13.2 Criminal Records, Child Protection and Data Sharing

How would information needed for public safety and child protection be shared?

Formal data-sharing and cooperation agreements would be put in place so that criminal records, child protection information, and other essential safeguarding data continue to flow between Scottish and rUK authorities. Police, social work, and justice agencies would retain the ability to check and share relevant information for legitimate public-protection purposes. Existing UK-wide systems would be replaced by bilateral or multilateral arrangements that preserve operational effectiveness while respecting the new constitutional boundary. Public safety and the protection of children would take priority over administrative purity.

Criminal records checks, child protection information, and related safeguarding data are used every day to protect the public and to protect children. Employers, regulators, police, social work, and courts rely on knowing whether a person has relevant convictions or is the subject of protection concerns. Much of that information currently flows through UK-wide systems. Independence ends the automatic operation of those systems across the new border. Without effective agreements to replace them, gaps would open in the protection of the public and of children.

That outcome is unacceptable. The framework therefore treats continuity of essential safeguarding data flows as a non-negotiable operational requirement of the transition and of the long-term relationship with the rest of the UK. The main design choice is formal bilateral (or multilateral) data-sharing and cooperation agreements that replace UK-wide systems while preserving usable, timely access for legitimate protective purposes. The main constraints are dependence on UK agreement for reciprocal flows, the technical and legal work required to build new gateways, data-protection and human-rights limits on both sides, and the absolute requirement that there is no operational gap on Independence Day. Public safety and the protection of children take priority over administrative neatness.

Criminal records checks, child protection information, and related safeguarding data are used every day to protect the public and to protect children. Employers, regulators, police, social workers, and courts rely on knowing whether a person has relevant convictions or is the subject of protection concerns. Much of that information currently flows through UK-wide systems. Independence ends the automatic operation of those systems across the new border. Without effective agreements to replace them, gaps would open in public and child protection. That outcome is unacceptable.

Independence creates a constitutional boundary. It does not create a safe space for offenders or a barrier behind which child-protection concerns can disappear. Criminal records and safeguarding information are protective tools. When those tools stop working across a border that people still cross freely under a Common Travel Area-style arrangement, the risk is transferred to the public and to children. The design starts from that risk and works backwards to the institutional arrangements needed to manage it. Sovereignty over Scottish policing, justice, and social work is retained. Binding cooperation is required where the information that makes those functions effective sits on the other side of the border or must be checked against records held there.

This section sets out the position. Formal data-sharing and cooperation agreements would ensure that criminal records, child protection information, and other essential safeguarding data continue to flow between Scottish and rUK authorities. Police, social work, and justice agencies would retain the ability to check and share relevant information for legitimate public-protection purposes. Existing UK-wide systems would be replaced by bilateral or multilateral arrangements that preserve operational effectiveness while respecting the new constitutional boundary. Public safety and the protection of children would take priority over administrative purity. The information that protects people keeps moving; the border does not become a blindfold. That is the safeguarding data settlement.

Current Position and Legal/Institutional Baseline

Criminal records, child protection information, and related safeguarding data currently move through UK-wide systems that support employment vetting in sensitive roles, policing, court proceedings, social work interventions, and protecting children and vulnerable adults. Police, social work, and justice agencies rely on timely access to conviction information and protection concerns. Regulatory bodies and employers use the same infrastructure for roles that involve trust with children or vulnerable groups. Data-protection and human-rights frameworks already constrain what may be shared and for what purposes; those constraints would continue and would shape the design of any successor arrangements. The current systems operate as if within a single state. Independence ends that automatic operation across the new border.

