acthub.

The Civil Contingencies Act 2004 (Contingency Planning) (Scotland) Regulations 2005

Sections56
2005 No. 494

CIVIL CONTINGENCIES

The Civil Contingencies Act 2004 (Contingency Planning) (Scotland) Regulations 2005

Made6th October 2005
Laid before the Scottish Parliament7th October 2005
Coming into force14th November 2005
The Scottish Ministers, in exercise of the powers conferred upon them by sections 2(4) and (5), 4(3), (4) and (5), 6(2), 12, 15(1) and 17(6) of the Civil Contingencies Act 20041 and having consulted a Minister of the Crown as required to do so under section 14(2) of that Act; hereby make the following Regulations:

PART 1 Introductory

I11 Citation and commencement

These Regulations may be cited as the Civil Contingencies Act 2004 (Contingency Planning) (Scotland) Regulations 2005 and come into force on 14th November 2005. .

I22 Interpretation

1 In these Regulations–
  • “the Act” means the Civil Contingencies Act 2004;
  • “body which deals with security matters” means any of–
    1. the Security Service;
    2. the Secret Intelligence Service;
    3. the Government Communications Headquarters;
    4. the Serious Organised Crime Agency;
  • “Category 1 responder” means a body or person listed in Part 1 or 2 of Schedule 1;
  • “Category 2 responder” means a general Category 2 responder or a Scottish Category 2 responder;
  • “community risk register” has the meaning given by regulation 12;
  • “co-ordination area” means any of the following areas comprising the local government areas (as defined by section 1 of, and Schedule 1 to, the Local Government etc. (Scotland) Act 1994 and as adjusted under section 17 of the Local Government (Scotland) Act 1973)—
    1. Argyll and Bute, City of Glasgow, Dumbarton and Clydebank, Dumfries and Galloway, East Ayrshire, East Dunbartonshire, East Renfrewshire, Inverclyde, North Ayrshire, North Lanarkshire, Renfrewshire, South Ayrshire and South Lanarkshire;
    2. City of Edinburgh, Clackmannan, East Lothian, Falkirk, Fife, Midlothian, Stirling, The Borders and West Lothian; or
    3. Aberdeenshire, Angus, City of Aberdeen, City of Dundee, Highland, Moray, Orkney Islands, Perthshire and Kinross, Shetland Islands and Western Isles;
  • “emergency” has the meaning given by section 1(1);
  • “function” has the meaning given by section 18(1);
  • “general Category 1 responder” means a person or body listed in Part 1 of Schedule 1;
  • “general Category 2 responder” means–
    1. body or person listed in paragraphs 19 to 22, 24, 25 28, 29 or 29A2 of Part 3 of Schedule 1;
    2. a body or person listed in paragraph 23 of Part 3 of Schedule 1 which is a relevant railway operator;
    3. a body or person listed in paragraph 26 of Part 3 of Schedule 1 which is a relevant airport authority; and
    4. a person or body listed in paragraph 27 of Part 3 of Schedule 1 which is a relevant harbour authority;
  • “non lead Category 1 responders” has the meaning given in regulation 6(3);
  • “Regional Resilience Partnership” has the meaning given by regulation 3(3);
  • “relevant airport operator” means an airport operator, within the meaning of section 82(1) of the Airports Act 19863, which is responsible for an airport through which, in the most recent year for which data is available, at least 50,000 passengers or 10,000 tonnes of freight and mail were transported;
  • “relevant harbour authority” means a harbour authority, within the meaning of section 46(1) of the Aviation and Maritime Security Act 19904, which is responsible for a harbour through which the average annual maritime traffic, calculated by reference to the most recent three years for which data is available, is at least 1.5 million tonnes of cargo or 200,000 passengers;
  • “relevant railway operator” means a person who holds a licence under section 8 of the Railways Act 19935 (operation of railway assets) in so far the licence relates to activity in Great Britain and in so far as the licence held is–
    1. a network licence (within the meaning of that Act);
    2. a passenger licence (within the meaning of that Act);
    3. a station licence (within the meaning of that Act); or
    4. a non passenger licence (meaning a licence authorising a person to be the operator of a train being used on a network for a purpose other than carrying passengers), where such licence is held for the purpose of operating trains for the carriage of goods by railway and connected purposes,
    except where such a licence is held only for the purpose of carrying out light maintenance activities (within the meaning of that Act);
  • “responder” means a Category 1 responder or a Category 2 responder;
  • “Scottish Category 1 responder” means a person or body listed in Part 2 of Schedule 1;
  • “Scottish Category 2 responder” means–
    1. a body or person listed in paragraph 30 to 35 or paragraph 38 of Part 4 of Schedule 1;
    2. a body or person listed in paragraph 36 of Part 4 of Schedule 1 which is a relevant airport operator; and
    3. a body or person listed in paragraph 37 of Part 4 of Schedule 1 which is a relevant harbour authority;
  • “Sensitive information” has the meaning given by regulation 39;
  • F7...
  • “voluntary organisation” means a body (other than a Scottish public or local authority) whose activities are not carried on for profit.
2 In these Regulations, unless otherwise specified, any reference to a section, Part or Schedule is a reference to that section or Part of, or Schedule to, the Act.

