Publication - FOI/EIR release

Reports of GDPR breaches since new legislation came into effect: FOI release

Published: 25 Sep 2018
Directorate:
Digital Directorate
Part of:
Public sector

Information request and response under the Freedom of Information (Scotland) Act 2002.

Published:
25 Sep 2018
Reports of GDPR breaches since new legislation came into effect: FOI release
FOI reference: FOI/18/02265
Date received: 24 August 2018  
Date responded: 11 September 2018
 
Information requested
 
“Details of any reports of GDPR breaches in the Scottish Government since the new legislation came into effect.”

Response
 
I enclose a copy of the information you requested which covers the period from 25 May 2018 to 7 September 2018 (from GDPR implementation to the date I received your clarification). Each of the breaches in the attached table below has been investigated by a member of the Scottish Government’s data protection and information assets team who establish the level of risk to the individual.  Following these investigations the business area were then advised that the data breach did not pose a risk to the data subjects involved and was therefore not required to be reported to the Information Commissioner’s Office (ICO).

Breach Type

Reported to ICO

Number Of People Affected

Minor: Data sent by email to incorrect recipient

No

15

Minor: Data sent by email to incorrect recipient

No

1

Minor: Data sent by email to incorrect recipient

No

2

Minor: Data sent by email to incorrect recipient

No

1

Minor: Data sent by email to incorrect recipient

No

1

Minor: Data sent by email to incorrect recipient

No

4

Minor: Data sent by email to incorrect recipient

No

1

Minor: Data sent by email to incorrect recipient

No

1

Minor: Data sent by email to incorrect recipient

No

2

Minor: Data sent by email to incorrect recipient

No

8

Minor: Data sent by email to incorrect recipient

No

1

Minor: Data sent by email to incorrect recipient

No

4

Minor: Data sent by email to incorrect recipient

No

2

Minor: Failure to redact data

No

2

Minor: Other technical or organisational failure

No

4

Minor: Other technical or organisational failure

No

93

Minor: Other technical or organisational failure

No

200

About FOI

The Scottish Government is committed to publishing all information released in response to Freedom of Information requests. View all FOI responses at http://www.gov.scot/foi-responses
 
 

Contact

Please quote the FOI reference
Central Enquiry Unit 
Email: ceu@gov.scot
Phone: 0300 244 4000 
The Scottish Government 
St Andrew's House 
Regent Road 
Edinburgh 
EH1 3DG