EDPB Adopts DPIA Template for Harmonised EU Compliance
The European Data Protection Board has adopted a template for Data Protection Impact Assessments (DPIA) to help organisations structure, harmonise and evidence their DPIA reporting processes under the GDPR. The template, which is not mandatory for organisations to use, includes predefined fields and a supporting explainer document with concise explanations. The template is subject to public consultation until 9 June 2026, after which EU Data Protection Authorities will adopt it either as their sole standard or as a 'meta-template' for national alignment.
FCDO fails FOI response deadline, ICO upholds complaint
FCDO fails FOI response deadline, ICO upholds complaint
Crown Prosecution Service Withholds Text Messages, FOI Appeal Not Upheld
The Information Commissioner's Office has issued a Decision Notice in case IC-419334-F5H6 dated 7 April 2026. The Crown Prosecution Service withheld copies of text messages considered as evidence in criminal proceedings, citing FOIA section 30(1)(c) (criminal proceedings) and section 40(2) (personal information). The ICO determined that CPS correctly relied on section 30(1)(c) to withhold the requested information. No further steps are required of the CPS.
University of Bradford FOI 10 Upheld, 30-Day Response Required
The ICO has upheld a Freedom of Information complaint against the University of Bradford. The public authority failed to respond to the complainant's FOI request within the statutory 20 working days under FOIA. The ICO requires the university to provide a substantive response to the request within 30 calendar days.
FCDO FOI Complaint Upheld, Response Required
The ICO has upheld a Freedom of Information complaint against the Foreign, Commonwealth and Development Office (FCDO). The public authority failed to respond to an FOI request within the statutory 20 working day period required under FOIA. The Commissioner requires FCDO to provide the complainant with a response within 30 calendar days of this decision notice.
Brighton & Hove City Council Breaches FOIA on Drive Request
The ICO has issued a Decision Notice finding that Brighton & Hove City Council breached FOIA requirements when handling an information request about a drive at a specific address. The council processed the request under FOIA section 21 (information accessible by other means) when it should have been handled under the Environmental Information Regulations (EIR). The ICO upheld complaints under EIR regulation 5(1) and regulation 14(1). The council is required to reconsider the request under the EIR and issue a fresh response to the complainant.
Kent County Council FOIA 10 Upheld
The ICO issued a decision notice finding Kent County Council in breach of FOIA for failing to respond to a freedom of information request within the statutory 20 working day timeframe. The council must now provide a substantive response to the original request within 30 calendar days of the decision.
Birmingham City Council FOI 12 Upheld
The ICO has upheld a complaint against Birmingham City Council regarding a Freedom of Information Act request. The Council cited section 12 (appropriate limit) to refuse providing information about invoices paid from April 2019. The ICO determined the Council is not entitled to rely on section 12. The Council must now issue a fresh response to the request without relying on section 12(1) of FOIA.
Metropolitan Police NCND FOI 40 Complaint Not Upheld
The Information Commissioner's Office has issued a Decision Notice in case IC-469364-Q5L0 concerning a Freedom of Information complaint against the Metropolitan Police Service. The complainant requested information about whether a named individual worked for the MPS. The MPS responded using 'neither confirm nor deny' (NCND) under section 40(5B)(a)(i) of FOIA. The ICO determined that the MPS was entitled to apply the NCND exemption and the complaint was not upheld.
Northumbria Police Operation Eustace FOI Complaint Not Upheld
The Information Commissioner's Office issued a Decision Notice regarding a Freedom of Information complaint against Northumbria Police concerning Operation Eustace. The ICO determined that on the balance of probabilities, Northumbria Police does not hold information within the scope of the request. The Commissioner does not require Northumbria Police to take any steps.
RCVS VCMS FOI Complaint Not Upheld - Info Not Held
The Information Commissioner's Office issued a decision notice regarding a Freedom of Information complaint against the Royal College of Veterinary Surgeons (RCVS). The complainant requested information about complaints handled by the Veterinary Client Mediation Service (VCMS). The ICO determined that on the balance of probabilities, RCVS does not hold the requested information. The complaint was not upheld and no further steps are required.
Castle Point Borough Council - FOI Complaint Partly Upheld
The ICO issued a Decision Notice concerning Castle Point Borough Council's handling of a Freedom of Information request. For part 1 of the request (emails between named individuals), the ICO found the council does not hold the requested information. For part 2 (email chains), the ICO determined the council is entitled to withhold personal data under section 40 for Email Chain 1 and part of Email Chain 2, but must disclose remaining information in Email Chain 2 since no exemption was cited.
