UK: ICO issues reprimands to seven organisations for failing to respond to access requests
The Information Commissioner's Office ('ICO') announced, on 28 September 2022, that it had taken action against seven organisations that had failed to respond to subject access requests. In particular, the ICO confirmed that reprimands were issued to the Ministry of Defence, the Home Office, the London Borough of Croydon, the Kent Police, the London Borough of Hackney, the London Borough of Lambeth, and Virgin Media Limited. More specifically, the ICO noted that, following a series of complaints, the seven organisations had been identified for failing to respond to multiple requests within the statutory timeframes of one to three months, thereby breaching the UK General Data Protection Regulation ('UK GDPR') and the Data Protection Act 2018.
Separately, the ICO indicated that practice recommendations under the Freedom of Information Act 2000 were also issued to the London Borough of Croydon and the London Borough of Hackney.
Finally, the ICO concluded that these organisations have between three and six months to make improvements before further enforcement action may be taken.
You can read the press release and access the decisions here.