ICO investigates Police Scotland’s handling of access requests
Key Takeaways
- 01The ICO is investigating Police Scotland’s handling of subject access requests.
- 02The investigation concerns compliance with UK GDPR Articles 12 and 15 and section 45 of the Data Protection Act 2018.
- 03The provisions govern how individuals can obtain access to personal data held about them, including data processed for law-enforcement purposes.
- 04The ICO announced the investigation on 11 September 2026.
The UK Information Commissioner’s Office (ICO) is investigating whether Police Scotland complied with UK GDPR Articles 12 and 15 and section 45 of the Data Protection Act 2018 when responding to subject access requests.
Subject access requests allow people to ask an organisation for a copy of personal data it holds about them and related information. Article 12 concerns transparent handling of individuals’ rights requests, while Article 15 sets out the right of access. Section 45 of the Data Protection Act provides access rights in relation to personal data processed for law-enforcement purposes.
The investigation was announced on 11 September 2026. Its outcome could determine whether Police Scotland’s request-handling practices meet the applicable data-protection requirements, including the rules governing access to personal information.