Changeflow GovPing Data Privacy & Cybersecurity FOI complaint - Council breached section 17
Priority review Enforcement Amended Final

FOI complaint - Council breached section 17

Favicon for ico.org.uk ICO Decision Notices
Filed
Detected
Email

Summary

The ICO issued a Decision Notice against Blackburn with Darwen Borough Council finding a breach of FOIA section 17 for failing to issue a timely refusal notice within 20 working days. The council was entitled to withhold information under section 40(2) but failed proper procedure. No further steps required.

What changed

The ICO determined that Blackburn with Darwen Borough Council properly applied section 40(2) of FOIA to withhold third party personal information about a vacant property. However, the council breached section 17 by failing to issue a combined refusal notice citing both sections 40(2) and 31 within the statutory 20 working day timeframe.

Local authorities and public bodies handling FOI requests should ensure their internal processes guarantee timely refusal notices when withholding information, even when exemptions may apply. While the ICO did not require further action in this case due to the procedural nature of the breach, repeated or systemic section 17 failures could trigger formal enforcement action.

What to do next

  1. Review FOI response procedures to ensure refusal notices are issued within 20 working days
  2. Ensure staff training on section 40(2) third party data exemptions

Archived snapshot

Apr 8, 2026

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

Blackburn With Darwen Borough Council

  • Date 2 April 2026
  • Sector Local government
  • Decision(s) FOI 17: Upheld, FOI 40: Not upheld The complainant has requested information about a vacant property. Blackburn with Darwen Borough Council (‘the council’) relied on section 40(2) of FOIA (third party personal information) and section 31 of FOIA (law enforcement) to withhold the requested information. The Commissioner’s decision is that the council was entitled to rely on section 40(2) of FOIA to withhold the requested information. However, he also finds that the council breached section 17 of FOIA for failing to issue a refusal notice stating it was relying on sections 40(2) and 31 within 20 working days of receipt of the original request. The Commissioner does not require further steps.

Named provisions

FOIA Section 17 FOIA Section 40(2) FOIA Section 31

Get daily alerts for ICO Decision Notices

Daily digest delivered to your inbox.

Free. Unsubscribe anytime.

About this page

What is GovPing?

Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission

What's from the agency?

Source document text, dates, docket IDs, and authority are extracted directly from ICO.

What's AI-generated?

The plain-English summary, classification, and "what to do next" steps are AI-generated from the original text. Cite the source document, not the AI analysis.

Last updated

Classification

Agency
ICO
Filed
April 2nd, 2026
Instrument
Enforcement
Legal weight
Binding
Stage
Final
Change scope
Minor
Document ID
IC-406833-Y4X3
Docket
IC-406833-Y4X3

Who this affects

Applies to
Government agencies
Industry sector
9211 Government & Public Administration
Activity scope
Information requests FOI compliance review
Geographic scope
United Kingdom GB

Taxonomy

Primary area
Data Privacy
Operational domain
Compliance
Compliance frameworks
GDPR
Topics
Civil Rights

Get alerts for this source

We'll email you when ICO Decision Notices publishes new changes.

Optional. Personalizes your daily digest.

Free. Unsubscribe anytime.