-operate with each other and any general Category responders referred to in paragraph (1) for the purpose of identifying which of them will be the Category 1 responder with lead responsibility for warning the public and for providing information and advice to the public if an emergency or an emergency of a particular kind is likely to occur or has occurred in that police area.

    (3) In performing their duty under paragraph (2), Scottish Category 1 responders–

(a) may identify a particular Category 1 responder as the Category 1 responder with lead responsibility for warning the public and providing information and advice to the public in relation to an emergency or an emergency of a particular kind before that emergency or an emergency of that kind is likely to occur or has occurred;

(b) may adopt a procedure by virtue of which the Category 1 responder with lead responsibility for warning the public and providing information and advice to the public may be identified when an emergency, or an emergency of a particular kind, is likely to occur or has occurred; and

(c) may adopt a procedure by virtue of which the identity of the Category 1 responder with lead responsibility for warning the public and providing information and advice to the public (whether identified by virtue of arrangements of the kind specified in sub paragraph (a) or (b)) may be changed when an emergency is likely to occur or has occurred.

Arrangements to be maintained by Scottish Category 1 responder with lead responsibility
     27. —(1) The arrangements maintained under section 2(1)(g) by a Scottish Category 1 responder which is, pursuant to regulation 26 or any analogous provision of regulations made by the Minister of the Crown under Part 1, identified as the Category 1 responder with lead responsibility for warning the public and providing advice and information to the public in a particular police area if an emergency or an emergency of a particular kind is likely to occur or has occurred, must ensure so far as reasonably practicable that if such an emergency is likely to occur or occurs that Scottish Category 1 responder–

(a) is able to contact the other Scottish and general Category 1 responders which have functions which are exercisable in that police area and which are subject to a duty under section 2(1)(g) in relation to that emergency or an emergency of that particular kind;

(b) informs those Scottish and general Category 1 responders of the actions it is taking, and action that it proposes to take, to warn the public and to provide information and advice to the public;

(c) is able to collaborate with those responders in warning the public and providing information and advice to the public.

    (2) Paragraph (1) also applies to a Scottish Category 1 responder which is likely to be identified as the Category 1 responder with lead responsibility for warning the public and providing advice and information to the public in a particular police area if an emergency or an emergency of a particular kind is likely to occur or has occurred by virtue of procedures adopted pursuant to regulation 26(2) and (3)(b) or (c).

Arrangements to be maintained by other Scottish Category 1 responders
     28. The arrangements maintained by a Scottish Category 1 responder under section 2(1)(g) in relation to an emergency or an emergency of a particular kind in relation to which it is not the Category 1 responder with lead responsibility for warning the public and providing advice and information to the public must provide for that Scottish Category 1 responder–

(a) to consult the Scottish or general Category 1 responder with lead responsibility for warning the public and providing advice and information to the public in that police area in relation to that emergency or an emergency of that particular kind on a regular basis; and

(b) to inform the Scottish or general Category 1 responder referred to in paragraph (a) of the actions that it is taking and action that it proposes to take to warn the public, and to provide information and advice to the public.

Advice etc. provided by other responders and other bodies
     29. —(1) In performing its duty under section 2(1)(g), Scottish Category 1 responders–

(a) must have regard to the arrangements maintained by each of the following persons to warn the public, and to provide information and advice to the public, if an emergency is likely to occur or has occurred–


(i) other Category 1 responders;

(ii) Category 2 responders;

(iii) the Meteorological Office;

(iv) Scottish Ministers;

(v) the Secretary of State;

(vi) the Food Standards Agency; and



(b) need not maintain arrangements to warn the public, and to provide information and advice to the public which would unnecessarily duplicate the warning, information and advice provided by those persons under those arrangements.

    (2) For the purposes of paragraph (1), it is immaterial whether the person specified in paragraph (1)(a) maintains the arrangements by virtue of section 2(1)(g), a duty under another enactment or otherwise.

Transitional provision
     31. Until 15th May 2006, these Regulations shall have effect as if–

(a) each reference to performing a duty under section 4(1) were a reference to exercising a power under section 4(1);

(b) each reference to the duty under section 4(1) were a reference to the power under section 4(1); and

(c) in regulation 33(3)(a), for "must" there were substituted "may".

Risk assessment
     32. In performing its duty under section 4(1) (duty to give advice and assistance to business and voluntary organisations), a relevant responder must take into account any relevant community risk register maintained by virtue of regulation 12.

Extent of the duty under section 4(1) in relation to business
     33. —(1) This regulation applies to the duty of a relevant responder under section 4(1) in so far as it relates to advice and assistance to business.

    (2) A relevant responder need only give advice and assistance to those businesses which carry on commercial activity in the area in which the functions of the relevant responder are exercisable.