PART 2 General

I63 Co-operation and Regional Resilience Partnership

1 Scottish Category 1 responders which have functions which are exercisable in a particular co-ordination area must co operate with each other and with general Category 1 responders which have functions which are exercisable in that area in connection with the performance of their duties under section 2(1).
2 The co-operation referred to in paragraph (1)–
a may take the form of two or more Scottish Category 1 responders co operating with each other, or one or more Scottish Category 1 responders cooperating with one or more general Category 1 responders; and
b must take the form of all Scottish Category 1 responders which have functions which are exercisable in that co-ordination area co-operating together in a single group with all general Category 1 responders which have functions which are exercisable in that co-ordination area.
3 The form of co-operation referred to in paragraph (2)(b) is referred to in these Regulations as the “Regional Resilience Partnership”.
4 As part of the Regional Resilience Partnership, Scottish Category 1 responders which have functions which are exercisable in a particular co-ordination area must make arrangements to hold a meeting at least once every six months; and each Scottish Category 1 responder must, so far as reasonably practicable, attend such a meeting or arrange for it to be effectively represented at that meeting.
5 Scottish Category 2 responders which have functions which are exercisable in a particular co-ordination area must co operate with each Scottish and general Category 1 responder which has functions which are exercisable in that area in connection with the performance by that Scottish and general Category 1 responder of its duties under section 2(1);
6 A Scottish Category 2 responder which has functions which are exercisable in a particular co-ordination area–
a must, so far as reasonably practicable, attend a meeting of the Regional Resilience Partnership for that area or arrange to be effectively represented at that meeting, if it is asked to do so by all of those Scottish and general Category 1 responders which have functions which are exercisable in that co-ordination area; and
b in the case of any other meeting of that Regional Resilience Partnership, must consider whether it is appropriate for it to attend the meeting or to be effectively represented at the meeting.
7 For the purposes of paragraph (6) and analogous provision in regulations made by a Minister of the Crown under Part 1, the Scottish Category 1 responders which have functions which are exercisable in a co-ordination area must–
a keep each Scottish and general Category 2 responder which has functions which are exercisable in that area informed of–
i when meetings of the Regional Resilience Partnership are to take place;
ii the location of such meetings;
iii the matters which are likely to be discussed at such meetings;
b make arrangements for a Scottish or general Category 2 responder to attend any such meetings where the Scottish or general Category 2 responder wishes to do so; and
c consider whether a Scottish or general Category 2 responder should be asked to attend such a meeting.

I74 Co operation with general Category 1 responders

A Scottish Category 1 responder or a Scottish Category 2 responder may co operate with a general Category 1 responder in connection with the performance by that general Category 1 responder of a duty under section 2(1).

I85 Joint discharge of functions etc.

Each Scottish Category 1 responder may–
a make arrangements with another responder for the performance of a duty of the Scottish Category 1 responder under section 2(1) jointly with that other responder;
b make arrangements with another responder for that responder to perform such a duty on behalf of the Scottish Category 1 responder.

I96 Identification of Category 1 responder with lead responsibility

1 If more than one Category 1 responder which has functions which are exercisable in a particular co-ordination area is subject to a particular duty under section 2(1)(a) to (f) in relation to an emergency or an emergency of a particular kind, paragraph (2) applies.
2 Where this paragraph applies, the Scottish Category 1 responders referred to in paragraph (1) may co-operate with each other and general Category 1 responders referred to in paragraph (1) for the purpose of identifying which of them will be the Category 1 responder with lead responsibility for performing that duty in relation to that emergency or an emergency of that particular kind in that co-ordination area.
3 If, pursuant to paragraph (2) and analogous provision in regulations made by a Minister of the Crown under Part 1, one of the Scottish or general Category 1 responders referred to in paragraph (1) is identified as being the Category 1 responder with lead responsibility for performing a duty under section 2(1)(a) to (f) in relation to an emergency or an emergency of a particular kind in a particular co-ordination area, the other Category 1 responders in that co-ordination area which are subject to that duty in relation to that emergency or an emergency of that particular kind are referred to in these regulations as “non-lead Category 1 responders”.

I107 Role of Scottish Category 1 responder with lead responsibility

If, pursuant to regulation 6, a Scottish Category 1 responder has been identified as the Category 1 responder with lead responsibility in a particular co-ordination area for the performance of a particular duty under section 2(1)(a) to (f) in relation to an emergency or an emergency of a particular kind, that Scottish Category 1 responder must–
a take the lead responsibility in performing that duty in that co-ordination area in relation to that emergency or an emergency of that particular kind;
b consult the Scottish and general Category 1 responders which–
i have functions which are exercisable in that co-ordination area, and
ii are non-lead Category 1 responders in relation to that duty in so far as it applies to that emergency or an emergency of that particular kind,
in the course of performing that duty;
c ensure that those non lead Category 1 responders are kept informed of how the Scottish Category 1 responder with the lead responsibility is performing the duty; and
d co-operate with those non lead Category 1 responders (and in particular, co-operate for the purpose of ensuring so far as is reasonably practicable that those non-lead Category 1 responders approve of the way in which the Scottish Category 1 responder with lead responsibility is performing the duty).

I118 Role of Scottish Category 1 responders which do not have lead responsibility

1 Paragraph (2) applies if a Scottish Category 1 responder has been identified as the responder with lead responsibility in a co-ordination area for the performance of a particular duty under section 2(1)(a) to (f) in relation to an emergency or an emergency of a particular kind under regulation 6 or, in the case of a general Category 1 responder, under an analogous provision in regulations made by a Minister of the Crown under Part 1.
2 Where this paragraph applies, the other Scottish Category 1 responders which have functions which are exercisable in that co-ordination area and which are non-lead Category 1 responders in relation to that duty in so far as it applies to that emergency or an emergency of that particular kind–
a must co operate with the Scottish or general Category 1 responder with lead responsibility for performing that duty in connection with the performance of the duty by the Scottish or general Category 1 responder with lead responsibility;
b must provide any information to the Scottish or general Category 1 responder with lead responsibility for performing that duty which it considers will assist that responder in performing that duty (unless the information is sensitive information);
c must assist the Scottish or general Category 1 responder with lead responsibility for performing that duty with any exercises or training that that Scottish or general Category 1 responder wishes to carry out in connection with that duty; and
d need not perform that duty to the extent that to do so would unnecessarily duplicate the performance of that duty by the Scottish or general Category 1 responder which has lead responsibility for performing that duty in that co-ordination area.

I49 Existing emergency planning duties

Scottish Category 1 responders need not perform a duty under section 2(1) in relation to any emergency which is–
a a major accident, within the meaning of regulation 2(1) of the Control of Major Accident Hazards Regulations 2015, resulting from developments in the course of the operation of an establishment to which Part 2 of those Regulations applies;
b a major accident, within the meaning of regulation 2(1) of the Pipelines Safety Regulations 19966, involving a dangerous fluid (within the meaning of those Regulations) which is in, or has been conveyed in, a pipeline to which those Regulations apply; or
c a radiation emergency, within the meaning of regulation 2 of the Radiation (Emergency Preparedness and Public Information) Regulations 2019, which results from work with ionising radiation (within the meaning of those Regulations) to which those Regulations apply.

