General Data Protection Regulation (GDPR) breaches: FOI release

Information request and response under the Freedom of Information (Scotland) Act 2002.

Information requested

You asked for: “…details of all GDPR breaches in the Scottish Government in the financial year 2018-2019” and “…please provide full information with as much detail as possible on any GDPR breach that was either: reported to the ICO; and/or affected more than 100 people; and/or was considered more serious/severe than a 'minor' breach”


I enclose a copy of the information you requested.
Table 1 – All incidents 2018/19 (attached as Appendix i)
Table 2 - Incidents reported to ICO / over 100 people affected/ more than a minor incident (attached as Appendix ii)

About FOI
The Scottish Government is committed to publishing all information released in response to Freedom of Information requests. View all FOI responses at

FOI-19-01094 Table 1 & 2


Please quote the FOI reference
Central Enquiry Unit
Phone: 0300 244 4000

The Scottish Government
St Andrews House
Regent Road

Back to top