Privacy Policy

All those involved in running the National Entitlement Card (NEC) scheme are committed to protecting your privacy.

The data held to administer your NEC is managed by your local Council, and is processed securely to prevent unauthorised access.

Data is only shared where necessary to allow you to access the services available to you using the NEC.

When you request a NEC, or request a new service at a later date, you will be told who your data is going to be shared with.


You may have heard that new laws to protect your personal information or data are coming into effect in May 2018, including an EU regulation known as GDPR.

These laws require organisations to be more careful than ever about how they handle your personal data.

As a result, Scottish councils, Transport Scotland and the organisations that supply them are making changes to how the NEC Scheme operates.

Most people will not be directly affected by these changes, and will apply for and use the NEC in the same way as before. There is NO need for you to replace your card as a result.

The main changes are:

We want to make it easier for you to understand what we do with your data and what rights that you have. We will be updating the "Privacy Policy" section of the Entitlement Card website (  This will include the revised information that will appear on our new forms.

We have always shared application data with colleagues in the Scottish public sector for the purposes of running the NEC Scheme and concessionary travel schemes. We will continue to do this, but we're introducing new ways of doing this so that the amount of data involved is less.

When you applied, you may have given us “consent” for us to share application data for other reasons. In future, we will only share this data for other reasons when you ask, unless the law requires us to. We will never sell your data.

We are not going to allow under 13 year olds to make an NEC application online. Younger applicants will continue to be able to apply in person as before; they will need parental approval up to the age of 12.

Information about how we handle personal information can be found in our Privacy Notice at (new May 2018)

Note: if you have been asked to be a Photo Referee, you will find a dedicated Privacy Notice at (new May 2018)

You may also wish to consult the Terms and Conditions that can be found at (Revised May 2018).

Privacy is also a subject covered by our Frequently Asked Questions (FAQs) at

If you would like to learn more, there are two documents available that describe the scheme in some detail:

NEC Privacy Impact Assessment (October 2016, new version in progress. PDF 21 pages)


NEC Information Architecture Data Flow Diagrams (October 2016, new version in progress. PDF 41 pages)