Changeflow GovPing Data Privacy & Cybersecurity ICO Decision: Oxford City Council correctly wit...
Routine Enforcement Amended Final

ICO Decision: Oxford City Council correctly withheld expense report data

Favicon for ico.org.uk ICO Decision Notices
Filed March 19th, 2026
Detected March 24th, 2026
Email

Summary

The UK's Information Commissioner's Office (ICO) issued a decision finding that Oxford City Council correctly withheld expense report data under section 40(2) of the Freedom of Information Act (FOIA). The decision upholds the council's reliance on the third-party personal information exemption.

What changed

The Information Commissioner's Office (ICO) has ruled that Oxford City Council was correct in withholding expense report data, citing section 40(2) of the Freedom of Information Act (FOIA), which pertains to third-party personal information. The complainant had requested redacted expense reports, but the Council successfully argued that disclosing this information would breach the privacy rights of individuals other than the data subject.

This decision confirms the Council's application of FOIA exemptions and means no further action is required from them. For public authorities, this reinforces the validity of using section 40(2) to protect personal data within expense reports when disclosure would be unfair to the individuals concerned. Compliance officers should note that ICO decisions on FOI exemptions are binding on the public authority in question.

Source document (simplified)

Oxford City Council

  • Date 19 March 2026
  • Sector Local government
  • Decision(s) FOI 40(2): Not upheld The complainant has requested a copy of redacted data from expense reports. Oxford City Council (the Council) relied on section 40(2) of FOIA (third party personal information) to withhold the information. The Commissioner’s decision is that the public authority has correctly relied on section 40(2) of FOIA to withhold the information. The Commissioner does not require further steps to be taken.

Named provisions

FOI 40(2): Not upheld

Source

Analysis generated by AI. Source diff and links are from the original.

Classification

Agency
ICO
Filed
March 19th, 2026
Instrument
Enforcement
Legal weight
Binding
Stage
Final
Change scope
Minor
Document ID
ICO Decision Notice IC-398351-Z8G5

Who this affects

Applies to
Government agencies
Industry sector
9211 Government & Public Administration
Activity scope
Information Disclosure
Geographic scope
United Kingdom GB

Taxonomy

Primary area
Judicial Administration
Operational domain
Legal
Topics
Freedom of Information Data Privacy

Get Data Privacy & Cybersecurity alerts

Weekly digest. AI-summarized, no noise.

Free. Unsubscribe anytime.

Get alerts for this source

We'll email you when ICO Decision Notices publishes new changes.

Free. Unsubscribe anytime.