ICO takes action to improve access to personal information from local authorities across Scotland

  • Reprimands issued to Glasgow City Council and City of Edinburgh Council for failing to respond to requests for personal information on time   
  • Action follows ICO engagement with local authorities across Scotland to improve right of access, including for people with care experience and those applying for redress after suffering abuse while in care   
  • Those who were let down in the past are being let down again, this time by poor SAR compliance.” 

The Information Commissioner’s Office (ICO) is taking action to tackle significant delays for people who are trying to access copies of their personal information held by local authorities across Scotland.  

Under data protection law, people have the right to ask an organisation if it holds their personal information and receive a copy of any personal information held within a month, unless an extension is applied – this is known as a subject access request (SAR).  

The regulator has now reprimanded both Glasgow City Council and City of Edinburgh Council for repeatedly failing to respond to SARs within the legal timeframe, leading to a significant backlog of requests.  

The reprimands follow the ICO’s proactive engagement with all 32 local authorities in Scotland after it became aware of delays in responses to SARs, amounting to years in some cases.  

Many local authorities have seen an increase in SARs received, many in relation to the Redress Scotland scheme where people who suffered abuse while in care can apply for redress using supporting documents such as their care records.  

Jenny Brotchie, Acting Head of Scottish Affairs at the ICO, said: “Those who were let down in the past are being let down again, this time by poor SAR compliance.

“We have heard how undue delays and lack of communication from local authorities can cause further distress for people, including those with care experience and those trying to claim redress in Scotland.

“Local authorities must get this right despite the rising numbers of requests, which is why we have been offering support and monitoring those with poor compliance until we are satisfied that improvements have been made.”  

Following the ICO’s scrutiny and support to put action plans in place, many local authorities have significantly reduced their backlog of requests and improved their response times.  

Despite a 67% overall increase in the total number of SARs to local authorities in Scotland between 2021 and 2024, 75% of local authorities improved their SAR compliance, with 13 local authorities reporting a compliance rate of 90% in 2023/24. 

However, the regulator launched investigations into two local authorities, Glasgow City Council and City of Edinburgh Council, after it did not see any tangible improvements over 12 months.  

The ICO’s recent compulsory audit of Glasgow City Council found that the council has good policies and procedures in place to handle SARs. However, lack of resource and budget remains an issue, with the council still unable to respond to many SARs within the legal timeframe.   

Following its reprimand, City of Edinburgh Council has now reported some improvement in its response times.   

Jenny Brotchie added: “While I’m pleased to see significant improvements from most of the local authorities that we engaged with, SAR compliance in Scotland remains a concern and we must ensure people can exercise their information rights effectively and without further harm.

“We expect all local authorities to have sufficient resources in place to handle the volume and complexity of SARs, and to keep people updated on the progress of their request.  

“We are taking a proportionate approach to monitoring local authorities, but these reprimands show that we will not hesitate to take enforcement action where necessary.”  

Looking forward, the ICO continues to engage with local authorities and other key stakeholders to drive further improvements and ensure that people can access their own personal information. 

The ICO has committed to improving the support it provides to both people who grew up in the care system across the UK and the organisations that hold their information. It has been gathering evidence of the challenges facing both people and organisations when it comes to accessing care records and will share its findings and next steps over the coming months.  

Read more detail about the ICO’s work with local authorities in Scotland here

Find out more about your information rights here, including the right of access.  

Scottish Government releases legal advice at last – but questions remain

Scottish Government statement on publication of legal advice relating to court case against the Scottish Information Commissioner:

On 9 September 2024 the Scottish Information Commissioner issued a decision notice (193/2024) requiring the Scottish Ministers to disclose legal advice in connection with its Court of Session case against the Scottish Information Commissioner (case XA10/23).  

The information had been withheld by the Scottish Government in response to a Freedom of Information request as it considered that the Government should have been able to receive the advice in confidence under “legal professional privilege” and that the public interest was not sufficient to override this exemption. 

The Commissioner, in responding to an appeal from the requester, took a different view – that considerations favouring release in this case outweighed those for maintaining legal professional privilege.   