PART 3 Duty to assess risk of emergency occurring

I1210 Kinds of emergency in relation to which risk should be assessed

A Scottish Category 1 responder need only perform the duty under section 2(1)(a) (duty to assess risk of emergency occurring) in relation to an emergency which affects or may affect the area in which the functions of the Scottish Category 1 responder are exercisable.

I1311 Guidance and risk assessments issued by Scottish Ministers

1 The Scottish Ministers may issue to Scottish Category 1 responders (or any class of Scottish Category 1 responders) guidance as to–
a the likelihood of a particular emergency or an emergency of a particular kind occurring;
b the extent to which a particular emergency or an emergency of a particular kind would or might (if it occurred) cause damage to human welfare in a place in the Scotland, the environment of a place in Scotland or the security of the United Kingdom.
2 The Scottish Ministers may issue to Scottish Category 1 responders (or any class of Scottish Category 1 responders) an assessment of the matters specified in sub-paragraph (a) or (b) of paragraph (1).
3 In performing its duty under section 2(1)(a), a Scottish Category 1 responder must–
a take into account any guidance issued to it under paragraph (1); and
b adopt any assessment issued to it under paragraph (2).
4 Any guidance issued under paragraph (1) or assessment issued under paragraph (2) must be in writing.

I1412 Community risk register

1 As part of the Regional Resilience Partnership, Scottish Category 1 responders which have functions which are exercisable in a particular co-ordination area must co-operate with each other and with general Category 1 responders which have functions which are exercisable in maintaining a register (“the community risk register”) of the assessment carried out by each Scottish Category 1 responder under section 2(1)(a).
2 For the purpose of complying with paragraph (1), each Scottish Category 1 responder must, subject to paragraph (3), from time to time inform the other relevant Scottish and general Category 1 responders of the assessment carried out by it under section 2(1)(a).
3 Paragraph (2) does not apply to the extent that an assessment carried out by a Scottish Category 1 responder contains sensitive information and the Scottish Category 1 responder has reasonable grounds to believe that informing the other relevant Scottish and general Category 1 responders of the assessment would–
a in the case of sensitive information of the kind specified by paragraph (1)(a) of regulation 39, adversely affect national security;
b in the case of sensitive information of the kind specified by paragraph (1)(b), (c) or (d) of regulation 39, adversely affect the confidentiality of the information.
4 In performing its duties under section 2(1)(a) and (b), a Scottish Category 1 responder must have regard to any relevant community risk register maintained under this regulation.

PART 4 Duty to maintain plans

I1513 Risk assessment

In performing its duty under section 2(1)(c) and (d) (duty to plan to continue to perform functions or to respond, should an emergency occur), a Scottish Category 1 responder must have regard to any relevant assessment of risk which it has carried out under section 2(1)(a) or (b).

I1614 Arrangements to warn, inform and advise the public

In performing its duty under section 2(1)(d), a Scottish Category 1 responder must have regard to any relevant arrangements which it maintains under section 2(1)(g) (arrangements to warn the public, and to provide information and advice to the public, if an emergency is likely to occur or has occurred).

I1715 General and specific plans

In performing its duties under section 2(1)(c) and (d), a Scottish Category 1 responder–
a may maintain plans which relate to a particular emergency or a particular kind of emergency; and
b must maintain plans which relate to more than one emergency or more that one kind of emergency.

I1816 Multi-agency plans

1 Scottish Category 1 responders which have–
a functions which are exercisable in relation to a particular co-ordination area, and
b a duty under section 2(1)(d) in relation to an emergency or an emergency of a particular kind,
must consider whether it would be appropriate to perform that duty in relation to that emergency or an emergency of that particular kind by way of a multi-agency plan.
2 In paragraph (1), a “multi-agency plan” means a plan maintained by more than one Scottish Category 1 responder acting jointly.

I1917 Voluntary organisations

1 In performing its duty under section 2(1)(c) or (d) (duty to plan to continue to perform functions or to respond, should an emergency occur), a Scottish Category 1 responder must have regard to the activities of voluntary organisations which carry on activities–
a in the area in which the functions of that Scottish Category 1 responder are exercisable; and
b which are relevant in an emergency.
2 For the purposes of paragraph (1), voluntary organisations carry on activities which are relevant in an emergency if they carry on activities for the purpose of–
a preventing an emergency;
b reducing, controlling or mitigating the effects of an emergency; or
c taking other action in connection with an emergency.
3 For the purposes of paragraph (2), it is immaterial if the voluntary organisation also carries on activities for other purposes.

I2018 Procedure for determining whether an emergency has occurred

1 Any plan maintained by a Scottish Category 1 responder by virtue of section 2(1)(c) must include a procedure for determining whether an emergency has occurred which is likely to seriously obstruct the Scottish Category 1 responder in the performance of its functions.
2 Any plan maintained by a Scottish Category 1 responder by virtue of section 2(1)(d) must include a procedure for determining whether–
a an emergency has occurred which makes it necessary or desirable for it to take action to prevent the emergency, to reduce, control or mitigate its effects or otherwise in connection with it; and
b it would be able to take that action without changing the deployment of resources or acquiring additional resources.
3 The procedure required under paragraph (1) or (2) must–
a identify the person who should determine whether an emergency of the kind specified in paragraph (1) or (2) (as appropriate) has occurred or enable that person to be identified;
b specify the procedure which that person should adopt in taking that decision;
c specify the persons who should be consulted before such a decision is taken; and
d specify the persons who should be informed once such a decision is taken.

I2119 Training and exercises

Every plan maintained by a Scottish Category 1 responder by virtue of section 2(1)(c) or (d) must include arrangements for–
a the carrying out of exercises for the purpose of ensuring that the plan is effective; and
b the provision of training of–
i an appropriate number of suitable staff of the Scottish Category 1 responder; and
ii such other persons as that Scottish Category 1 responder considers necessary,
for the purposes of ensuring that those persons can carry out plans maintained by virtue of section (2)(1)(c) or (d) effectively.