    (3) In the course of performing that duty, a relevant responder–

(a) must provide advice and assistance to businesses at large;

(b) may provide advice and assistance to individual businesses; and

(c) may provide advice and assistance to businesses in connection with–


(i) identifying a business continuity consultant who provides advice and assistance to business in the area in which the functions of the relevant responder are exercisable; and

(ii) obtaining advice and assistance from such a business continuity consultant.

    (4) In paragraph (3), "business continuity consultant" means a person who–

(a) is competent to provide advice and assistance to business; and

(b) has experience of so doing.

Extent of the duty under section 4(1) in relation to voluntary organisations
     34. —(1) This regulation applies to the duty of a relevant responder under section 4(1) in so far as it relates to advice and assistance provided to voluntary organisations.

    (2) A relevant responder need only provide advice and assistance to those voluntary organisations which it considers appropriate.

    (3) A relevant responder may determine the manner in which advice and assistance under section 4(1) is provided to voluntary organisations, and may in particular–

(a) provide advice and assistance to voluntary organisations at large;

(b) provide advice and assistance to an individual voluntary organisation; and

(c) may provide advice and assistance to voluntary organisations in connection with–


(i) identifying a business continuity consultant who provides advice and assistance to business in the area in which the functions of the relevant responder are exercisable; and

(ii) obtaining advice and assistance from such a business continuity consultant.

    (4) In paragraph (3), "business continuity consultant" means a person who–

(a) is competent to provide advice and assistance to voluntary organisations; and

(b) has experience of so doing.

    (5) In determining whether a voluntary organisation is appropriate for the purposes of paragraph (2), a Scottish Category 1 responder must consider–

(a) whether the organisation carries on activities in the area in which the functions of the relevant responder are exercisable;

(b) the nature and extent of activities carried on by the organisation, and in particular the extent to which the organisation carries on activities which contribute to–


(i) the prevention of an emergency occurring;

(ii) the reduction, control or mitigation of the effects of an emergency;

(iii) otherwise taking action in connection with an emergency;

(iv) social welfare;



(c) the number of staff employed by the organisation;

(d) the turnover of the organisation; and

(e) the nature of the organisation, and in particular whether the nature of the organisation is such that the advice and assistance provided by the relevant responder is likely to improve the ability of the organisation to continue to carry on its activities in the event of an emergency.

Co-operation, relevant responder with lead responsibility etc.
     35. —(1) Relevant responders which have functions which are exercisable in a particular police area must co operate with each other in connection with the performance of their duties under section 4(1).

    (2) The other responders which have functions which are exercisable in that police area must co operate with those relevant responder in connection with the performance by that relevant responder of its duties under section 4(1).

    (3) A relevant responder may–

(a) perform its duty under section 4(1) jointly with another responder; or

(b) make arrangements with another responder for that responder to perform such a duty on behalf of the relevant responder.

    (4) Regulations 6, 7 and 8 apply to relevant responders for the purpose of performing the duty under section 4(1) as if–

(a) each reference to a Category 1 responder or a general Category 1 responder were a reference to a relevant responder; and

(b) each reference to a duty under section 2(1)(a) to (f) were a reference to the duty under section 4(1) in relation to an emergency or an emergency of a particular kind.

Cross border co-operation with relevant responders in England and Wales
     36. A Scottish Category 1 responder or a Scottish Category 2 responder may co-operate with a body which is listed in paragraph 1 or 2 of Schedule 1 (local authority in England and Wales) in connection with the performance by that body of the duty under section 4(1).

Activities of other responders
     37. —(1) In performing its duty under section 4(1), a relevant responder–

(a) must have regard to any advice and assistance to business or advice and assistance to voluntary organisations provided by other responders which have functions which are exercisable in the area in which the functions of the relevant responders are exercisable; and

(b) need not perform that duty to the extent that to do so would unnecessarily duplicate that advice and assistance.

    (2) For the purposes of paragraph (1), it is immaterial whether the advice and assistance provided by another responder is provided by virtue of section 4(1), a duty under another enactment or otherwise.

Charging
     38. Relevant responders may charge for any advice or assistance (including advice and assistance which it is required to provide under regulation 33(3)(a)) provided on request under section 4(1) but that charge must not exceed the aggregate of–

(a) the direct costs of providing the advice or assistance; and

(b) a reasonable share of any costs indirectly related to the provision of the advice or assistance.

(a) information the disclosure of which to the public would, or would be likely to, adversely affect national security;

(b) information the disclosure of which to the public would, or would be likely to, adversely affect public safety;

(c) information, disclosure of which to the public would or would be likely to prejudice the commercial interests of the person to whom that information relates; or

(d) information which is personal data, within the meaning of section 1(1) of the Data Protection Act 1998[9] if the condition in paragraph (2) or (3) is satisfied.

