Changeflow GovPing Data Privacy February 26, 2026
Favicon for ag.ny.gov

New York v. Valve Corporation - Loot Boxes and Gambling

The New York Attorney General has sued Valve Corporation, alleging that its video game loot boxes function as illegal gambling. The complaint argues that Valve's monetization of virtual items through loot boxes violates New York's gambling laws and seeks to hold the company accountable for these practices.

Priority review Enforcement Consumer Protection
FTC Press Releases
Favicon for www.ftc.gov

FTC Policy Statement on COPPA and Age Verification Technologies

The FTC issued a policy statement clarifying that it will not bring enforcement actions under COPPA against operators using age verification technologies for the sole purpose of determining user age, provided certain conditions are met. This aims to incentivize the use of these technologies to protect children online.

Priority review Guidance Data Privacy
FTC Press Releases
Favicon for www.ftc.gov

FTC Workshop on Data Economy Injuries and Benefits

The Federal Trade Commission is hosting a workshop on February 26, 2026, to discuss measuring consumer injuries and benefits in the data-driven economy. The event will feature FTC officials and panel discussions on privacy preferences and data breach impacts.

Routine Notice Consumer Protection
ICO Decision Notices
Favicon for ico.org.uk

ICO Decision on Ambulance Trust FOI Request

The UK's Information Commissioner's Office (ICO) issued a decision regarding a Freedom of Information (FOI) request made to the South East Coast Ambulance Service NHS Foundation Trust. The ICO found that the requested report into an internal investigation was exempt from disclosure under section 41 of the FOI Act.

Routine Enforcement Data Privacy
ICO Decision Notices
Favicon for ico.org.uk

ICO Decision Notice: Ministry of Defence FOIA Breach

The UK's Information Commissioner's Office (ICO) has issued a decision notice finding the Ministry of Defence breached Section 10 of the Freedom of Information Act (FOIA) by failing to respond to a request within 20 working days. The Ministry of Defence is required to provide a substantive response.

Routine Enforcement Data Privacy
ICO Decision Notices
Favicon for ico.org.uk

ICO Decision on Executive Office Northern Ireland Communications

The UK's Information Commissioner's Office (ICO) issued a decision regarding a Freedom of Information request made to the Executive Office Northern Ireland. The ICO partially upheld the Executive Office's decision to withhold certain communications, but required disclosure of other information previously withheld under specific exemptions.

Routine Enforcement Data Privacy
ICO Decision Notices
Favicon for ico.org.uk

ICO Decision Notice: Lucy Letby Case FOI Request Not Vexatious

The UK's Information Commissioner's Office (ICO) issued a decision notice stating that a Freedom of Information (FOI) request concerning the Lucy Letby case was not vexatious. Cheshire Constabulary is required to provide a fresh response to the complainant.

Routine Enforcement Data Privacy
ICO Decision Notices
Favicon for ico.org.uk

ICO Decision Notice: Somerset Council FOI 10 Upheld

The UK's Information Commissioner's Office (ICO) has upheld a complaint against Somerset Council for failing to respond to a Freedom of Information (FOI) request within the statutory 20 working days. The ICO has ordered the council to respond to the complainant within 30 calendar days.

Routine Enforcement Data Privacy
ICO Decision Notices
Favicon for ico.org.uk

ICO Upholds FOI Complaint Against Salford City Council

The UK's Information Commissioner's Office (ICO) has upheld a Freedom of Information (FOI) complaint against Salford City Council for a delayed response. The Council is now required to provide the complainant with a response within 30 calendar days.

Routine Enforcement Data Privacy
ICO Decision Notices
Favicon for ico.org.uk

ICO Decision Notice: Home Office FOI Request Upheld

The ICO has upheld a Freedom of Information (FOI) request against the Home Office, finding that the public authority failed to complete its public interest test considerations within a reasonable time. The Home Office is now required to provide a substantive response to the request within 30 calendar days.

