The Information Commissioner's Office (ICO) has issued a decision notice concerning a Freedom of Information (FOI) request directed at the University for the Creative Arts (UCA). The ICO determined that UCA breached sections 1(1) and 10(1) of the Freedom of Information Act 2000 by failing to provide a response within the mandated 20 working days. Additionally, UCA breached section 17(1) for not issuing a timely refusal notice when applying exemptions under section 40(1) (applicant's own personal data). The complainant's request for information regarding data protection handling and governance was largely upheld, with the ICO concluding that UCA does not hold further relevant information beyond what was already published or refused.

While the ICO found breaches, no further enforcement steps are required from UCA. This decision serves as a record of non-compliance for the university. Compliance officers should note that failure to adhere to FOI response timelines and proper refusal notice procedures can result in recorded breaches, even if no further penalties are imposed in this instance. The case highlights the importance of timely and compliant handling of information requests within educational institutions.