The institutional baseline includes existing police, social work, and justice agencies on both sides; residual UK-wide technical and legal channels that would cease to function automatically; and the practical reality that people continue to move under free-movement arrangements while protective information must still reach the agencies that need it. The task is to replace UK-wide systems with formal bilateral or multilateral data-sharing and cooperation agreements that create lawful, purpose-limited gateways; to preserve usable, timely access for genuine protective purposes; to ensure there is no operational gap on Independence Day through dual-running or equivalent measures; and to hold public safety and the protection of children as the explicit priority when design choices must be made. International practice in cross-border police and child-protection cooperation between sovereign states, including arrangements that already exist between the UK and Ireland and in other European contexts, confirms that formal agreements, purpose limitation, safeguards, and operational protocols are the operable instruments; allowing systems to stop without replacement, or assuming residual automatic continuity, is not.

Mechanism and Delivery

Formal agreements would be established between Scottish and rUK authorities to cover criminal records — access to conviction and related information for legitimate purposes (employment vetting in sensitive roles, policing, court proceedings, and other lawful uses); child protection information — sharing of information necessary to protect children from harm, including across cases that span the border; and other essential safeguarding data — information required for the protection of vulnerable adults and for related public-protection functions. These agreements would define what may be shared, with whom, for what purposes, under what safeguards, and with what oversight. They would create lawful gateways so that agencies can act without operating in a legal grey area. Without clear legal gateways, officers and social workers either share unlawfully or refuse to share, leaving risk unmanaged. Both outcomes are failures. The agreements are the mechanism that makes lawful, effective sharing possible.

Police, social work, and justice agencies would retain the practical ability to check criminal records and relevant intelligence for legitimate public-protection purposes; share child protection and safeguarding information when children or vulnerable people are at risk; support investigations, prosecutions, and court processes that involve cross-border elements; and maintain the integrity of vetting for roles that involve trust with children or vulnerable groups. Operational effectiveness is the test. Agreements that look tidy on paper but leave officers, social workers, or courts unable to obtain necessary information in time would fail the test. The design would prioritise usable, timely flows for genuine protection purposes. Technical interfaces, response times, and escalation routes for urgent cases would be specified so that the system works under operational pressure, not only in theory.

Existing UK-wide systems would be replaced by bilateral (or, where appropriate, multilateral) arrangements between Scotland and the rest of the UK. The constitutional boundary is real; data would no longer move as if within a single state. The replacement arrangements would preserve the protective effect of the previous systems while respecting that boundary and the data-protection and human-rights frameworks that apply on each side. Transition planning would ensure no gap: the new gateways and technical links would be ready before the old ones cease to operate across the border, or dual-running would cover the handover period. Dual-running is a deliberate design choice for high-risk interfaces; it costs more in the short term and reduces the chance of a protective failure on day one.

Data sharing for public protection must remain bounded by law. Agreements would specify lawful purposes for which information may be requested and disclosed; proportionality and necessity requirements; retention, security, and onward-sharing limits; and, where appropriate, oversight and redress mechanisms. Public safety does not require unrestricted access to all information; it requires reliable access to the right information for defined protective purposes. The agreements would hold that line. Safeguards are not an obstacle to protection; they are the condition of its legitimacy and sustainability. Over-broad sharing invites legal challenge and public distrust; under-sharing leaves children and the public exposed. The design aims at the narrow, reliable channel that serves genuine protective need.

Where design choices must be made, public safety and the protection of children would take priority over administrative neatness or institutional convenience. Gaps in criminal-record or child-protection information create real-world risk. The framework accepts the residual complexity of cross-border data sharing to avoid that risk. Administrative purity that leaves children or the public less protected is the wrong trade-off. This priority is stated explicitly because it will be tested. When cost, technical difficulty, or negotiating friction push toward simpler but less protective arrangements, the stated priority provides the decision criterion—protection first; neatness second.

The legal basis would be formal data-sharing and cooperation agreements between Scottish and rUK authorities, underpinned by Scottish legislation confirming the powers of Scottish police, social work, and justice agencies to request and disclose information for defined protective purposes, and by reciprocal legal foundations on the rUK side. These agreements would sit alongside data-protection law on both sides and would be designed to be compatible with it. Oversight would be provided through existing or adapted independent mechanisms so that the gateways remain lawful and accountable. No residual automatic UK-wide system would continue; the new boundary requires new legal instruments. The instruments are bilateral (or multilateral) agreements plus supporting domestic legislation.

