Report Summary
Issued 24 July 2025, this FOI response advises that the Scottish Police Authority has no jurisdiction in terms of governance of Police Scotland's compliance with GDPR. Advice is provided that GDPR legislation is regulated by the Information Commissioners Office (ICO).
To access the full document please open the PDF document above.
To view as accessible content please use the sections below. (Note that some tables and appendixes are not available as accessible content).
Response
The Scottish Police Authority has considered your request under the Freedom of Information (Scotland) Act (FOISA).
The Scottish Police Authority has no jurisdiction in respect of governance or oversight for compliance with GDPR.
The Chief Constable of Police Scotland is a Data Controller in terms of the UK Data Protection legislation. The legislation is regulated by the Information Commissioners Office (ICO). The Commissioner has the statutory powers to compel disclosure, issue fines or take court action if they believe that a Controller has failed to comply with the legislation.
Further information can be found at UK GDPR guidance and resources