Newham Council Stratford One Complaint Details Withheld Under EIR
The Information Commissioner's Office has issued a decision notice regarding a complaint against the London Borough of Newham concerning requests for information about Stratford One student accommodation complaints. The Council relied on regulation 12(5)(b) of the Environmental Information Regulations (EIR) — adverse effect on the course of justice — to withhold the information. The ICO determined that the Council correctly applied this exemption and no further compliance steps are required.
Apple Collects Street Images in Luxembourg April 8 - May 7, 2026
The CNPD informs the public that Apple will collect street-level imagery in Luxembourg from April 8 to May 7, 2026, for its Apple Maps service. Apple will automatically blur faces and license plates on published images. Individuals with questions about image processing or who wish to request additional blur may contact Apple directly.
Black Country Healthcare NHS Foundation Trust FOI Complaint Upheld
The Information Commissioner's Office has upheld a Freedom of Information complaint against Black Country Healthcare NHS Foundation Trust. The Trust failed to respond to the complainant's FOI request within the statutory 20 working days required under FOIA. The ICO has issued a Decision Notice requiring the Trust to provide a substantive response to the outstanding request within 30 calendar days.
Rushcliffe Borough Council EIR Planning Information Not Held
The Information Commissioner's Office issued a Decision Notice finding that Rushcliffe Borough Council correctly applied the Environmental Information Regulations exception at regulation 12(4)(a). The Council stated that requested planning application information was not held, and the Commissioner determined on the balance of probabilities that the information is indeed not held by the Council.
FOI 10 Breach Upheld, City of Wolverhampton Council
The ICO has upheld a breach of section 10 of the Freedom of Information Act 2000 against the City of Wolverhampton Council. The Council failed to provide a substantive response to an FOI request within the required 20 working days. The ICO has ordered the Council to issue a substantive response within 30 calendar days of the decision notice date.
NHS Trust Upheld for Late Supplier Payment FOIA Breach
The Information Commissioner's Office issued a decision notice finding that The Queen Elizabeth Hospital King's Lynn NHS Foundation Trust breached section 10 of the Freedom of Information Act 2000 by failing to respond to an information request within 20 working days. The complaint concerned the Trust's failure to pay suppliers on time and related late payment compensation. The ICO ordered the public authority to provide a substantive response to the original request.
FOI Cost Limit Refusal Not Upheld - Middleton Cheney Parish Council
The ICO has issued a Decision Notice regarding Middleton Cheney Parish Council's refusal of an FOI request under section 12(1) (cost limit exemption). The Commissioner determined that the Council was entitled to refuse the request on cost grounds and found that the Council complied with its section 16 obligations to offer advice and assistance. No further action is required from the Council.
Police FOI complaint: 10(1) upheld, 12(1) not upheld
Police FOI complaint: 10(1) upheld, 12(1) not upheld
Wandsworth Borough Council FOI Complaint Not Upheld
The Information Commissioner's Office has issued a Decision Notice regarding a Freedom of Information Act complaint against Wandsworth Borough Council. The complaint concerned the council's handling of a request for information about Wandsworth Information, Advice and Support Service. The ICO determined that the council's refusal to confirm or deny holding information under sections 40(5B) and 31(3) of FOIA was justified, and that on the balance of probabilities, the council does not hold any further information within scope of the request. No further action is required of the council.
London Borough of Southwark Upheld for FOIA Response Failure
The ICO has upheld a complaint against London Borough of Southwark for failing to respond to a Freedom of Information request within the statutory 20 working day timeframe. The Commissioner has ordered the authority to provide a substantive response to the complainant within 30 calendar days in compliance with its FOIA obligations.
Royal Borough of Greenwich - FOIA Request Non-Compliance Upheld
The ICO has upheld a complaint against the Royal Borough of Greenwich for failing to respond to a Freedom of Information Act request within the statutory 20 working day timeframe. The Commissioner has ordered the public authority to provide a substantive response to the complainant within 30 calendar days of the decision.
The Open University FOI Complaint Upheld, Must Issue Fresh Response
The ICO upheld a complaint against The Open University regarding a Freedom of Information Act request for data security and cybersecurity information. The university had refused to comply, citing section 14 of FOIA (vexatious request). The ICO determined the university is not entitled to rely on section 14. The ICO requires the university to issue a fresh response that does not rely on section 14 of FOIA.
EANI School Walking Route EIR Complaint Not Upheld
The Information Commissioner's Office issued a Decision Notice on 9 April 2026 regarding an Environmental Information Regulations complaint against the Education Authority Northern Ireland (EANI). The complainant requested information relating to an assessment of a school walking route between two postcodes. The ICO determined that, on the balance of probabilities, EANI does not hold any additional information falling within the scope of the request and does not require further steps. The complaint was not upheld.