Changeflow GovPing Data Protection ICO Decision on DBT Information Disclosure
Routine Enforcement Amended Final

ICO Decision on DBT Information Disclosure

Favicon for ico.org.uk ICO Decision Notices
Filed February 26th, 2026
Detected March 6th, 2026
Email

Summary

The UK's Information Commissioner's Office (ICO) issued a decision regarding the Department for Business and Trade's (DBT) handling of an information request. While DBT was largely correct in withholding information, the ICO found breaches related to exceeding response times.

What changed

The Information Commissioner's Office (ICO) has issued a decision concerning a request made to the Department for Business and Trade (DBT) under the Environmental Information Regulations (EIR) and Freedom of Information Act (FOIA). The complainant sought information related to a complaint against Drax Group Plc. The ICO found that DBT was justified in withholding most of the requested information under FOIA section 12 and EIR regulations 12(4)(d), 12(4)(e), 12(5)(b), and 12(5)(f). However, the ICO determined that DBT was not entitled to rely on EIR regulation 12(5)(e) and also breached regulation 5(2) and regulation 14 by exceeding the statutory time limits for providing a response and a refusal notice, respectively. Additionally, a breach of FOIA section 17 was found for the same reason.

While the ICO did not require DBT to take further action on this specific complaint, the decision highlights the importance of adhering to statutory timeframes for information requests. Government agencies must ensure their processes are robust enough to meet these deadlines to avoid breaches. This decision serves as a reminder of the ICO's oversight role and the potential for findings of non-compliance even when the substantive withholding of information is deemed appropriate.

What to do next

  1. Review internal processes for handling EIR and FOIA requests to ensure compliance with statutory time limits.
  2. Ensure all response and refusal notices are issued within the prescribed timeframes.

Source document (simplified)

Department for Business & Trade (DBT)

  • Date 26 February 2026
  • Sector Central government
  • Decision(s) EIR 12(4)(d): Not upheld, EIR 12(4)(e): Not upheld, EIR 12(5)(b): Not upheld, EIR 12(5)(e): Upheld, EIR 12(5)(f): Not upheld, EIR 14: Upheld, FOI 12: Not upheld, FOI 17: Upheld, EIR 12(9): Not upheld The complainant has requested form the Department of Business and Trade (DBT) under EIR all information related to a complaint made against Drax Group Plc and considered by UK National Contact Point (UK NCP). DBT disclosed some information but withheld the remainder under section 12 of FOIA and regulations 12(4)(d), 12(4)(e), 12(5)(b), 12(5)(e) and 12(5)(f) of the EIR. The Commissioner’s decision is that DBT was correct to withhold the remainder of the information under section 12 of FOIA and exceptions 12(4)(d), 12(4)(e), 12(5)(b) and 12(5)(f) of the EIR. However, he found that DBT was not entitled to rely on regulation 12(5)(e) and also breached regulation 5(2) by exceeding the time for a response, regulation 14 by exceeding the time to provide a refusal notice and section 17 for the same reason. The Commissioner does not require DBT to take further steps in relation to this complaint.

Source

Analysis generated by AI. Source diff and links are from the original.

Classification

Agency
Information Commissioner's Office
Filed
February 26th, 2026
Instrument
Enforcement
Legal weight
Binding
Stage
Final
Change scope
Minor

Who this affects

Applies to
Government agencies
Geographic scope
National (UK)

Taxonomy

Primary area
Data Privacy
Operational domain
Legal
Topics
Freedom of Information Environmental Information Regulations

Get Data Protection alerts

Weekly digest. AI-summarized, no noise.

Free. Unsubscribe anytime.

Get alerts for this source

We'll email you when ICO Decision Notices publishes new changes.

Free. Unsubscribe anytime.