SEPA — Scottish Environment Protection Agency

Stirling, Scotland, UK (principal office) · Offices across Scotland · Executive non-departmental public body of the Scottish Government · 30th anniversary 2026

Overview

The Scottish Environment Protection Agency (SEPA; Scottish Gaelic: Buidheann Dìon Àrainneachd na h-Alba) is Scotland's principal environmental regulator and its national authority for flood forecasting, flood warning, and strategic flood risk management. It is an executive non-departmental public body (NDPB) — what is commonly known as a quango — of the Scottish Government, established under the Environment Act 1995 and commencing operations on 1 April 1996. Under the devolution settlement established by the Scotland Act 1998, all of SEPA's duties are the responsibility of the Scottish Parliament. The agency's statutory purpose, as inserted into the 1995 Act by the Regulatory Reform (Scotland) Act 2014, is to protect and improve Scotland's environment — including managing natural resources sustainably — and in doing so to contribute to the health and wellbeing of the people of Scotland and to sustainable economic growth. SEPA marks its 30th anniversary in 2026, an occasion its leadership has used to reflect both on the transformation of Scotland's environment regulation over three decades and on the accelerating environmental pressures — climate change, flooding, water stress, and biodiversity loss — that define its current priorities.

Creation and Consolidation

Before SEPA existed, environmental regulation in Scotland was fragmented across multiple bodies with overlapping and sometimes inconsistent mandates. River purification boards managed water quality across Scotland's river systems. Local authorities held various pollution control functions. Her Majesty's Industrial Pollution Inspectorate regulated industrial emissions. The result was a system in which a single industrial facility discharging pollutants into a river might be regulated by different bodies for different aspects of its environmental impact, with limited coordination between them.

The Environment Act 1995, passed by the Westminster Parliament before Scottish devolution, created both SEPA and its counterpart the Environment Agency (for England and Wales) as part of a single legislative framework. SEPA came into formal legal existence in October 1995 and began operational work on 1 April 1996, absorbing the functions of the seven river purification boards, the three islands councils' environmental functions, the relevant functions of Her Majesty's Industrial Pollution Inspectorate, and the air quality and waste management functions previously held by local authorities. The consolidation was designed to deliver an integrated environmental protection service for Scotland — a single point of regulatory authority for the full range of activities affecting Scotland's air, land, and water.

In the years following its establishment, SEPA's responsibilities expanded substantially, largely through the implementation of European Union directives on water quality, industrial emissions, waste management, and environmental information. The Water Framework Directive, the Industrial Emissions Directive, and the Floods Directive each added significant new duties and regulatory frameworks. Approximately 90% of Scotland's environmental law during this period originated in EU legislation, which SEPA was responsible for transposing and enforcing domestically.

Principal Functions

Environmental Permitting and Regulation

Issues and enforces environmental authorizations for industrial operations, waste management, water abstractions, and discharges. The Environmental Authorisations (Scotland) Regulations (EASR), introduced in recent years, reformed the permitting framework toward a more risk-based approach, replacing multiple separate permit types with a unified authorization system.

Water Environment

Monitors and reports on the quality of Scotland's rivers, lochs, coastal waters, and groundwater. Implements the Water Framework Directive's requirements for achieving and maintaining good ecological status. Funds river restoration through the Water Environment Fund — £4.4 million disbursed in 2024–25 for river restoration work. Monitors bathing water quality: over 86% of Scotland's bathing waters were classified as excellent or good in 2024–25.

Flood Warning and Risk Management

Scotland's national flood forecasting and warning authority. Operates Floodline (0345 988 1188), Scotland's flood warning service. Issued 289 flood alerts, 370 flood warnings, and 3 severe flood warnings in 2024–25. Provides flood risk advice on planning applications — 1,478 planning applications received flood advice in 2024–25. Maps flood risk: covers nearly 80,000 km² of land with surface water and small watercourse flood maps.

Air Quality Monitoring

Monitors ambient air quality across Scotland, operates the air quality monitoring network, and reports on compliance with air quality standards. Publishes data publicly through Scotland's Environment web portal.

Waste Regulation

Regulates waste management facilities and operations, enforces duty-of-care obligations on waste producers and carriers, and oversees the storage, transport, and disposal of controlled and special (hazardous) wastes. Also regulates radioactive material storage, transport, and disposal.

Environmental Information and NetRegs

Has a legal duty to provide access to environmental information it holds, under the Environmental Information (Scotland) Regulations 2004. Operates NetRegs, an environmental guidance service for businesses seeking to understand their regulatory obligations. Achieved over 94% response rate for Freedom of Information and Environmental Information requests in 2024–25.

The 2020 Cyberattack

On Christmas Eve 2020, SEPA was subjected to what it described as "a serious and complex cyber-attack, displaying significant stealth and malicious sophistication." The attack significantly disrupted the agency's contact centre, internal systems, processes, and communications. Hackers — subsequently attributed by analysts to the Conti ransomware group — stole over 4,000 digital files from SEPA's systems. SEPA declined to pay the ransom demand. On 21 January 2021, it was confirmed that the stolen files had been published online by the attackers after SEPA's refusal to pay. The attack severely disrupted the agency's operational capacity at a moment when it was already under significant pressure from the simultaneous challenges of the COVID-19 pandemic and the post-Brexit transition away from European Union environmental law and regulatory frameworks. Environmental law analysts noted that the convergence of the cyber attack, COVID-19, and Brexit had made it "virtually impossible, by the organisation's own admission, to do all the key elements of its job." Recovery from the attack required significant investment in new systems, and SEPA's laboratory accreditation for certain chemistry tests was temporarily suspended; the Aberdeen Microbiology laboratory's ISO 17025 accreditation was reinstated in 2024, allowing resumption of statutory bathing water reporting.

30th Anniversary and Current Priorities

SEPA marked its 30th anniversary in 2026. In May 2026, Chief Executive Nicole Paterson published the agency's Annual Operating Plan for 2025–26, stating: "Scotland's environment is changing rapidly, and we continue to focus our work on our strategic priorities around net zero, climate resilience, water environment, resource efficiency and business environmental performance." The operating plan reflects SEPA's own characterization of the moment as one of accelerating environmental pressure — flooding events of increasing frequency and severity, water scarcity driven by prolonged dry weather and climate change, and the need for a transformed regulatory approach that can handle a changing environment with finite public resources. Climate adaptation and flood resilience are the dominant near-term themes: Paterson briefed the Scottish First Minister and Cabinet Secretaries at Bute House in late 2024 on flood resilience strategy in the wake of catastrophic flooding events in Wales and Spain.

The current corporate strategy is organized around five strategic priorities: net zero, climate resilience, water environment, resource efficiency, and business environmental performance. The agency is simultaneously undergoing a digital transformation program — described as concentrating on regulatory approach, digital enablement, customer experience, and data-driven decision making — and managing the transition to the new Environmental Authorizations (Scotland) Regulations framework, the most significant change to Scotland's environmental permitting system since SEPA's establishment.

Accountability and Access

As an executive NDPB, SEPA is accountable to the Scottish Parliament through Scottish Ministers. It publishes annual accounts, corporate plans, operating plans, board meeting minutes, and other governance documents publicly. Its board meets formally several times per year and its papers are published online. SEPA's legacy website remains at sepa.org.uk while its new beta website at beta.sepa.scot progressively replaces it. Members of the public can report environmental incidents and pollution through the website or by telephone; Floodline for flood warnings operates at 0345 988 1188. Freedom of Information and Environmental Information requests can be submitted through sepa.org.uk. SEPA's principal and head office is at Strathallan House, Castle Business Park, Stirling FK9 4TZ.