Priority review Enforcement Data Privacy
ICO Decision Notices
Favicon for ico.org.uk

ICO Decision Notice: Ealing Council FOI Breach

The UK's Information Commissioner's Office (ICO) has upheld a decision that Ealing Council breached section 10 of the Freedom of Information Act (FOIA) by failing to provide a substantive response to a request within 20 working days. The council must now provide the response within 30 days.

Urgent Enforcement Data Privacy
ICO Decision Notices
Favicon for ico.org.uk

ICO Decision Notice: FOI Complaint on Chagos Islands Policy

The ICO has issued a decision notice regarding a Freedom of Information complaint against the Attorney General's Office concerning Chagos Islands policy formulation. The ICO found that the AGO correctly applied exemptions under FOIA.

Routine Enforcement Data Privacy
ICO Decision Notices
Favicon for ico.org.uk

ICO Decision: Croydon Council Failed EIR Request

The UK's Information Commissioner's Office (ICO) has upheld a decision against the London Borough of Croydon for failing to respond to an Environmental Information Regulations (EIR) request within the statutory 20-day period. The ICO has ordered Croydon Council to respond to the complainant within 30 calendar days.

Priority review Enforcement Data Privacy
ICO Decision Notices
Favicon for ico.org.uk

ICO Decision: Oxford City Council Cherry Tree Information Disclosure

The UK's Information Commissioner's Office (ICO) issued a decision regarding Oxford City Council's disclosure of information about cherry tree removal. The ICO found that the council had complied with the Environmental Information Regulations (EIR) and did not require further action.

Routine Enforcement Data Privacy
ICO Decision Notices
Favicon for ico.org.uk

ICO Decision Notice: Doncaster Council FOI Act Complaint

The UK's Information Commissioner's Office (ICO) has upheld a Freedom of Information Act complaint against Doncaster Metropolitan Borough Council. The ICO found the council partly incorrect in stating no further information was held and failed to disclose information within the statutory 20 working days.

Priority review Enforcement Data Privacy
ICO Decision Notices
Favicon for ico.org.uk

ICO Decision Notice: Buckinghamshire ICB breached FOIA by late information provision

The Information Commissioner's Office (ICO) found that the Buckinghamshire, Oxfordshire and Berkshire West Integrated Care Board (ICB) breached FOIA by providing Ophthalmology information late. While no further information was held, the delay constituted a breach of statutory timeframes.

Routine Enforcement Data Privacy
ICO Decision Notices
Favicon for ico.org.uk

ICO FOI Decision: Charity Commission and Section 31

The ICO has issued a decision regarding a Freedom of Information request handled by the Charity Commission. The Commissioner found that the Charity Commission correctly applied section 31 of FOIA, and the public interest favoured withholding the requested information. No further steps are required.

Routine Enforcement Data Privacy
ICO Decision Notices
Favicon for ico.org.uk

ICO Decision Notice: Bradford Council Disclosure of School Preference Data

The ICO has issued a decision notice against Bradford Council regarding the disclosure of school preference data. The Council must disclose redacted spreadsheets containing no personal data to the complainant within 30 days, as they incorrectly withheld some information under FOIA section 40(2).

Priority review Enforcement Data Privacy
ICO Decision Notices
Favicon for ico.org.uk

ICO Decision Notice: Nottingham City Council EIR Complaint Upheld

The UK's Information Commissioner's Office (ICO) upheld an Environmental Information Regulations (EIR) complaint against Nottingham City Council for breaches related to a planning application information request. The council mishandled the request, breaching time limits and reconsideration procedures, although some exceptions were deemed valid.

Priority review Enforcement Data Privacy
Favicon for www.aepd.es

AEPD Rejects TALENTO MOTOR S.L. Appeal

The Spanish Data Protection Agency (AEPD) has rejected an appeal filed by TALENTO MOTOR S.L. against a prior resolution. The appeal was deemed inadmissible due to being filed outside the legal time limit. This decision upholds the original resolution from November 23, 2025.

Routine Enforcement Data Privacy