Information Commissioner: People trying to access their own care records in Scotland are being let down

  • One old battered brown box was my life story of residential care – that was all I was worth.”    
  • Survey reveals nine in 10 people left with questions or concerns after receiving their care records.  
  • ICO launches ‘Better Records Together’ campaign with new resources to support both people with care experience and the organisations handling their records.

The Information Commissioner’s Office (ICO) has called for further improvements across local authorities in Scotland after warning that many people trying to access their own care records are being let down.  

Research from the ICO found that people are facing systemic and demoralising challenges when it comes to their care records.   

  • Over two thirds (71%) of people struggled with poor communication from the local authority and 69% said the process took longer than expected – with one person still waiting sixteen years later.  
  • When care records were received, over half (59%) did not receive enough information and nearly nine in 10 (87%) were left with questions or concerns.  

John Edwards, Information Commissioner, said: “This is so much more than a request for personal information. These are people fighting to access their own biography – their own identity – that is in the custody of an organisation.

“It is a brave and emotional step, especially from people who have already been let down by the care system in Scotland. But these requests are too often met with cold bureaucracy, long delays and pages of unexplained redactions, which can have devastating consequences.  

“This current picture is unacceptable – but there are many people who play a role in creating better records and better access. As the data protection regulator, we can bring clarity to how these roles work together to thread people’s stories.

“We can build a clear pathway by ensuring everyone has the tools they need – equipping organisations with the certainty and skills to handle requests with care and compassion, and empowering people with the confidence and support to advocate for their own rights. 

“Real change must come from the top – so today I am calling on local authority leaders across Scotland to take action. We know frontline staff want to get this right but are struggling with lack of resource and guidance. Improving this process starts at the beginning – when a child enters the care system, their information should be recorded with their rights in mind, knowing that they may request it later. This will reduce the administrative burden and keep the person at the very heart of the process, so future generations do not face the same struggle.”   

Jackie McCartney, care experienced campaigner and Ambassador for the Rees Foundation, said: “I can remember the social worker arriving with my care records – she carried one old battered brown box. That was all I was worth. That box was my life story of residential care, with sixteen years of my life inside. 

“She told me not to worry – ‘there’s not a lot in there’ – but I wanted to talk to her. Because this total stranger knew more about my life than I did. She had read my story before I had, and decided what I could or could not see. These were my puzzle pieces of how and why I had become a child in care. 

“I opened my box and looked inside. I can still feel the pain and disappointment. My records were not even in date order, with whole years of my life missing and no medical records. There were so many blank pages with nothing on, and so much information redacted. 

“The whole process must have more compassion and care. I want organisations to see this is more than data, files and words on a page – this is real people’s lives and stories.”  

John-george Nicholson said: “We understand who we are through stories. The ones we tell ourselves and the ones others think and write about us. Growing up in care, the state became my storyteller, taking on the role most people’s families play. My files hold many of those stories, yet for years they seemed to forget who I was. 

“I first accessed my records at 22 – 126 pages. Almost 25 years later, I asked again and received more than 800. They are tough and often traumatic to read (when I first received them in the post, they came without warning), but they are also a kind of treasure chest: fragments of memory, windows into a past I’d tried to forget. At first, they broke me. But over time, they became maps, continually changing as I age – helping me understand, make sense of the damage, navigate the past and future, and see that it wasn’t my fault. I was just a kid in a broken system. 

“But the system is still broken, and record-keeping is a critical element of this – our storytelling. Too often the whole child is lost in forms and reports, their voice minimised or unheard. That has to change. Every child in care deserves records that see them, protect them, and help them heal and thrive.” 

Better Records Together  

The ICO has launched its ‘Better Records Together’ campaign by publishing a suite of practical resources to help tackle the current issues. The campaign includes:  

  • new standards for organisations providing clarity on how to handle requests with care, as well as good practice measures to better support people from the moment they enter the care system. 
  • clear advice for people requesting their records to help them to navigate the process and access support.  
  • UK-wide supervision pilot running across 2025/26, monitoring the performance of 19 organisations to drive improvements.

In a letter sent to senior leaders, the Information Commissioner has made clear that if improvements are not made, organisations may face regulatory action.  

The ICO has been proactively engaging with all 32 local authorities in Scotland after receiving complaints of long delays when care records were requested. Many local authorities have seen increases in requests over the last few years in relation to Scotland’s Redress Scheme, where people who suffered abuse while in care can apply for redress using supporting documents such as care records.  

Some improvements have already been made across many local authorities in Scotland following the ICO’s engagement, but these must be sustained and further improvements made.  

Earlier this year, the ICO reprimand both Glasgow City Council and City of Edinburgh Council for repeatedly failing to respond within the legal timeframe. It also fined Scottish charity Birthlink £18,000 after it destroyed thousands of records, including handwritten letters and photographs.  

Support for the campaign  

The regulator is working with charities, advocacy groups and other third parties to ensure their support reaches those who need them most. 

