75,299 Euro fine against Police Service of Scotland
Police force unlawfully disclosed victim's mobile phone data.

The ICO fined the Police Service of Scotland GBP 66,000 and issued a formal reprimand following a serious data protection incident. During a criminal investigation, Police Scotland conducted a full extraction of a complainant's mobile phone despite only requiring specific messages, and subsequently disclosed the extracted personal data without authorisation to the accused party during an internal misconduct investigation. Additionally, Police Scotland failed to notify the ICO of the personal data breach within the required 72 hours, reporting it 13 days after becoming aware of it. The original fine was reduced by 50% in recognition of the financial constraints facing public sector bodies.