Data protection

Education Scotland is committed to ensuring data privacy and compliance with UK General Data Protection Regulation (UK GDPR).

Education Scotland and GDPR

Education Scotland (ES) is an Executive Agency of the Scottish Government. Scottish Ministers are the Data Controller for personal information and are included as Data Controller under the Scottish Minsters notification to the Information Commissioners Office no. Z4857137

ES is committed to ensuring all personal information is collected and processed in accordance with data protection law which requires information to be:

  • processed fairly, lawfully and transparently;
  • collected for specified, explicit and legitimate purposes;
  • adequate, relevant and limited to what is necessary for the purpose of processing;
  • accurate and kept up to date;
  • kept in a form which permits identification for no longer than necessary; and
  • processed in a manner that ensures appropriate security.

The following document provides more information about how Education Scotland complies with data protection law:

PDF file: Education Scotland Privacy Notice (333 KB)

How to request personal data

Please note: Education Scotland do not hold any individual school or teaching records or data relating to individual’s qualifications. You should submit subject access requests to the relevant organisations direct.

You can request a copy of any personal data we hold about you by making a subject access request (SAR) under the General Data Protection Regulation, by:

  • completing the form attached below and returning it by email to our correspondence mailbox on SAR@educationscotland.gov.scot or at the Denholm House address below;
  • sending us a request via an email (rather than the form) to the mailbox on: SAR@educationscotland.gov.scot;
  • phoning us on our Education Scotland general enquiry line: 0131 244 4330 ; or
  • writing to us at:

    Education Scotland
    Governance and Information Team
    Denholm House
    Livingston
    EH54 6GA

You should also provide proof of identity by providing one of the following acceptable forms of ID:

  • a copy or scan of the photograph page of your passport
  • a copy or scan of your photo-card driving licence
  • a copy or scan of at least two utility bills/bank statements from the last six months detailing your name and current address

Please note the completion of this form is not compulsory but it is likely to make the process easier:

Word file: Subject Access Request form (33 KB)

What happens next

We will acknowledge your request in writing, or verbally if you prefer, and provide you with a reference number for your application. Once we are satisfied that you meet the criteria for disclosure of data under data protection law, and you have provided sufficient information, you should receive a response within one calendar month from the date that we accept your application for processing. To ensure that we are able to conduct adequate searches please ensure you tell us of all names we may hold any information about you under.