Sequencing prioritises avoiding a gap. Technical and legal work on the new gateways would begin early in the transition period. Dual-running of critical interfaces would be used where necessary so that the old channels continue until the new ones are proven. Urgent-case protocols would be agreed and tested before Independence Day. Vetting systems for roles involving children and vulnerable groups would be treated as critical path. Public and professional guidance would be issued so that employers, regulators, and practitioners know how to make lawful requests under the new arrangements. The sequence is driven by risk: the highest-risk flows are secured first.

Continuity Design

Continuity of essential safeguarding data flows is a non-negotiable operational requirement. Dual-running of critical interfaces, or equivalent measures that keep protective channels open until the new gateways are proven, ensures no gap on Independence Day. Agreements that prioritise usable, timely flows for genuine protective purposes, with specified response times and escalation routes for urgent cases, secure continuity of operational effectiveness for police, social work, and justice agencies. Purpose-limited, proportionate agreements with clear oversight secure continuity of lawful purpose and safeguards. Continuity of vetting for roles involving children and vulnerable groups is treated as a critical path. Clear guidance on how to make lawful requests under the new arrangements supports continuity of public and professional understanding.

The design therefore treats an operational gap in criminal-record or child-protection information as a failure, treats public safety and the protection of children as the explicit priority when trade-offs arise, and treats dual-running and tested urgent protocols as the practical means of bridging the constitutional change. The information that protects people keeps moving; the border does not become a blindfold.

Constraints and Trade-offs

Legal constraints

The legal basis is formal data-sharing and cooperation agreements between Scottish and rUK authorities, underpinned by Scottish legislation confirming the powers of Scottish police, social work, and justice agencies to request and disclose information for defined protective purposes, and by reciprocal legal foundations on the rUK side. These agreements must sit alongside data-protection and human-rights frameworks on both sides and must be compatible with them. Independent oversight is required to keep the gateways lawful and accountable. Legal design must create clear gateways that avoid both unlawful sharing and protective refusal. No residual automatic UK-wide system continues; the new boundary requires new instruments. Purpose limitation, proportionality, retention and security limits, and redress mechanisms are design requirements, not optional extras.

Fiscal constraints

Building and running secure data interfaces, dual-running during transition, and ongoing operational costs have a price. The Scottish budget pays for Scottish systems, with a negotiated share for joint arrangements; the costs fall within the fiscal rules. No one claims cost-free continuity. The alternative—gaps in protective information—turns cost into harm. The framework treats the expenditure as a necessary cost of a responsible border, not as an optional programme. Under the opening fiscal position, these costs must be prioritised against other claims; the stated priority for public safety and child protection provides the criterion when choices must be made. Under-estimating dual-running or interface costs would recreate the gap the design is intended to close.

Operational constraints

Technical capacity is required to build and secure the new interfaces. Dual-running of critical channels through the handover period is operationally demanding and must be planned early. Urgent-case protocols must be agreed, tested, and usable under pressure. Response times and escalation routes must work in practice, not only on paper. Administrative complexity can cause practitioners to under-use the system unless request routes are simple and guidance is clear. Operational sequencing that prioritises the highest-risk flows, dual-running where required, and tested protocols before Independence Day reduces the risk of a protective failure. Under-estimating technical or operational complexity would leave the legal gateways under-used or delayed.

Political constraints

Reciprocal access cannot be imposed. Full two-way operational effectiveness depends on UK agreement and is therefore a high negotiation priority. Domestic political management must present continuity of safeguarding data as a non-negotiable protective requirement, must prioritise the highest-risk flows even in a constrained negotiating environment, and must resist administrative simplifications that open protective gaps. Adversarial relations would complicate reciprocity; they would not prevent Scotland from organising its own systems, offering reciprocity, and maintaining liaison channels. Contingency planning includes clear Scottish-side rules and prioritisation of the most critical protective flows. Public safety and the protection of children remain the stated priority when cost, technical difficulty, or negotiating friction push toward less protective arrangements.