    (2) The condition in this paragraph is–

(a) in a case where the information falls within any of paragraphs (a) to (d) of the definition of "data" in section 1(1) of the Data Protection Act 1998, that the disclosure of the information to a member of the public would contravene–


(i) any of the data protection principles; or

(ii) section 10 of that Act (right to prevent processing likely to cause damage or distress); or



(b) in any other case, that the disclosure of the information to a member of the public would contravene any of the data protection principles if the exemptions in section 33A(1) of that Act (which relate to manual data held by public authorities) were disregarded.

    (3) The condition in this paragraph is that by virtue of any provision of Part IV of that Act the information is exempt from section 7(1)(c) of that Act (data subject's right of access to personal data).

    (4) In determining for the purposes of paragraph (2) whether anything done before 24th October 2007 would contravene the data protection principles, the exemptions in Part III of Schedule 8 to the Data Protection Act 1998 are to be disregarded.

Sensitive information – certificates in relation to national security
     40. —(1) A certificate signed by a member of the Scottish Executive certifying that disclosure of information to the public would adversely affect national security is conclusive evidence of that fact.

    (2) A certificate under paragraph (1) may be given in relation to specific information or to information of a specified kind and may be expressed to have prospective effect.

    (3) A document purporting to be a certificate under paragraph (1) shall be received in evidence and deemed to be such a certificate unless the contrary is proved.

    (4) A document which purports to be certified by or on behalf of a member of the Scottish Executive as a true copy of a certificate issued by a member of the Scottish Executive under paragraph (1) shall in any legal proceedings be sufficient evidence (or in England and Wales evidence) of that certificate.

Information sharing – making a request for information
     41. —(1) Paragraph (4) applies to a Category 1 responder or a Category 2 responder (referred to in this Part of the Regulations as the "requesting responder") to the extent that it is satisfied that the conditions in paragraphs (2) and (3) are satisfied.

    (2) The condition in this paragraph is that the requesting responder reasonably requires information which is held by a Scottish Category 1 responder or a Scottish Category 2 responder–

(a) in connection with the performance of a duty under section 2(1)(a) to (d) or section 4(1); or

(b) in connection with the performance of another function which relates to an emergency.

    (3) The condition in this paragraph is that the requesting responder is satisfied that–

(a) the information is not held by the requesting responder; and

(b) it is not reasonable to seek to obtain the information by other means.

    (4) To the extent that this paragraph applies, the requesting responder may make a request for the information to a Scottish Category 1 responder or a Scottish Category 2 responder (referred to in this Part of the Regulations as "the receiving responder").

Information sharing – procedure for making a request
     42. —(1) In this Part of the Regulations, a reference to a "request for information" is a reference to such a request which–

(a) is in writing;

(b) states the name of the requesting responder and an address for correspondence;

(c) describes the information requested; and

(d) states the reason why the requesting responder requires the information in connection with the performance of a duty under section 2(1)(a) to (d) or section 4(1) or in connection with the performance of another function which relates to an emergency (as the case may be).

    (2) For the purposes of paragraph (1), a request is to be treated as made in writing where the text of the request–

(a) is transmitted by electronic means;

(b) is received in legible form; and

(c) is capable of being used for subsequent reference.

Information sharing – obligation to provide information
     43. —(1) Subject to paragraphs (2) and (4), the receiving responder must comply with a request for information.

    (2) To the extent that the receiving responder is satisfied that–

(a) the request for information relates to sensitive information of the kind specified by paragraph (1)(a) of regulation 39 and disclosure to the requesting responder would, or would be likely to, adversely affect national security;

(b) the request for information relates to sensitive information of the kind specified by paragraph (1)(b), (c) or (d) of regulation 39 and disclosure to the requesting responder would, or would be likely to, adversely affect the confidentiality of the information,

the receiving responder must not comply with the request for information.

    (3) If a receiving responder refuses to comply with a request in the circumstances specified in paragraph (2)(b), it must give reasons.

    (4) To the extent that the receiving responder is satisfied that a request for information relates to sensitive information which has been directly or indirectly supplied to the receiving responder by a body which deals with security matters, the receiving responder must not comply with the request unless that body has given its consent to the provision of the information to the requesting responder; such consent may contain conditions.

Information sharing – response to request
     44. The receiving responder must respond to the request for information–

(a) before the end of such reasonable period as may be specified by the requesting responder; and

(b) at such place as may be reasonably specified by that responder.

