Data protection

​Education Scotland and GDPR - Our Commitment to Data Privacy

Education Scotland is committed to compliance with the EU General Data Protection Regulation (GDPR), which came into effect on May 25th 2018. The regulation contains the most significant changes to European data privacy legislation in the last 20 years. It is designed to give EU citizens more control over their data and seeks to unify a number of existing privacy and security laws under one comprehensive law. 

PDF file: Education Scotland Privacy Notice (885​ KB)

How to make a subject access request to Education Scotland

  1. Plan ahead and think about what information you need, it is important to make sure that you clearly ask for all the relevant information within your request.
  2. Download and complete the subject access request form* and send it to Please ensure that the information below is included as, without it, we will not be able to progress with your req​​uest:
    1. your full name, address, and contact telephone number
    2. details of the specific information that you require and any specific dates (for example, emails between date X and date Y, 2014.)

For more guidance please see the Scottish Government advice on how to request personal data

*Please note that you do not have to complete the subject access request form in order to make a request. You can make a request in writing, by post or email. However, completion of the form can assist in gathering all necessary information to aid the processing of your request.