I2220 Plan revision

If the Scottish Ministers issue guidance or an assessment under regulation 11 to a Scottish Category 1 responder, that responder must consider whether that guidance or assessment makes it necessary or expedient to add to or modify plans maintained under section 2(1)(c) or (d).

PART 5 Publication of plans and assessments

I2321 Alarming the public unnecessarily

In performing its duty under section 2(1)(f) (duty to arrange for the publication of assessments and plans), a Scottish Category 1 responder must have regard to the importance of not alarming the public unnecessarily.

PART 6 Arrangements for warning and provision of information and advice to the public

I2422 Duty to have regard to emergency plans

In performing its duty under section 2(1)(g) (duty to maintain arrangements to warn, inform and advise the public in the event of an emergency), a Scottish Category 1 responder must have regard to any relevant plan it maintains by virtue of section 2(1)(d).

I2523 General and specific arrangements to warn etc.

In performing its duty under section 2(1)(g), a Scottish Category 1 responder may–
a maintain arrangements which relate to any emergency; and
b maintain arrangements which relate to a particular emergency or an emergency of a particular kind.

I2624 Alarming the public unnecessarily

In performing its duty under section 2(1)(g), a Scottish Category 1 responder must have regard to the importance of not alarming the public unnecessarily.

I2725 Training and exercises

The arrangements maintained by a Scottish Category 1 responder under section 2(1)(g) must include arrangements for–
a the carrying out of exercises for the purpose of ensuring that the arrangements are effective; and
b the provision of training of–
i an appropriate number of suitable staff of the Scottish Category 1 responder; and
ii such other persons as that Scottish Category 1 responder considers necessary,
for the purpose of ensuring that the arrangements can be implemented effectively.

I2826 Identification of Category 1 responder with lead responsibility for warning, informing and advising

1 If more than one Category 1 responder which has functions which are exercisable in a particular co-ordination area is subject to a duty under section 2(1)(g) in relation to an emergency or an emergency of a particular kind, paragraph (2) applies.
2 Where this paragraph applies, the Scottish Category 1 responders referred to in paragraph (1) must co-operate with each other and any general Category responders referred to in paragraph (1) for the purpose of identifying which of them will be the Category 1 responder with lead responsibility for warning the public and for providing information and advice to the public if an emergency or an emergency of a particular kind is likely to occur or has occurred in that co-ordination area.
3 In performing their duty under paragraph (2), Scottish Category 1 responders–
a may identify a particular Category 1 responder as the Category 1 responder with lead responsibility for warning the public and providing information and advice to the public in relation to an emergency or an emergency of a particular kind before that emergency or an emergency of that kind is likely to occur or has occurred;
b may adopt a procedure by virtue of which the Category 1 responder with lead responsibility for warning the public and providing information and advice to the public may be identified when an emergency, or an emergency of a particular kind, is likely to occur or has occurred; and
c may adopt a procedure by virtue of which the identity of the Category 1 responder with lead responsibility for warning the public and providing information and advice to the public (whether identified by virtue of arrangements of the kind specified in sub paragraph (a) or (b)) may be changed when an emergency is likely to occur or has occurred.

I2927 Arrangements to be maintained by Scottish Category 1 responder with lead responsibility

1 The arrangements maintained under section 2(1)(g) by a Scottish Category 1 responder which is, pursuant to regulation 26 or any analogous provision of regulations made by the Minister of the Crown under Part 1, identified as the Category 1 responder with lead responsibility for warning the public and providing advice and information to the public in a particular co-ordination area if an emergency or an emergency of a particular kind is likely to occur or has occurred, must ensure so far as reasonably practicable that if such an emergency is likely to occur or occurs that Scottish Category 1 responder–
a is able to contact the other Scottish and general Category 1 responders which have functions which are exercisable in that co-ordination area and which are subject to a duty under section 2(1)(g) in relation to that emergency or an emergency of that particular kind;
b informs those Scottish and general Category 1 responders of the actions it is taking, and action that it proposes to take, to warn the public and to provide information and advice to the public;
c is able to collaborate with those responders in warning the public and providing information and advice to the public.
2 Paragraph (1) also applies to a Scottish Category 1 responder which is likely to be identified as the Category 1 responder with lead responsibility for warning the public and providing advice and information to the public in a particular co-ordination area if an emergency or an emergency of a particular kind is likely to occur or has occurred by virtue of procedures adopted pursuant to regulation 26(2) and (3)(b) or (c).

I3028 Arrangements to be maintained by other Scottish Category 1 responders

The arrangements maintained by a Scottish Category 1 responder under section 2(1)(g) in relation to an emergency or an emergency of a particular kind in relation to which it is not the Category 1 responder with lead responsibility for warning the public and providing advice and information to the public must provide for that Scottish Category 1 responder–
a to consult the Scottish or general Category 1 responder with lead responsibility for warning the public and providing advice and information to the public in that co-ordination area in relation to that emergency or an emergency of that particular kind on a regular basis; and
b to inform the Scottish or general Category 1 responder referred to in paragraph (a) of the actions that it is taking and action that it proposes to take to warn the public, and to provide information and advice to the public.

I329 Advice etc. provided by other responders and other bodies

1 In performing its duty under section 2(1)(g), Scottish Category 1 responders–
a must have regard to the arrangements maintained by each of the following persons to warn the public, and to provide information and advice to the public, if an emergency is likely to occur or has occurred–
i other Category 1 responders;
ii Category 2 responders;
iii the Meteorological Office;
iv Scottish Ministers;
v the Secretary of State;
vi the Food Standards Scotland; and
b need not maintain arrangements to warn the public, and to provide information and advice to the public which would unnecessarily duplicate the warning, information and advice provided by those persons under those arrangements.
2 For the purposes of paragraph (1), it is immaterial whether the person specified in paragraph (1)(a) maintains the arrangements by virtue of section 2(1)(g), a duty under another enactment or otherwise.