That decision of the Commissioner was carefully considered by The Scottish Government and it was decided to release the information. 

The material being disclosed outlines that Scottish Ministers took decisions informed by appropriate analysis of the legal considerations and on an important point of principle which was acknowledged as addressing a ‘sharp and important question of statutory interpretation’ in the Court of Session’s judgement.  

The released documentation confirms that Ministers had been advised that there were reasonable prospects of success in taking an appeal. The documentation also shows that Ministers had discussed the legal advice with the Lord Advocate, the most senior government legal adviser, who was content that there were proper grounds for appealing and who agreed with Ministers that the decision should be appealed. 

There is a longstanding convention, observed by Scottish, UK and other governments, that government does not disclose legal advice except in exceptional circumstances.  This ensures that government can access full, frank and confidential legal advice, just as other organisations and individuals are able to.  The ability to access such advice is central to the effective conduct of government in the public interest.   

The Scottish Government disagrees with the Commissioner’s reasoning in his decision and considers that there were good grounds for a successful appeal to the Court of Session had it chosen to do so. It considers that it is important to emphasise that while minimising further cost to the taxpayer. 

The Scottish Government’s publication of the material in this case does not set any precedent for its position on releasing other information that is subject to legal professional privilege. Nor does the Scottish Information Commissioner’s decision represent a binding legal precedent.   

The Government will continue to apply the relevant exemptions, in line with the Freedom of Information (Scotland) Act 2002, and will follow the Scottish Ministerial Code in relation to legal advice. 

It will also closely monitor Scottish Information Commissioner decisions relating to the release of legally privileged information and will refer them to the Court of Session if it considers that appropriate in future. 

Welcoming the release of the information former SNP MP Joanna Cherry, a lawyer and a fierce critic of the Scottish Government, said: “This information is rather jumbled up & there are redactions which makes it difficult to follow but it is fascinating.

“On first reading there are three major takeaways. First, Scottish ministers made misleading statements to the Information Commissioner.

“Second, the appeal proceeded in the face of advice from counsel that the prospects of success were weak. And third the frequent redactions of the name of a civil servant whose actions appear to be central to the whole saga.”

On Wednesday, Scottish Information Commissioner David Hamilton published his own legal advice received in relation to a 2023 FOI decision which was appealed to the Court of Session by the Scottish Government.

Decision 004/2023 found that information relating to James Hamilton’s investigation into former first Minister Nicola Sturgeon under the Ministerial Code was held by the Scottish Government and should therefore be considered by it when responding to freedom of information (FOI) requests. The Court found in the Commissioner’s favour in its December 2023 ruling.

The Commissioner subsequently considered a request for copies of the legal advice received by the Scottish Government in relation to its decision to bring the 2023 appeal. This request had been refused by the Scottish Government. In a September 2024 decision, the Commissioner found that this legal advice should be disclosed

The decision requires that this information be disclosed by 26 October 2024. The Commissioner has received notification that the Scottish Government will comply with this decision.

The Commissioner’s own legal advice received in relation to this case is published below. 

The legal advice published below contains a small number of redactions of information. Where redactions occur, these relate to the name and job title of one official, and the supplier of the legal advice. Redactions have been made in order to prevent a breach of rights under the Data Protection Act 2018.  

Read the legal advice received by the Commissioner in relation to this case.

Scottish Information Commissioner David Hamilton’s statement in response to the Scottish Government’s disclosure of legal advice, complying with Decision 193/2024:

“I welcome Scottish Government complying with my direction, albeit at the 11th hour.

“We have now learnt that Scottish Ministers were advised that prospects of winning this appeal were “not strong” and indeed diminished as advice developed. It is therefore frustrating to know that my scarce resources were absorbed in an appeal that advisers pointed out was not the one to test the particular legal argument being deployed.

“The applicant’s request for information to which this appeal related was delayed for two and a half years which is wholly unacceptable and as a result the substantive information initially requested still remains under investigation.

“I will be corresponding with the Permanent Secretary to share these and further concerns.”