Nicola Killean, Children and Young People’s Commissioner Scotland, said: “The Information Commissioner’s Office’s campaign to support improved access to records by people with care experience is an important one. It is vital that children with care experience have access to their own records, in a way that is straightforward and easy for them to navigate.    

“Children who have care experience have the same rights as every other child under the United Nations Convention on the Rights of the Child (UNCRC), but they also have extra safeguards. If a child can’t live with their family, this includes having the right to special protection and help.   

“Care experienced children and young people have been clear over many years about the importance of proper recording of their time in care. It can help them come to terms with their experience, understand why decisions may have been made, and give them a sense of agency over their own lives. It supports children’s rights to identity, rights to a fair hearing and due process, and rights to respect for private and family life.”  

Flora Henderson, Director, In Care Survivors Alliance, said: “In Care Survivors Alliance is heartened to see the publication of Information Commissioner’s Office latest guidance around care records.

This work is vital work in ensuring that people who are care experienced can access their records in a timely, supported and transparent way. We are aware how difficult information access requests can be for individuals, especially when lack of support can create a significant negative impact.

“As such, ICO’s guidance is of considerable value. We encourage all those who hold, create or respond to requests for care records to join the collective effort in empowering people to exercise their rights and access their records.” 

Mary Glasgow, Chief Executive, Children First, said: “Children First supports the ‘Better Records Together’ campaign because people must be able to understand their past in a way that feels meaningful.

“For many care experienced people records are the only way to fill the gaps in their history and make sense of who they are. That’s why we prioritise recording children and families’ hopes and dreams, as well as meetings and support.

“We make sure that our historical records are as easy to access as possible. Records aren’t just paperwork, they are the threads that weave together the story of your life.”

A spokesperson for Who Cares? Scotland, said: “We welcome the Better Records Together project and are excited for the improvements to accessing records for Care Experienced people it will bring. 

“We often hear from our members about the difficult and sometimes traumatic experience it can be to get access to their records and then read them. That’s why we’re proud to support the Information Commissioner’s Office with this new phase of their project.” 

Visit the ICO’s Better Records Together webpage to access the resources and find out more about its work to support both people with care experience and the organisations that handle their records.  

ICO takes action to improve access to personal information from local authorities across Scotland

  • Reprimands issued to Glasgow City Council and City of Edinburgh Council for failing to respond to requests for personal information on time   
  • Action follows ICO engagement with local authorities across Scotland to improve right of access, including for people with care experience and those applying for redress after suffering abuse while in care   
  • Those who were let down in the past are being let down again, this time by poor SAR compliance.” 

The Information Commissioner’s Office (ICO) is taking action to tackle significant delays for people who are trying to access copies of their personal information held by local authorities across Scotland.  

Under data protection law, people have the right to ask an organisation if it holds their personal information and receive a copy of any personal information held within a month, unless an extension is applied – this is known as a subject access request (SAR).  

The regulator has now reprimanded both Glasgow City Council and City of Edinburgh Council for repeatedly failing to respond to SARs within the legal timeframe, leading to a significant backlog of requests.  

The reprimands follow the ICO’s proactive engagement with all 32 local authorities in Scotland after it became aware of delays in responses to SARs, amounting to years in some cases.  

Many local authorities have seen an increase in SARs received, many in relation to the Redress Scotland scheme where people who suffered abuse while in care can apply for redress using supporting documents such as their care records.  

Jenny Brotchie, Acting Head of Scottish Affairs at the ICO, said: “Those who were let down in the past are being let down again, this time by poor SAR compliance.

“We have heard how undue delays and lack of communication from local authorities can cause further distress for people, including those with care experience and those trying to claim redress in Scotland.

“Local authorities must get this right despite the rising numbers of requests, which is why we have been offering support and monitoring those with poor compliance until we are satisfied that improvements have been made.”  

Following the ICO’s scrutiny and support to put action plans in place, many local authorities have significantly reduced their backlog of requests and improved their response times.  

Despite a 67% overall increase in the total number of SARs to local authorities in Scotland between 2021 and 2024, 75% of local authorities improved their SAR compliance, with 13 local authorities reporting a compliance rate of 90% in 2023/24. 

However, the regulator launched investigations into two local authorities, Glasgow City Council and City of Edinburgh Council, after it did not see any tangible improvements over 12 months.  

The ICO’s recent compulsory audit of Glasgow City Council found that the council has good policies and procedures in place to handle SARs. However, lack of resource and budget remains an issue, with the council still unable to respond to many SARs within the legal timeframe.   

Following its reprimand, City of Edinburgh Council has now reported some improvement in its response times.   

Jenny Brotchie added: “While I’m pleased to see significant improvements from most of the local authorities that we engaged with, SAR compliance in Scotland remains a concern and we must ensure people can exercise their information rights effectively and without further harm.

“We expect all local authorities to have sufficient resources in place to handle the volume and complexity of SARs, and to keep people updated on the progress of their request.  

“We are taking a proportionate approach to monitoring local authorities, but these reprimands show that we will not hesitate to take enforcement action where necessary.”  

Looking forward, the ICO continues to engage with local authorities and other key stakeholders to drive further improvements and ensure that people can access their own personal information. 

