Child abuse victims let down by ‘significant backlogs’ in information requests, ICO finds

Two Scottish councils have repeatedly failed to comply with personal information requests within the legal timeframe, the Information Commissioner’s Office (ICO) has said.

Glasgow City Council and City of Edinburgh Council have been reprimanded for “poor” compliance with subject access requests (SAR), with some people waiting years for a response.

Currently, under data protection law, people are entitled to ask organisations for any personal information they hold on them and receive a copy within a month, unless an exception is granted.

Over the last five years, local authorities have seen a significant increase in SARs, rising by 67 per cent between 2021 and 2024. It is claimed the surge is related to the Redress Scotland scheme. Launched in 2021, the initiative offers financial compensation to those who were abused while in care before December 2004, but applicants require supporting documents to complete their application. 

“Those who were let down in the past are being let down again, this time by poor SAR compliance”, Jenny Brotchie head of Scottish Affairs at the ICO, said.

While a majority of councils improved their SAR compliance after being prompted by the ICO more than a year ago, Glasgow and Edinburgh continued to fail to fix the issue, leading to a “significant backlog of requests”. Consequently, the data regulator launched an investigation into both councils.

Brotchie added: “We have heard how undue delays and lack of communication from local authorities can cause further distress for people, including those with care experience and those trying to claim redress in Scotland. Local authorities must get this right despite the rising numbers of requests, which is why we have been offering support and monitoring those with poor compliance until we are satisfied that improvements have been made.”  

The ICO’s recent audit of Glasgow City Council revealed budget and resource pressures were preventing the local authority from complying with requests within the legal timeline.

Meanwhile, The City of Edinburgh Council has reported some improvement in its response times following the reprimand, the ICO said.  

A Glasgow City Council spokesman said the Glasgow Health and Social Care Partnership has recruited "additional staff" to deal with the backlog. The council will also invest in technology "to support and speed up the redaction process".

He said: “Since the launch of the Scottish Government’s Redress scheme, the city has faced a 350 per cent increase in Subject Access Requests. Many of these cases are extremely complex, requiring staff to locate and review files running to thousands of pages.

“Despite this, we are managing to respond within the statutory timescales to roughly half of the requests we receive each month.

“The council will continue to work with the commissioner’s office to respond positively to these findings. This includes engaging with the Redress Scheme to try and streamline administrative processes; allowing the council to support applicants without the necessity of a formal Subject Access Request."

Holyrood has contacted The City of Edinburgh Council for comment.