Data Privacy & Cybersecurity

ICO Decision Notice: Lambeth Council FOI Data Handling

The UK's Information Commissioner's Office (ICO) has upheld Freedom of Information (FOI) complaints against Lambeth Council for its handling of data requests. The Council is required to provide specific requested information in the format specified within 30 days.

ICO Decision on East Kent Hospitals FOI Complaint

The UK's Information Commissioner's Office (ICO) issued a decision regarding a complaint against East Kent Hospitals University NHS Foundation Trust concerning Freedom of Information (FOI) requests. The ICO partly upheld and partly dismissed aspects of the complaint, clarifying the Trust's obligations regarding staff governor information and meeting minutes.

ICO Decision on Home Office Migration Data FOI Request

The UK's Information Commissioner's Office (ICO) has upheld the Home Office's decision to neither confirm nor deny holding information regarding cooperation with Turkey on migration programmes, citing Section 27(4) of the Freedom of Information Act. The ICO found no further action is required from the Home Office.

ICO Decision on Ministry of Defence FOI Complaint

The UK's Information Commissioner's Office (ICO) issued a decision regarding a Freedom of Information (FOI) complaint against the Ministry of Defence (MOD). The ICO found that the MOD was justified in withholding information related to Porton Down range usage under FOIA section 26(1)(b) (defence), as the public interest favoured maintaining the exemption.

ICO Decision: Core Education Trust request vexatious

The UK's Information Commissioner's Office (ICO) has ruled that a request made to Core Education Trust was vexatious and therefore not subject to compliance. The decision means the Trust is not obliged to provide the requested information.

ICO Decision Notice: UKHSA FOI Breach

The Information Commissioner's Office (ICO) has issued a decision notice finding that the UK Health Security Agency (UKHSA) breached Section 10 of the Freedom of Information Act (FOIA) by failing to respond to a request within the statutory 20 working days. UKHSA is required to provide a substantive response.

Tools for Humanity GDPR Operations Update

The Spanish Data Protection Agency (AEPD) received an update from Tools for Humanity regarding their GDPR operations. The company is relaunching operations in Spain in February 2026 with a new rewards model and has consolidated its data controller role within the EU.

EDPB Reply to Civil Society on EU Spyware Abuse

The European Data Protection Board (EDPB) has issued a reply to a civil society open letter concerning recent spyware abuse cases within the EU. This notice addresses concerns raised by civil society regarding the implications of spyware on data protection and fundamental rights.

ICO Response to MPs' Letter on Tattle Life

The UK's Information Commissioner's Office (ICO) has issued a response to a letter from MPs concerning the social media platform Tattle Life. The response clarifies the ICO's position and ongoing actions regarding data protection and online safety issues raised by the MPs.

ICO Decision Notice: BBC FOI Request on Spanish PM Title

The ICO has issued a decision notice regarding a BBC Freedom of Information (FOI) request concerning the Spanish Prime Minister's title. The ICO upheld the BBC's position that the information, if held, is for journalistic purposes and therefore exempt from FOIA.