Support Centre

You have out of 5 free articles left for the month

Signup for a trial to access unlimited content.

Start Trial

Continue reading on DataGuidance with:

Free Member

Limited Articles

Create an account to continue accessing select articles, resources, and guidance notes.

Free Trial

Unlimited Access

Start your free trial to access unlimited articles, resources, guidance notes, and workspaces.

UK: ICO issues reprimands to seven organisations for failing to respond to access requests

The Information Commissioner's Office ('ICO') announced, on 28 September 2022, that it had taken action against seven organisations that had failed to respond to subject access requests. In particular, the ICO confirmed that reprimands were issued to the Ministry of Defence, the Home Office, the London Borough of Croydon, the Kent Police, the London Borough of Hackney, the London Borough of Lambeth, and Virgin Media Limited. More specifically, the ICO noted that, following a series of complaints, the seven organisations had been identified for failing to respond to multiple requests within the statutory timeframes of one to three months, thereby breaching the UK General Data Protection Regulation ('UK GDPR') and the Data Protection Act 2018.

Separately, the ICO indicated that practice recommendations under the Freedom of Information Act 2000 were also issued to the London Borough of Croydon and the London Borough of Hackney.

Finally, the ICO concluded that these organisations have between three and six months to make improvements before further enforcement action may be taken.

You can read the press release and access the decisions here.