Time constraints

Technical and legal work on the new gateways must begin early in the transition period. Dual-running of critical interfaces must be in place so that the old channels continue until the new ones are proven. Urgent-case protocols must be agreed and tested before Independence Day. Vetting systems for roles involving children and vulnerable groups are on the critical path. Public and professional guidance must be issued in time for employers, regulators, and practitioners to adapt. Delay in technical work or dual-running creates the operational gap the design treats as unacceptable. Delay in tested protocols leaves urgent cases without reliable routes. Sequencing driven by risk — highest-risk flows first — is the operable path; last-minute cut-over without dual-running is not.

Consistency with the Wider Framework

Criminal records, child protection, and safeguarding data sharing sit alongside continuity of policing and the justice system; cross-border cooperation on serious crime and intelligence; free movement of people and the need for effective public protection within an open movement area; data-protection and human-rights frameworks; and the overall continuity-first approach to essential protective functions. Sovereignty over justice and policing is paired with binding cooperation where protection depends on information that sits on the other side of the border. There is no tension with free movement of people: open movement without protective information flows would be irresponsible; the data agreements are part of what makes open movement sustainable. There is no tension with the intelligence and security posture: operational cooperation on serious threats is reinforced by lawful, routine sharing for ordinary protective purposes. There is no tension with the fiscal rules: the costs of the interfaces are owned inside the budget as a necessary protective function. The design is the practical counterpart of an open border for people: free movement is paired with the information flows that keep the public and children safe.

The section aligns with the continuity-first approach applied throughout the framework: essential protective functions continue without operational gaps, and dual-running, tested protocols bridge the constitutional change. It aligns with the partnership model of UK relations through formal bilateral or multilateral agreements. In every case, the design subordinates administrative neatness to public safety and the protection of children, and subordinates assumptions of residual automatic continuity to purpose-limited, lawful gateways that respect the new boundary.

Hardest Critiques and Direct Responses

Feasibility

Formal data-sharing agreements that preserve operational effectiveness are feasible. Cross-border police and child-protection cooperation already exists in various forms between sovereign states; the UK–Ireland relationship and other European arrangements supply practical parallels. Delivery depends on early technical and legal work, dual-running where required, and political willingness on both sides to treat child protection and public safety as non-negotiable. The institutions (police, social work, justice) already exist; the missing piece is the cross-border legal and technical gateway. Feasibility fails if technical work is left late, if dual-running is omitted at high-risk interfaces, or if negotiation neglects the protective priority.

Cost and fiscal burden

Building and running secure data interfaces, dual-running during transition, and ongoing operational costs have a price. The Scottish budget pays for Scottish systems, with a negotiated share for joint arrangements; costs fall within the fiscal rules. No one claims cost-free continuity. The alternative—gaps in protective information—turns cost into harm. The framework treats the expenditure as a necessary cost of a responsible border. Underestimating dual-running or interface costs, or treating them as residual, would recreate the gap the design is intended to close. Protection first supplies the prioritisation criterion when fiscal pressure is acute.

Dependence on agreement

Dependence on the United Kingdom is high. Reciprocal access cannot be imposed. If negotiation is slow or adversarial, Scotland can still secure its internal systems, offer reciprocity, and maintain liaison channels; full two-way operational effectiveness requires agreement. The framework therefore places these agreements high on the negotiation priority list precisely because the dependence is real and the protective stakes are high. Contingency planning includes clear Scottish-side rules and prioritisation of the most critical protective flows in any constrained negotiating environment. Unilateral Scottish organisation of its own systems does not compel the rUK side to open its records.

