Disclosure duties
Freedom of information in Scotland (FOISA)
Short answer
- First response
- By the twentieth working day after receipt, section 10 1
- Records with the Keeper
- Up to 30 working days 6
- Review request
- Within 40 working days 7
- Review reply
- Within 20 working days 7
- Appeal to the Commissioner
- Within 6 months of the review response 8
Publication schemes
Section 23 of FOISA requires every Scottish public authority to adopt and maintain a publication scheme approved by the Commissioner, to publish information under it, and to review it from time to time 4. The scheme must specify the classes of information the authority publishes or intends to publish, how it does so, and whether the information is free or charged for 4.
When adopting or reviewing its scheme, an authority must have regard to the public interest in access to its information and in the publication of reasons for its decisions 4. The Commissioner can set an expiry date on an approval and can revoke an approval with effect from six months after notice, giving reasons 4.
The time limits
The Commissioner says working days run Monday to Friday and exclude bank holidays. Where a request goes by post, it advises allowing three days for delivery each way 6. If the authority asks for clarification, the 20 working days start once the details are given 6.
| Step | Time limit | Source |
|---|---|---|
| Authority answers a request | Promptly and by the twentieth working day after receipt 1 | FOISA section 10 1 |
| Request for records held by the Keeper of the Records of Scotland | Up to 30 working days 6 | Commissioner guidance 6 |
| Fees notice issued | Clock paused until the fee is paid 6 | FOISA section 10(3) 1 |
| Applicant asks for a review | No later than 40 working days after the response, or after the 20 day period if there was no response 7 | FOISA section 20(5) 3 |
| Authority answers the review | Within 20 working days 7 | Commissioner guidance 7 |
| Appeal to the Commissioner | Within 6 months of receiving, or when the applicant should have received, the review response 8 | Commissioner guidance 8 |
Not held and neither confirm nor deny
Section 17 applies where an authority receives a request it would have to answer if it held the information, but it does not hold it. The authority must give the applicant written notice that it does not hold the information within the time allowed by section 10 2.
Section 18 is the Scottish neither confirm nor deny rule. Where the information would be exempt under any of sections 28 to 35, 38, 39(1) or 41, and the authority considers that revealing whether it exists or is held would be contrary to the public interest, it may give a refusal notice whether or not the information exists 5. The ordinary requirement to disclose that the information is held does not apply to that notice 5.
A not held notice can be reviewed. Section 20 lists a section 17(1) notice among the responses that start the 40 working day period for a review 3.
Review and appeal
- A requirement for review must be in writing or in another permanent form, and must specify the request and the matter the applicant is unhappy about 3.
- An authority may accept a late review request if it considers it appropriate 3.
- The Commissioner cannot act until a review has been requested and 20 working days have been allowed for the reply 8.
- The Commissioner reported that cases were taking up to nine months to be allocated for investigation, after an unprecedented number of appeals since the start of 2025/26 8.
- Under section 48 the Commissioner cannot investigate requests handled by the Lord Advocate, the Crown Office or a Procurator Fiscal, among others 8.
Offence and records management
Section 65 makes it an offence to alter, deface, block, erase, destroy or conceal a record held by the authority with the intention of preventing disclosure, after a request has been made by an applicant entitled to the information 9. The offence applies to the authority and to anyone employed by it, an officer of it or subject to its direction. The penalty on summary conviction is a fine not exceeding level 5 on the standard scale 9.
Records management in Scotland has its own statute. The Public Records (Scotland) Act 2011 requires each authority it covers to prepare a records management plan, submit it to the Keeper for agreement, and manage its public records in line with the agreed plan 10.
Common questions
How long does a Scottish public authority have to reply to an FOI request?
Promptly and in any event by the twentieth working day after receipt 1.
How long do I have to ask for a review in Scotland?
40 working days after the response, or after the end of the 20 working day period if there was no response 7.
When can I appeal to the Scottish Information Commissioner?
After asking for a review, and within 6 months of when you received or should have received the review response 8.
Does a Scottish authority have to tell me if it does not hold information?
Yes. Section 17 requires written notice that the information is not held, within the section 10 time limit 2.
Is destroying a record to stop disclosure an offence in Scotland?
Yes. Section 65 of FOISA sets a fine of up to level 5 on summary conviction 9.
Rules and charges change. Check the official source linked on this page before you pay or travel. Spotted an error? Email hello@publicrecordgaps.com.
Sources
- legislation.gov.uk: Freedom of Information (Scotland) Act 2002, section 10
- legislation.gov.uk: Freedom of Information (Scotland) Act 2002, section 17, Notice that information is not held
- legislation.gov.uk: Freedom of Information (Scotland) Act 2002, section 20, Requirement for review of refusal etc.
- legislation.gov.uk: Freedom of Information (Scotland) Act 2002, section 23, Publication schemes
- legislation.gov.uk: Freedom of Information (Scotland) Act 2002, section 18
- Scottish Information Commissioner: How long will I have to wait?
- Scottish Information Commissioner: Asking the authority for a review
- Scottish Information Commissioner: Appeal to the Commissioner
- legislation.gov.uk: Freedom of Information (Scotland) Act 2002, section 65, Offence of altering etc. records with intent to prevent disclosure
- legislation.gov.uk: Public Records (Scotland) Act 2011, section 1, Records management plans
Related
- Information not held: what the reply means
What a public body means when it says it does not hold information, how searches are judged, and how rules differ in the UK, US, Canada, Ireland and EU.
- Neither confirm nor deny: how the response works
Why a public body may refuse to say whether it holds a record, which UK exemptions allow it, and how Canada and the US handle the same question.
- FOI reviews and appeals compared
Time limits for internal review, regulator complaints and court appeals after an FOI refusal in Scotland, Ireland, Canada, India and others.
- Proactive disclosure duties compared
What public bodies must publish without a request under UK FOI section 19, India RTI section 4, US FOIA reading room rules and EU Regulation 1049/2001.