PART 7 Advice and assistance to business and voluntary organisations

I3130 Interpretation of Part 7

In this Part of the Regulations–
a “relevant responder” means a body which is listed in paragraph 13 of Schedule 1 (local authorities);
b “advice and assistance to business” means advice and assistance to the public in connection with the making of arrangements for the continuance of the commercial activities by the public in the event of an emergency; and any reference to “a business” means a member of the public who carries on commercial activities; and
c “advice and assistance to voluntary organisations” means advice and assistance to voluntary organisations in connection with the making of arrangements by voluntary organisations for the continuance of their activities in the event of an emergency.

I3231 Transitional provision

Until 15th May 2006, these Regulations shall have effect as if–
a each reference to performing a duty under section 4(1) were a reference to exercising a power under section 4(1);
b each reference to the duty under section 4(1) were a reference to the power under section 4(1); and
c in regulation 33(3)(a), for “must” there were substituted “may”.

I3332 Risk assessment

In performing its duty under section 4(1) (duty to give advice and assistance to business and voluntary organisations), a relevant responder must take into account any relevant community risk register maintained by virtue of regulation 12.

I3433 Extent of the duty under section 4(1) in relation to business

1 This regulation applies to the duty of a relevant responder under section 4(1) in so far as it relates to advice and assistance to business.
2 A relevant responder need only give advice and assistance to those businesses which carry on commercial activity in the area in which the functions of the relevant responder are exercisable.
3 In the course of performing that duty, a relevant responder–
a must provide advice and assistance to businesses at large;
b may provide advice and assistance to individual businesses; and
c may provide advice and assistance to businesses in connection with–
i identifying a business continuity consultant who provides advice and assistance to business in the area in which the functions of the relevant responder are exercisable; and
ii obtaining advice and assistance from such a business continuity consultant.
4 In paragraph (3), “business continuity consultant” means a person who–
a is competent to provide advice and assistance to business; and
b has experience of so doing.

I3534 Extent of the duty under section 4(1) in relation to voluntary organisations

1 This regulation applies to the duty of a relevant responder under section 4(1) in so far as it relates to advice and assistance provided to voluntary organisations.
2 A relevant responder need only provide advice and assistance to those voluntary organisations which it considers appropriate.
3 A relevant responder may determine the manner in which advice and assistance under section 4(1) is provided to voluntary organisations, and may in particular–
a provide advice and assistance to voluntary organisations at large;
b provide advice and assistance to an individual voluntary organisation; and
c may provide advice and assistance to voluntary organisations in connection with–
i identifying a business continuity consultant who provides advice and assistance to business in the area in which the functions of the relevant responder are exercisable; and
ii obtaining advice and assistance from such a business continuity consultant.
4 In paragraph (3), “business continuity consultant” means a person who–
a is competent to provide advice and assistance to voluntary organisations; and
b has experience of so doing.
5 In determining whether a voluntary organisation is appropriate for the purposes of paragraph (2), a Scottish Category 1 responder must consider–
a whether the organisation carries on activities in the area in which the functions of the relevant responder are exercisable;
b the nature and extent of activities carried on by the organisation, and in particular the extent to which the organisation carries on activities which contribute to–
i the prevention of an emergency occurring;
ii the reduction, control or mitigation of the effects of an emergency;
iii otherwise taking action in connection with an emergency;
iv social welfare;
c the number of staff employed by the organisation;
d the turnover of the organisation; and
e the nature of the organisation, and in particular whether the nature of the organisation is such that the advice and assistance provided by the relevant responder is likely to improve the ability of the organisation to continue to carry on its activities in the event of an emergency.

I3635 Co-operation, relevant responder with lead responsibility etc.

1 Relevant responders which have functions which are exercisable in a particular co-ordination area must co operate with each other in connection with the performance of their duties under section 4(1).
2 The other responders which have functions which are exercisable in that co-ordination area must co operate with those relevant responder in connection with the performance by that relevant responder of its duties under section 4(1).
3 A relevant responder may–
a perform its duty under section 4(1) jointly with another responder; or
b make arrangements with another responder for that responder to perform such a duty on behalf of the relevant responder.
4 Regulations 6, 7 and 8 apply to relevant responders for the purpose of performing the duty under section 4(1) as if–
a each reference to a Category 1 responder or a general Category 1 responder were a reference to a relevant responder; and
b each reference to a duty under section 2(1)(a) to (f) were a reference to the duty under section 4(1) in relation to an emergency or an emergency of a particular kind.

I3736 Cross border co-operation with relevant responders in England and Wales

A Scottish Category 1 responder or a Scottish Category 2 responder may co-operate with a body which is listed in paragraph 1 or 2 of Schedule 1 (local authority in England and Wales) in connection with the performance by that body of the duty under section 4(1).

I3837 Activities of other responders

1 In performing its duty under section 4(1), a relevant responder–
a must have regard to any advice and assistance to business or advice and assistance to voluntary organisations provided by other responders which have functions which are exercisable in the area in which the functions of the relevant responders are exercisable; and
b need not perform that duty to the extent that to do so would unnecessarily duplicate that advice and assistance.
2 For the purposes of paragraph (1), it is immaterial whether the advice and assistance provided by another responder is provided by virtue of section 4(1), a duty under another enactment or otherwise.

I3938 Charging

Relevant responders may charge for any advice or assistance (including advice and assistance which it is required to provide under regulation 33(3)(a)) provided on request under section 4(1) but that charge must not exceed the aggregate of–
a the direct costs of providing the advice or assistance; and
b a reasonable share of any costs indirectly related to the provision of the advice or assistance.