The ICO has committed to improving the support it provides to both people who grew up in the care system across the UK and the organisations that hold their information. It has been gathering evidence of the challenges facing both people and organisations when it comes to accessing care records and will share its findings and next steps over the coming months.  

Read more detail about the ICO’s work with local authorities in Scotland here

Find out more about your information rights here, including the right of access.  

Scottish Government releases legal advice at last – but questions remain

Scottish Government statement on publication of legal advice relating to court case against the Scottish Information Commissioner:

On 9 September 2024 the Scottish Information Commissioner issued a decision notice (193/2024) requiring the Scottish Ministers to disclose legal advice in connection with its Court of Session case against the Scottish Information Commissioner (case XA10/23).  

The information had been withheld by the Scottish Government in response to a Freedom of Information request as it considered that the Government should have been able to receive the advice in confidence under “legal professional privilege” and that the public interest was not sufficient to override this exemption. 

The Commissioner, in responding to an appeal from the requester, took a different view – that considerations favouring release in this case outweighed those for maintaining legal professional privilege.   

That decision of the Commissioner was carefully considered by The Scottish Government and it was decided to release the information. 

The material being disclosed outlines that Scottish Ministers took decisions informed by appropriate analysis of the legal considerations and on an important point of principle which was acknowledged as addressing a ‘sharp and important question of statutory interpretation’ in the Court of Session’s judgement.  

The released documentation confirms that Ministers had been advised that there were reasonable prospects of success in taking an appeal. The documentation also shows that Ministers had discussed the legal advice with the Lord Advocate, the most senior government legal adviser, who was content that there were proper grounds for appealing and who agreed with Ministers that the decision should be appealed. 

There is a longstanding convention, observed by Scottish, UK and other governments, that government does not disclose legal advice except in exceptional circumstances.  This ensures that government can access full, frank and confidential legal advice, just as other organisations and individuals are able to.  The ability to access such advice is central to the effective conduct of government in the public interest.   

The Scottish Government disagrees with the Commissioner’s reasoning in his decision and considers that there were good grounds for a successful appeal to the Court of Session had it chosen to do so. It considers that it is important to emphasise that while minimising further cost to the taxpayer. 

The Scottish Government’s publication of the material in this case does not set any precedent for its position on releasing other information that is subject to legal professional privilege. Nor does the Scottish Information Commissioner’s decision represent a binding legal precedent.   

The Government will continue to apply the relevant exemptions, in line with the Freedom of Information (Scotland) Act 2002, and will follow the Scottish Ministerial Code in relation to legal advice. 

It will also closely monitor Scottish Information Commissioner decisions relating to the release of legally privileged information and will refer them to the Court of Session if it considers that appropriate in future. 

Welcoming the release of the information former SNP MP Joanna Cherry, a lawyer and a fierce critic of the Scottish Government, said: “This information is rather jumbled up & there are redactions which makes it difficult to follow but it is fascinating.

“On first reading there are three major takeaways. First, Scottish ministers made misleading statements to the Information Commissioner.

“Second, the appeal proceeded in the face of advice from counsel that the prospects of success were weak. And third the frequent redactions of the name of a civil servant whose actions appear to be central to the whole saga.”

On Wednesday, Scottish Information Commissioner David Hamilton published his own legal advice received in relation to a 2023 FOI decision which was appealed to the Court of Session by the Scottish Government.

Decision 004/2023 found that information relating to James Hamilton’s investigation into former first Minister Nicola Sturgeon under the Ministerial Code was held by the Scottish Government and should therefore be considered by it when responding to freedom of information (FOI) requests. The Court found in the Commissioner’s favour in its December 2023 ruling.

The Commissioner subsequently considered a request for copies of the legal advice received by the Scottish Government in relation to its decision to bring the 2023 appeal. This request had been refused by the Scottish Government. In a September 2024 decision, the Commissioner found that this legal advice should be disclosed

The decision requires that this information be disclosed by 26 October 2024. The Commissioner has received notification that the Scottish Government will comply with this decision.

The Commissioner’s own legal advice received in relation to this case is published below. 

The legal advice published below contains a small number of redactions of information. Where redactions occur, these relate to the name and job title of one official, and the supplier of the legal advice. Redactions have been made in order to prevent a breach of rights under the Data Protection Act 2018.  

Read the legal advice received by the Commissioner in relation to this case.

Scottish Information Commissioner David Hamilton’s statement in response to the Scottish Government’s disclosure of legal advice, complying with Decision 193/2024:

“I welcome Scottish Government complying with my direction, albeit at the 11th hour.

“We have now learnt that Scottish Ministers were advised that prospects of winning this appeal were “not strong” and indeed diminished as advice developed. It is therefore frustrating to know that my scarce resources were absorbed in an appeal that advisers pointed out was not the one to test the particular legal argument being deployed.

“The applicant’s request for information to which this appeal related was delayed for two and a half years which is wholly unacceptable and as a result the substantive information initially requested still remains under investigation.

“I will be corresponding with the Permanent Secretary to share these and further concerns.”