Data protection

​Education Scotland and GDPR - Our Commitment to Data Privacy

Education Scotland is committed to compliance with the EU General Data Protection Regulation (GDPR), which came into effect on May 25th 2018. The regulation contains the most significant changes to European data privacy legislation in the last 20 years. It is designed to give EU citizens more control over their data and seeks to unify a number of existing privacy and security laws under one comprehensive law.

PDF file: Education Scotland Privacy Notice (885​ KB)

How to request personal data

You can request a copy of any personal data we hold about you by making a subject access request (SAR) under the General Data Protection Regulation, by:

  • completing the form attached below and returning it by email to our FOI/SAR/Complaints mailbox on SAR@educationscotland.gov.scot or at the Denholm House address below;
  • sending us a request via an email (rather than the form) to the mailbox on:  SAR@educationscotland.gov.scot ;
  • phoning us on our Education Scotland general enquiry line: 0131 244 4330 ; or
  • writing to us at:

    Education Scotland
    Governance and Information Team
    Denholm House
    Livingston
    EH54 6GA

You should also provide proof of identity - acceptable forms of ID include:

  • copy or scan of the photograph page of your passport or
  • a copy or scan of your photo-card driving licence or
  • a copy or scan of at least two utility bills/bank statements from the last six months detailing your name and current address.

Please note the completion of this form is not compulsory but it is likely to make the process easier:

Word file: Subject Access Request form (33 KB)

What happens next

We will acknowledge your request in writing, or verbally if you prefer, and provide you with a reference number for your application. Once we are satisfied that you meet the criteria for disclosure of data under data protection law, and you have provided sufficient information, you should receive a response within one calendar month from the date that we accept your application for processing. To ensure that we are able to conduct adequate searches please ensure you tell us of all names we may hold any information about you under.