PART 8 Information

I539 Sensitive information

1 In these Regulations, “sensitive information” means information which is not reasonably accessible to the public and which is–
a information the disclosure of which to the public would, or would be likely to, adversely affect national security;
b information the disclosure of which to the public would, or would be likely to, adversely affect public safety;
c information, disclosure of which to the public would or would be likely to prejudice the commercial interests of the person to whom that information relates; or
d information which is personal dataF11... if the condition in paragraph (1A), (1B) or (1C) is satisfied.
1A The condition in this paragraph is that the disclosure of the information to a member of the public—
a would contravene any of the data protection principles, or
b would do so if the exemptions in section 24(1) of the Data Protection Act 2018 (manual unstructured data held by public authorities) were disregarded.
1B The condition in this paragraph is that the disclosure of the information to a member of the public would contravene—
a Article 21 of the UK GDPR (general processing: right to object to processing), or
b section 99 of the Data Protection Act 2018 (intelligence services processing: right to object to processing).
1C The condition in this paragraph is that—
a on a request under Article 15(1) of the UK GDPR (general processing: right of access by the data subject) for access to personal data, the information would be withheld in reliance on provision made by or under section 15, 16 or 26 of, or Schedule 2, 3 or 4 to, the Data Protection Act 2018,
b on a request under section 45(1)(b) of that Act (law enforcement processing: right of access by the data subject), the information would be withheld in reliance on subsection (4) of that section, or
c on a request under section 94(1)(b) of that Act (intelligence services processing: rights of access by the data subject), the information would be withheld in reliance on a provision of Chapter 6 of Part 4 of that Act.
1D In this regulation—
  • “the data protection principles” means the principles set out in—
    1. Article 5(1) of the UK GDPR,
    2. section 34(1) of the Data Protection Act 2018, and
    3. section 85(1) of that Act;
  • “data subject” has the same meaning as in the Data Protection Act 2018 (see section 3 of that Act);
  • F19...
  • “personal data” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(2) and (14) of that Act).
  • “the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);
1E In determining for the purposes of this regulation whether the lawfulness principle in Article 5(1)(a) of the UK GDPR would be contravened by the disclosure of information, Article 6(1) of the UK GDPR (lawfulness) is to be read as if the second sub-paragraph (disapplying the legitimate interests gateways in relation to public authorities) disapplied only the gateway in point (ea) (recognised legitimate interests).
F132 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F133 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F134 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

I4040 Sensitive information – certificates in relation to national security

1 A certificate signed by a member of the Scottish Executive certifying that disclosure of information to the public would adversely affect national security is conclusive evidence of that fact.
2 A certificate under paragraph (1) may be given in relation to specific information or to information of a specified kind and may be expressed to have prospective effect.
3 A document purporting to be a certificate under paragraph (1) shall be received in evidence and deemed to be such a certificate unless the contrary is proved.
4 A document which purports to be certified by or on behalf of a member of the Scottish Executive as a true copy of a certificate issued by a member of the Scottish Executive under paragraph (1) shall in any legal proceedings be sufficient evidence (or in England and Wales evidence) of that certificate.

I4141 Information sharing – making a request for information

1 Paragraph (4) applies to a Category 1 responder or a Category 2 responder (referred to in this Part of the Regulations as the “requesting responder”) to the extent that it is satisfied that the conditions in paragraphs (2) and (3) are satisfied.
2 The condition in this paragraph is that the requesting responder reasonably requires information which is held by a Scottish Category 1 responder or a Scottish Category 2 responder–
a in connection with the performance of a duty under section 2(1)(a) to (d) or section 4(1); or
b in connection with the performance of another function which relates to an emergency.
3 The condition in this paragraph is that the requesting responder is satisfied that–
a the information is not held by the requesting responder; and
b it is not reasonable to seek to obtain the information by other means.
4 To the extent that this paragraph applies, the requesting responder may make a request for the information to a Scottish Category 1 responder or a Scottish Category 2 responder (referred to in this Part of the Regulations as “the receiving responder”).

I4242 Information sharing – procedure for making a request

1 In this Part of the Regulations, a reference to a “request for information” is a reference to such a request which–
a is in writing;
b states the name of the requesting responder and an address for correspondence;
c describes the information requested; and
d states the reason why the requesting responder requires the information in connection with the performance of a duty under section 2(1)(a) to (d) or section 4(1) or in connection with the performance of another function which relates to an emergency (as the case may be).
2 For the purposes of paragraph (1), a request is to be treated as made in writing where the text of the request–
a is transmitted by electronic means;
b is received in legible form; and
c is capable of being used for subsequent reference.

I4343 Information sharing – obligation to provide information

1 Subject to paragraphs (2) and (4), the receiving responder must comply with a request for information.
2 To the extent that the receiving responder is satisfied that–
a the request for information relates to sensitive information of the kind specified by paragraph (1)(a) of regulation 39 and disclosure to the requesting responder would, or would be likely to, adversely affect national security;
b the request for information relates to sensitive information of the kind specified by paragraph (1)(b), (c) or (d) of regulation 39 and disclosure to the requesting responder would, or would be likely to, adversely affect the confidentiality of the information,
the receiving responder must not comply with the request for information.
3 If a receiving responder refuses to comply with a request in the circumstances specified in paragraph (2)(b), it must give reasons.
4 To the extent that the receiving responder is satisfied that a request for information relates to sensitive information which has been directly or indirectly supplied to the receiving responder by a body which deals with security matters, the receiving responder must not comply with the request unless that body has given its consent to the provision of the information to the requesting responder; such consent may contain conditions.

I4444 Information sharing – response to request

The receiving responder must respond to the request for information–
a before the end of such reasonable period as may be specified by the requesting responder; and
b at such place as may be reasonably specified by that responder.

I4545 Disclosure or publication of sensitive information

1 Except where required to do so under another provision of these Regulations, a general responder must not publish or disclose to any person sensitive information which–
a it has received under or by virtue of a provision of these Regulations; or
b it has received under or by virtue of a provision in regulations made by a Minister of the Crown under Part 1,
unless paragraph (2) or (6) applies.
2 This paragraph applies, subject to paragraph (3), if consent for the publication or disclosure has been given by–
a in relation to sensitive information of the kind specified by paragraph (1)(a) or (b) of regulation 39 the originator of the information or (if different) a member of the Scottish Executive;
b in relation to sensitive information of the kind specified by paragraph (1)(c) or (d) of regulation 39, the person to whom the information relates.
3 Paragraph (2) does not apply to information of the kind specified by paragraph (1)(a) of regulation 39 if a member of the Scottish Executive has issued a certificate in writing indicating that publication or disclosure of the information would adversely affect national security.
4 Consent under paragraph (2) may–
a identify the information to which it applies by means of a general description;
b be expressed to have prospective effect; and
c may include conditions.
5 In paragraph (2), “originator of the information” means–
a if the information has been directly or indirectly supplied to the responder by a body which deals with security matters, that body;
b if sub paragraph (a) does not apply, the information takes the form of a document and that document has been created by a public authority, that public authority;
c otherwise, the person who supplied the information to the responder.
6 This paragraph applies if–
a the information is sensitive information of the kind specified by paragraph (1)(c) or (d) of regulation 39;
b the information is not sensitive information of the kind specified by paragraph (1)(a) or (b) of regulation 39;
c the responder is satisfied that the public interest in publishing or disclosing the information outweighs the legitimate interests of the person to whom that information relates; and
d the responder has informed the person to whom the sensitive information relates of its intention to publish or disclose the information and its reasons for being satisfied of the matter specified in sub paragraph (c).