Disclosure or publication of sensitive information
     45. —(1) Except where required to do so under another provision of these Regulations, a general responder must not publish or disclose to any person sensitive information which–

(a) it has received under or by virtue of a provision of these Regulations; or

(b) it has received under or by virtue of a provision in regulations made by a Minister of the Crown under Part 1,

unless paragraph (2) or (6) applies.

    (2) This paragraph applies, subject to paragraph (3), if consent for the publication or disclosure has been given by–

(a) in relation to sensitive information of the kind specified by paragraph (1)(a) or (b) of regulation 39 the originator of the information or (if different) a member of the Scottish Executive;

(b) in relation to sensitive information of the kind specified by paragraph (1)(c) or (d) of regulation 39, the person to whom the information relates.

    (3) Paragraph (2) does not apply to information of the kind specified by paragraph (1)(a) of regulation 39 if a member of the Scottish Executive has issued a certificate in writing indicating that publication or disclosure of the information would adversely affect national security.

    (4) Consent under paragraph (2) may–

(a) identify the information to which it applies by means of a general description;

(b) be expressed to have prospective effect; and

(c) may include conditions.

    (5) In paragraph (2), "originator of the information" means–

(a) if the information has been directly or indirectly supplied to the responder by a body which deals with security matters, that body;

(b) if sub paragraph (a) does not apply, the information takes the form of a document and that document has been created by a public authority, that public authority;

(c) otherwise, the person who supplied the information to the responder.

    (6) This paragraph applies if–

(a) the information is sensitive information of the kind specified by paragraph (1)(c) or (d) of regulation 39;

(b) the information is not sensitive information of the kind specified by paragraph (1)(a) or (b) of regulation 39;

(c) the responder is satisfied that the public interest in publishing or disclosing the information outweighs the legitimate interests of the person to whom that information relates; and

(d) the responder has informed the person to whom the sensitive information relates of its intention to publish or disclose the information and its reasons for being satisfied of the matter specified in sub paragraph (c).

Use of sensitive information
     46. —(1) Subject to paragraph (2), sensitive information which a general responder has received–

(a) under or by virtue of a provision of these Regulations; or

(b) under or by virtue of a provision in regulations made by a Minister of the Crown under Part 1,

may only be used by that responder for the purpose of performing the function for which, or in connection with which, the information was requested.

    (2) Sensitive information may be used for purposes other than those specified in paragraph (1) if consent for such use is given by–

(a) in relation to sensitive information of the kind specified by paragraph (1)(a) or (b) of regulation 39, the originator or (if different) a member of the Scottish Executive; or

(b) in relation to sensitive information of the kind specified by paragraph (1)(c) or (d) of regulation 39, the person to whom the information relates.

    (3) Consent under paragraph (2) may–

(a) identify the information to which it applies by means of a general description;

(b) be expressed to have prospective effect; and

(c) may include conditions.

    (4) In paragraph (2), "originator of the information" means–

(a) if the information has been directly or indirectly supplied to the responder by a body which deals with security matters, that body;

(b) if sub paragraph (a) does not apply, the information takes the form of a document and that document has been created by a public authority, that public authority;

(c) otherwise, the person who supplied the information to the responder.

    (5) In this regulation, "use" does not include publication or disclosure.

Security of sensitive information
     47. —(1) This regulation applies to sensitive information–

(a) received by a Scottish Category 1 responder under or by virtue of any provision of these Regulations;

(b) received under or by virtue of any regulations made by a Minister of the Crown under section 6(1)or 15(3); or

(c) has been created by a responder in discharging its duties under the Act, these Regulations or regulations made by a Minister of the Crown.

    (2) Each Scottish responder must have in place arrangements for ensuring that the confidentiality of sensitive information to which this regulation applies is not adversely affected.

    (3) The arrangements specified by paragraph (2) must include arrangements for ensuring that–

(a) sensitive information is clearly identifiable as such;

(b) only those persons who–


(i) are involved in the performance of a duty under section 2(1) or 4(1) or other function that relates to an emergency, and

(ii) as a result, need to have access to sensitive information,



have access to sensitive information;

(c) sensitive information is stored in a secure manner; and

(d) sensitive information is transferred (including transferral by electronic means) in a secure manner.

HUGH HENRY
Authorised to sign by the Scottish Ministers

St Andrew's House, Edinburgh
6th October 2005

[2] Paragraph 29A was inserted by S.I. 2005/2043.back

[3] 1986 c.31.back

[4] 1990 c.31.back

[5] 1993 c.43.back

[6] S.I. 1999/743; amended by the Greater London Authority Act 1999 s.328 and S.I. 2002/2469.back

[7] S.I. 1996/825; amended by the Greater London Authority Act 1999 s.328.back

[8] S.I. 2001/2975; amended by S.I. 2002/2099 and S.I. 2002/2469.back

[9] 1998 c.29.back