Data Protection Audits of The Corra Foundation: FOI release

Information requested

The recorded dates when the Scottish Government performed an audit on The Corra Foundation to ensure that the recipients of Scottish Government funds relating to unregulated Child Contact Centres were fully compliant with the Data Protection Act 2018 and the (now UK) GDPR (stipulated in Section 5.3 of the contract).

Response

The answer to your question is that, the Scottish Government does not formally audit Corra Foundation but for the Scottish Government to have assurance on the grant process, Corra Foundation, on behalf of the Scottish Government, requires organisations in receipt of Children, Young People and Families Early Intervention & Adult Learning and Empowering Communities (CYPFEI & ALEC) funding to submit quarterly reports and an annual report each year.

These reports include a requirement for organisations to confirm they are following all current statutory requirements and other laws and regulations relating to the grant and its work including adherence to data protection legislation. To date quarterly and annual reports have been received for each of the years the CYPFEI & ALEC fund has been operating, ie for 2016/17, 2017/18, 2018/19 and 2019/20.

For the year 2020/21, organisations are required to submit a mid-year and annual report which include the same requirement. Mid-year reports have been received for 2020/21.

About FOI

The Scottish Government is committed to publishing all information released in response to Freedom of Information requests. View all FOI responses at http://www.gov.scot/foi-responses.