Publication - FOI/EIR release

General Data Protection Regulation (GDPR) breaches: FOI release

Published: 23 May 2019
Digital Directorate
Part of:
Public sector

Information request and response under the Freedom of Information (Scotland) Act 2002.

23 May 2019
General Data Protection Regulation (GDPR) breaches: FOI release
FOI reference: FOI/19/01094
Date received: 23 Apr 2019
Date responded: 15 May 2019
Information requested

You asked for: “…details of all GDPR breaches in the Scottish Government in the financial year 2018-2019” and “…please provide full information with as much detail as possible on any GDPR breach that was either: reported to the ICO; and/or affected more than 100 people; and/or was considered more serious/severe than a 'minor' breach”


I enclose a copy of the information you requested.
Table 1 – All incidents 2018/19 (attached as Appendix i)
Table 2 - Incidents reported to ICO / over 100 people affected/ more than a minor incident (attached as Appendix ii)

About FOI
The Scottish Government is committed to publishing all information released in response to Freedom of Information requests. View all FOI responses at

FOI-19-01094 Table 1 & 2

4 page PDF
285.6 kB


Please quote the FOI reference
Central Enquiry Unit
Phone: 0300 244 4000

The Scottish Government
St Andrews House
Regent Road