I4646 Use of sensitive information

1 Subject to paragraph (2), sensitive information which a general responder has received–
a under or by virtue of a provision of these Regulations; or
b under or by virtue of a provision in regulations made by a Minister of the Crown under Part 1,
may only be used by that responder for the purpose of performing the function for which, or in connection with which, the information was requested.
2 Sensitive information may be used for purposes other than those specified in paragraph (1) if consent for such use is given by–
a in relation to sensitive information of the kind specified by paragraph (1)(a) or (b) of regulation 39, the originator or (if different) a member of the Scottish Executive; or
b in relation to sensitive information of the kind specified by paragraph (1)(c) or (d) of regulation 39, the person to whom the information relates.
3 Consent under paragraph (2) may–
a identify the information to which it applies by means of a general description;
b be expressed to have prospective effect; and
c may include conditions.
4 In paragraph (2), “originator of the information” means–
a if the information has been directly or indirectly supplied to the responder by a body which deals with security matters, that body;
b if sub paragraph (a) does not apply, the information takes the form of a document and that document has been created by a public authority, that public authority;
c otherwise, the person who supplied the information to the responder.
5 In this regulation, “use” does not include publication or disclosure.

I4747 Security of sensitive information

1 This regulation applies to sensitive information–
a received by a Scottish Category 1 responder under or by virtue of any provision of these Regulations;
b received under or by virtue of any regulations made by a Minister of the Crown under section 6(1)or 15(3); or
c has been created by a responder in discharging its duties under the Act, these Regulations or regulations made by a Minister of the Crown.
2 Each Scottish responder must have in place arrangements for ensuring that the confidentiality of sensitive information to which this regulation applies is not adversely affected.
3 The arrangements specified by paragraph (2) must include arrangements for ensuring that–
a sensitive information is clearly identifiable as such;
b only those persons who–
i are involved in the performance of a duty under section 2(1) or 4(1) or other function that relates to an emergency, and
ii as a result, need to have access to sensitive information,
have access to sensitive information;
c sensitive information is stored in a secure manner; and
d sensitive information is transferred (including transferral by electronic means) in a secure manner.

