Changeflow GovPing Data Protection ICO Decision Notice: UKHSA FOI Breach
Routine Enforcement Amended Final

ICO Decision Notice: UKHSA FOI Breach

Favicon for ico.org.uk ICO Decision Notices
Filed February 11th, 2026
Detected February 17th, 2026
Email

Summary

The Information Commissioner's Office (ICO) has issued a decision notice finding that the UK Health Security Agency (UKHSA) breached Section 10 of the Freedom of Information Act (FOIA) by failing to respond to a request within the statutory 20 working days. UKHSA is required to provide a substantive response.

View original document View source feed page

What changed

The Information Commissioner's Office (ICO) has determined that the UK Health Security Agency (UKHSA) failed to comply with its obligations under Section 10 of the Freedom of Information Act (FOIA) by not responding to a complainant's information request within the mandated 20 working days. This decision upholds the complainant's assertion of a breach.

UKHSA is now required to provide a substantive response to the original information request in accordance with FOIA. While this is an enforcement action, it pertains to a specific instance of non-compliance with procedural timelines rather than a substantive policy change. No penalties are mentioned in this notice.

What to do next

  1. Provide a substantive response to the information request.

Source document (simplified)

UK Health Security Agency (UKHSA)

  • Date 11 February 2026
  • Sector Central government
  • Decision(s) FOI 10: Upheld The complainant requested information from UK Health Security Agency about a formal evidenced proposal. The Commissioner’s decision is that the public authority failed to respond to the request within 20 working days and has therefore breached section 10 of FOIA. The public authority must provide a substantive response to the request in accordance with its obligations under FOIA.

Related changes

Favicon for ico.org.uk ICO Open Letter to Tech Firms on Age Checks and Child Data Protection
Priority review Mar 12, 2026 • ICO News & Blogs • Data Protection
Favicon for ico.org.uk ICO Fines Police Scotland £66,000 for Data Mishandling
Priority review Mar 11, 2026 • ICO News & Blogs • Data Protection
Favicon for ico.org.uk ICO Upholds FOI Complaint Against NHS Trust
Priority review Mar 10, 2026 • ICO Decision Notices • Data Protection
Favicon for www.pcpd.org.hk Hong Kong PCPD Arrests Two for Suspected Doxxing
Urgent Mar 13, 2026 • PCPD Media Statements (HK) • Data Protection
Favicon for www.pcpd.org.hk Global Privacy Authorities Joint Statement on AI-Generated Imagery
Priority review Mar 13, 2026 • PCPD Media Statements (HK) • Data Protection
Favicon for www.pcpd.org.hk Privacy Commissioner Reports 2025 Work and Data Security Incidents
Priority review Mar 13, 2026 • PCPD Media Statements (HK) • Data Protection

Source

Favicon for ico.org.uk
ICO Decision Notices ico.org.uk/action-weve-taken/decision-notices
Data Protection
Analysis generated by AI. Source diff and links are from the original.

Classification

Agency
Information Commissioner's Office
Filed
February 11th, 2026
Instrument
Enforcement
Legal weight
Binding
Stage
Final
Change scope
Minor

Who this affects

Applies to
Government agencies
Geographic scope
National (UK)

Taxonomy

Primary area
Data Privacy
Operational domain
Legal
Topics
Freedom of Information Government Transparency

Browse Categories

Federal Courts 26 State Courts 91 Securities Regulation 6 Financial Regulation 43 Consumer Protection 5 Drug Safety 45 Data Protection 21 Competition 2 Attorneys General 3 Insurance Regulation 5 Trade & Export 36 Legislation 42 Energy Regulation 13 Environment 3 Labor & Employment 2 Tax 1

Get Data Protection alerts

Weekly digest. AI-summarized, no noise.

Free. Unsubscribe anytime.

Get alerts for this source

We'll email you when ICO Decision Notices publishes new changes.

Free. Unsubscribe anytime.