Publication - FOI/EIR release

Reports of GDPR breaches since new legislation came into effect: FOI release

Published: 25 September 2018
Directorate: Digital Directorate
Topic: Public sector

Information request and response under the Freedom of Information (Scotland) Act 2002.

FOI reference: FOI/18/02265
Date received: 24 August 2018
Date responded: 11 September 2018

Information requested

“Details of any reports of GDPR breaches in the Scottish Government since the new legislation came into effect.”

Response

I enclose a copy of the information you requested which covers the period from 25 May 2018 to 7 September 2018 (from GDPR implementation to the date I received your clarification). Each of the breaches in the attached table below has been investigated by a member of the Scottish Government’s data protection and information assets team who establish the level of risk to the individual. Following these investigations the business area were then advised that the data breach did not pose a risk to the data subjects involved and was therefore not required to be reported to the Information Commissioner’s Office (ICO).

Breach Type	Reported to ICO	Number Of People Affected
Minor: Data sent by email to incorrect recipient	No	15
Minor: Data sent by email to incorrect recipient	No	1
Minor: Data sent by email to incorrect recipient	No	2
Minor: Data sent by email to incorrect recipient	No	1
Minor: Data sent by email to incorrect recipient	No	1
Minor: Data sent by email to incorrect recipient	No	4
Minor: Data sent by email to incorrect recipient	No	1
Minor: Data sent by email to incorrect recipient	No	1
Minor: Data sent by email to incorrect recipient	No	2
Minor: Data sent by email to incorrect recipient	No	8
Minor: Data sent by email to incorrect recipient	No	1
Minor: Data sent by email to incorrect recipient	No	4
Minor: Data sent by email to incorrect recipient	No	2
Minor: Failure to redact data	No	2
Minor: Other technical or organisational failure	No	4
Minor: Other technical or organisational failure	No	93
Minor: Other technical or organisational failure	No	200

About FOI

The Scottish Government is committed to publishing all information released in response to Freedom of Information requests. View all FOI responses at http://www.gov.scot/foi-responses

Contact

Please quote the FOI reference
Central Enquiry Unit
Email: ceu@gov.scot
Phone: 0300 244 4000
The Scottish Government
St Andrew's House
Regent Road
Edinburgh
EH1 3DG

There is a problem

Thanks for your feedback

Was this helpful?

Yes

Your comments

Your feedback helps us to improve this website. Do not give any personal information because we cannot reply to you directly.

Choose a reason for your feedback

Your comments

Your feedback helps us to improve this website. Do not give any personal information because we cannot reply to you directly.

Yes, but

Choose a reason for your feedback

Your comments

Your feedback helps us to improve this website. Do not give any personal information because we cannot reply to you directly.