Police Scotland fined £66k for extracting and sharing mobile phone data

The ICO fined and reprimanded Police Scotland after officers extracted the entire contents of a person’s mobile phone, retained substantial sensitive information irrelevant to the investigation, and shared unredacted material with an unauthorized third party, highlighting failures in data minimisation, secure digital-evidence handling, governance controls, and staff training.