Data Protection

ICO Decision Notice: Public Authority Failed FOI Request

The UK's Information Commissioner's Office (ICO) issued a decision notice against the Department for Science, Innovation and Technology for failing to respond to a Freedom of Information (FOI) request within the statutory 20-day period. The ICO requires the department to respond to the complainant within 30 calendar days.

GDPR Resolution Fines Company 1,400 Euros for Unsolicited Email

The Spanish Data Protection Agency (AEPD) has issued a resolution fining JOMAFRAN 2013, S. L. 1,400 euros for violating data protection laws. The company sent unsolicited marketing emails referencing a judicial proceeding without prior consent or relationship with the recipient.

EDPB Conference on Cross-Regulatory Cooperation

The European Data Protection Board (EDPB) announced a conference on cross-regulatory cooperation in the EU, focusing on data protection perspectives. The event took place on March 17, 2026, and aimed to provide an overview of the EDPB's work in this area.

GDPR Fine of €4,000,000 Imposed on MODEL REYNA, C.B.

The Spanish Data Protection Agency (AEPD) has imposed a fine of €4,000,000 on MODEL REYNA, C.B. for violations of the GDPR. The company failed to respond to information requests from the agency during an investigation, leading to the sanction.

ICO Decision Notice: Lucy Letby Case FOI Request Not Vexatious

The UK's Information Commissioner's Office (ICO) issued a decision notice stating that a Freedom of Information (FOI) request concerning the Lucy Letby case was not vexatious. Cheshire Constabulary is required to provide a fresh response to the complainant.

ICO FOI Decision: Charity Commission and Section 31

The ICO has issued a decision regarding a Freedom of Information request handled by the Charity Commission. The Commissioner found that the Charity Commission correctly applied section 31 of FOIA, and the public interest favoured withholding the requested information. No further steps are required.

ICO Decision Notice: Buckinghamshire ICB breached FOIA by late information provision

The Information Commissioner's Office (ICO) found that the Buckinghamshire, Oxfordshire and Berkshire West Integrated Care Board (ICB) breached FOIA by providing Ophthalmology information late. While no further information was held, the delay constituted a breach of statutory timeframes.

ICO Decision Notice: Doncaster Council FOI Act Complaint

The UK's Information Commissioner's Office (ICO) has upheld a Freedom of Information Act complaint against Doncaster Metropolitan Borough Council. The ICO found the council partly incorrect in stating no further information was held and failed to disclose information within the statutory 20 working days.

ICO Decision Notice: Nottingham City Council EIR Complaint Upheld

The UK's Information Commissioner's Office (ICO) upheld an Environmental Information Regulations (EIR) complaint against Nottingham City Council for breaches related to a planning application information request. The council mishandled the request, breaching time limits and reconsideration procedures, although some exceptions were deemed valid.

ICO Decision: Oxford City Council Cherry Tree Information Disclosure

The UK's Information Commissioner's Office (ICO) issued a decision regarding Oxford City Council's disclosure of information about cherry tree removal. The ICO found that the council had complied with the Environmental Information Regulations (EIR) and did not require further action.