Footnotes

  1. I1
    Reg. 1 in force at 14.11.2005, see reg. 1
  2. I2
    Reg. 2 in force at 14.11.2005, see reg. 1
  3. I3
    Reg. 29 in force at 14.11.2005, see reg. 1
  4. I4
    Reg. 9 in force at 14.11.2005, see reg. 1
  5. I5
    Reg. 39 in force at 14.11.2005, see reg. 1
  6. I6
    Reg. 3 in force at 14.11.2005, see reg. 1
  7. I7
    Reg. 4 in force at 14.11.2005, see reg. 1
  8. I8
    Reg. 5 in force at 14.11.2005, see reg. 1
  9. I9
    Reg. 6 in force at 14.11.2005, see reg. 1
  10. I10
    Reg. 7 in force at 14.11.2005, see reg. 1
  11. I11
    Reg. 8 in force at 14.11.2005, see reg. 1
  12. I12
    Reg. 10 in force at 14.11.2005, see reg. 1
  13. I13
    Reg. 11 in force at 14.11.2005, see reg. 1
  14. I14
    Reg. 12 in force at 14.11.2005, see reg. 1
  15. I15
    Reg. 13 in force at 14.11.2005, see reg. 1
  16. I16
    Reg. 14 in force at 14.11.2005, see reg. 1
  17. I17
    Reg. 15 in force at 14.11.2005, see reg. 1
  18. I18
    Reg. 16 in force at 14.11.2005, see reg. 1
  19. I19
    Reg. 17 in force at 14.11.2005, see reg. 1
  20. I20
    Reg. 18 in force at 14.11.2005, see reg. 1
  21. I21
    Reg. 19 in force at 14.11.2005, see reg. 1
  22. I22
    Reg. 20 in force at 14.11.2005, see reg. 1
  23. I23
    Reg. 21 in force at 14.11.2005, see reg. 1
  24. I24
    Reg. 22 in force at 14.11.2005, see reg. 1
  25. I25
    Reg. 23 in force at 14.11.2005, see reg. 1
  26. I26
    Reg. 24 in force at 14.11.2005, see reg. 1
  27. I27
    Reg. 25 in force at 14.11.2005, see reg. 1
  28. I28
    Reg. 26 in force at 14.11.2005, see reg. 1
  29. I29
    Reg. 27 in force at 14.11.2005, see reg. 1
  30. I30
    Reg. 28 in force at 14.11.2005, see reg. 1
  31. I31
    Reg. 30 in force at 14.11.2005, see reg. 1
  32. I32
    Reg. 31 in force at 14.11.2005, see reg. 1
  33. I33
    Reg. 32 in force at 14.11.2005, see reg. 1
  34. I34
    Reg. 33 in force at 14.11.2005, see reg. 1
  35. I35
    Reg. 34 in force at 14.11.2005, see reg. 1
  36. I36
    Reg. 35 in force at 14.11.2005, see reg. 1
  37. I37
    Reg. 36 in force at 14.11.2005, see reg. 1
  38. I38
    Reg. 37 in force at 14.11.2005, see reg. 1
  39. I39
    Reg. 38 in force at 14.11.2005, see reg. 1
  40. I40
    Reg. 40 in force at 14.11.2005, see reg. 1
  41. I41
    Reg. 41 in force at 14.11.2005, see reg. 1
  42. I42
    Reg. 42 in force at 14.11.2005, see reg. 1
  43. I43
    Reg. 43 in force at 14.11.2005, see reg. 1
  44. I44
    Reg. 44 in force at 14.11.2005, see reg. 1
  45. I45
    Reg. 45 in force at 14.11.2005, see reg. 1
  46. I46
    Reg. 46 in force at 14.11.2005, see reg. 1
  47. I47
    Reg. 47 in force at 14.11.2005, see reg. 1
  48. F1
    Words in reg. 2(1)(d) substituted (1.4.2006) by The Serious Organised Crime and Police Act 2005 (Consequential and Supplementary Amendments) (Scotland) Order 2006 (S.S.I. 2006/129), art. 1, sch. para. 9
  49. F2
    Words in reg. 2(1) inserted (1.4.2013) by The Police and Fire Reform (Scotland) Act 2012 (Consequential Modifications and Savings) Order 2013 (S.S.I. 2013/119), art. 1, sch. 1 para. 27(2)
  50. F3
    Words in Regulations substituted (1.4.2013) by The Police and Fire Reform (Scotland) Act 2012 (Consequential Modifications and Savings) Order 2013 (S.S.I. 2013/119), sch. 1 para. 27(3)
  51. F4
    Words in Regulations substituted (1.11.2013) by The Civil Contingencies Act 2004 (Contingency Planning) (Scotland) Amendment Regulations 2013 (S.S.I. 2013/247), reg. 2(3)
  52. F5
    Words in reg. 2(1) substituted (1.11.2013) by The Civil Contingencies Act 2004 (Contingency Planning) (Scotland) Amendment Regulations 2013 (S.S.I. 2013/247), regs. 1, 2(2)(a)
  53. F6
    Words in reg. 2(1) inserted (1.11.2013) by The Civil Contingencies Act 2004 (Contingency Planning) (Scotland) Amendment Regulations 2013 (S.S.I. 2013/247), regs. 1, 2(2)(b)
  54. F7
    Words in reg. 2(1) omitted (1.11.2013) by virtue of The Civil Contingencies Act 2004 (Contingency Planning) (Scotland) Amendment Regulations 2013 (S.S.I. 2013/247), regs. 1, 2(2)(c)
  55. F8
    Words in reg. 29(1)(vi) substituted (1.4.2015) by The Food (Scotland) Act 2015 (Consequential and Transitional Provisions) Order 2015 (S.S.I. 2015/100), arts. 1(2), 2, sch. para. 12
  56. F9
    Word in reg. 9(a) substituted (1.6.2015) by The Control of Major Accident Hazards Regulations 2015 (S.I. 2015/483), reg. 1(1), Sch. 6 para. 1 (with reg. 3(2))
  57. F10
    Reg. 39(1A)-(1E) inserted (25.5.2018) by Data Protection Act 2018 (c. 12), s. 212(1), Sch. 19 para. 320(3) (with ss. 117, 209, 210); S.I. 2018/625, reg. 2(1)(g)
  58. F11
    Words in reg. 39(1)(d) omitted (25.5.2018) by virtue of Data Protection Act 2018 (c. 12), s. 212(1), Sch. 19 para. 320(2)(a) (with ss. 117, 209, 210); S.I. 2018/625, reg. 2(1)(g)
  59. F12
    Words in reg. 39(1)(d) substituted (25.5.2018) by Data Protection Act 2018 (c. 12), s. 212(1), Sch. 19 para. 320(2)(b) (with ss. 117, 209, 210); S.I. 2018/625, reg. 2(1)(g)
  60. F13
    Reg. 39(2)-(4) omitted (25.5.2018) by virtue of Data Protection Act 2018 (c. 12), s. 212(1), Sch. 19 para. 320(4) (with ss. 117, 209, 210); S.I. 2018/625, reg. 2(1)(g)
  61. F14
    Words in reg. 9(c) substituted (22.5.2019) by The Radiation (Emergency Preparedness and Public Information) Regulations 2019 (S.I. 2019/703), reg. 1(1), Sch. 10 para. 4 (with reg. 3)
  62. F15
    Words in reg. 39(1E) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 3 para. 61(4) (with Sch. 3 para. 112); 2020 c. 1, Sch. 5 para. 1(1)
  63. F16
    Words in reg. 39(1B)(a) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 3 para. 61(2) (with Sch. 3 para. 112); 2020 c. 1, Sch. 5 para. 1(1)
  64. F17
    Words in reg. 39(1C)(a) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 3 para. 61(2) (with Sch. 3 para. 112); 2020 c. 1, Sch. 5 para. 1(1)
  65. F18
    Words in reg. 39(1D) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 3 para. 61(3)(a) (with Sch. 3 para. 112); 2020 c. 1, Sch. 5 para. 1(1)
  66. F19
    Words in reg. 39(1D) omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 3 para. 61(3)(b) (with Sch. 3 para. 112); 2020 c. 1, Sch. 5 para. 1(1)
  67. F20
    Words in reg. 39(1D) inserted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 3 para. 61(3)(c) (with Sch. 3 para. 112); 2020 c. 1, Sch. 5 para. 1(1)
  68. F21
    Word in reg. 39(1E) substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), ss. 70(8)(a)(9)(f), 142(1); S.I. 2026/82, reg. 2(c)
  69. F22
    Words in reg. 39(1E) substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), ss. 70(8)(b)(9)(f), 142(1); S.I. 2026/82, reg. 2(c)
  70. 1
    2004 c. 36. Section 2(5) has effect in relation to section 2(4) by virtue of subsection (6) of that section and with the modifications specified in subsection (6).
  71. 2
    Paragraph 29A was inserted by S.I. 2005/2043.
  72. 3
    1986 c. 31.
  73. 4
    1990 c. 31.
  74. 5
    1993 c. 43.
  75. 6
    S.I. 1996/825; amended by the Greater London Authority Act 1999 s.328.