Transition risk

The clear transition risk is a gap in which records or child-protection information cannot be checked or shared when the UK-wide systems cease to operate across the border. Mitigation is dual-running of critical interfaces, tested protocols for urgent cases, and a hard readiness criterion before cut-over. A gap in child-protection or criminal-record information would be a design failure; the framework treats the absence of such a gap as mandatory. Residual risk of legal challenge if gateways are poorly designed against data-protection rules is mitigated by purpose-limited, proportionate agreements with clear safeguards and independent oversight. Simple request routes, training, and clear guidance mitigate the residual risk of administrative complexity causing under-use.

Alternatives (status quo and previous proposals)

Allowing UK-wide systems to continue as if the border did not exist would ignore the new constitutional and data-protection reality; it is rejected. Allowing the systems to stop without replacement would open protective gaps; it is rejected. Building purely unilateral Scottish systems without reciprocal access would leave Scottish agencies blind to rUK-held information while remaining open on their own side; it is incomplete and asymmetric. Formal bilateral (or multilateral) agreements that create lawful, purpose-limited, operationally effective gateways, with dual-running through transition and a stated priority for public safety and child protection, are the design that matches the risk. Trading protective effectiveness for administrative simplicity is rejected as the wrong trade-off.

Political and public credibility

The claim most likely to be called unrealistic is that complex, sensitive data-sharing arrangements can be ready on Independence Day without gaps, especially if political relations are strained. The precise answer is that readiness is a sequenced programme with dual-running, tested urgent protocols, and a published readiness standard; the highest-risk flows are prioritised; Scotland can organise its own side and offer reciprocity even if the other side is slow; and the alternative of unprotected gaps is rejected as both foreseeable and unacceptable. Credibility is early technical work, dual-running evidence, clear legal gateways, and an explicit refusal to trade child protection for administrative simplicity. Readers who prefer residual automatic continuity without new legal instruments, unprotected gaps, or administrative neatness at the expense of protective effectiveness are invited to evaluate the framework on the real-world risk that opens when safeguarding information stops flowing across a border that people continue to cross.

Position Summarised

Formal data-sharing and cooperation agreements would ensure that criminal records, child protection information, and other essential safeguarding data continue to flow between Scottish and rUK authorities. Police, social work, and justice agencies would retain the ability to check and share relevant information for legitimate public-protection purposes. Existing UK-wide systems would be replaced by bilateral or multilateral arrangements that preserve operational effectiveness while respecting the new constitutional boundary.

Public safety and the protection of children would take priority over administrative purity. The information that protects people keeps moving; the border does not become a blindfold. That is the safeguarding data settlement. Dual-running or equivalent measures prevent an operational gap on Independence Day. Agreements are purpose-limited, proportionate, and overseen. Scotland can organise its own systems and offer reciprocity; full two-way effectiveness depends on UK agreement and is therefore a high negotiation priority. The highest-risk flows are secured first.

Conclusion

How would information needed for public safety and child protection be shared? Through formal data-sharing and cooperation agreements that replace UK-wide systems with bilateral or multilateral arrangements, creating lawful, purpose-limited gateways so that police, social work, and justice agencies can continue to check and share criminal records, child-protection information, and other essential safeguarding data for legitimate protective purposes.

The design meets the continuity test by requiring dual-running or equivalent measures so that there is no operational gap, and meets the protective test by stating explicitly that public safety and the protection of children take priority over administrative neatness. The limit of the claim is clear: full two-way effectiveness depends on UK agreement; Scotland can organise its own systems and offer reciprocity; the highest-risk flows would be prioritised; and the alternative of unprotected gaps is rejected. The next sections turn to the remaining practical interfaces of daily life — driving licences, vehicles and insurance, family law and cross-border families, and postal and other utilities — under the same continuity-first logic.

Series Footer

This analysis forms part of People’s Future Scotland: The Independence Debate, a non-party framework examining the practical design of independence. Each section is written to withstand professional scrutiny and to prioritise mechanism, constraint and continuity over aspiration.