Category Archives: Freedom of Information

Non-party access to court documents

The issue of non-party access to information from court cases, such as parties’ skeleton arguments and other case documents, continues to exercise the courts. In a recent judgment (Moss v The Upper Tribunal [2024] EWCA Civ 1414), the Court of Appeal has ruled that the president of the Administrative Appeals Chamber of the Upper Tribunal had been wrong to refuse an application for parties’ written submissions from a Freedom of Information Act case.

Following the Supreme Court’s judgment in Dring, it is clear that there is no presumptive right to such documents. Instead, as Baroness Hale put it, “it is for the person seeking access to explain why he seeks it and how granting him access will advance the open justice principle” (at para 45 of the SC judgment), and if that test is met, the court must consider any countervailing factors (at 46-47).

Here, the AAC President had rejected the applicant’s stated reason (“I am a campaigner and writer with a particular interest in information and rights law and certification/contempt proceedings, and I need copies of the skeleton arguments to see what arguments were deployed in these cases, to enable me to write about them from an informed point of view”) but did not explain why. This was an error of law, and Coulson LJ, reconsidering the material which had been before the President, decided instead that stated reason (just) met Baroness Hale’s first test. There were no countervailing factors, and so the appeal succeeded.

All three appeal court judges note that the Civil Procedure Rules Committee is in the process of considering how to deal with non-party information requests – something Baroness Hale had called for in a postscript to Dring.

However, as happened here, such requests are often made in relation to tribunal proceedings, which are not covered by the CPR. Tribunal rules are notably silent on such issues, and Underhill LJ wisely calls on the Tribunal Rules Committee also to consider the matter.

Aidan Wills of Matrix Chambers acted for the appellant, and Eric Metcalfe of Monckton Chambers for the Information Commissioner’s Office, as an interested party.

The views in this post (and indeed most posts on this blog) are my personal ones, and do not represent the views of any organisation I am involved with.

2 Comments

Filed under access to information, Article 10, Freedom of Information, judgments, Open Justice

ICO and functus officio

[reposted from LinkedIn]

Can the Information Commissioner’s Office (ICO) withdraw or amend a decision notice it has issued under section 50 of the Freedom of Information Act 2000? And, if not, why not?

This FOI disclosure by the ICO states the orthodox (and surely correct) position that, once a section 50 decision has been made, “the Commissioner has discharged his duties under section 50…We can only act in accordance with our powers under the legislation. There is no provision in the FOIA that allows the Commissioner to amend or cancel a DN once it has been issued.”

But the letter goes on to say “…it [is not] accurate to say there is a law that prohibits us from amending a DN”. This is, to the contrary, surely incorrect: there may be no express statutory provision, but common law doctrine of “functus officio” applies.

Functus officio applies where “a judicial, ministerial or administrative actor has performed a function in circumstances where there is no power to revoke or modify it” (R (Commissioner of Police of the Metropolis) v Independent Police Complaints Commission [2015] EWCA Civ 1248, [2016] PTSR 891).

Although there may be exceptions where the decision has been obtained by fraud or it is based on a fundamental mistake of fact (R (Sambotin) v Brent London Borough Council [2018] EWCA Civ 1826, [2019] PTSR 371), the doctrine is most certainly “a law that prohibits” the ICO from amending a decision notice.

The views in this post (and indeed most posts on this blog) are my personal ones, and do not represent the views of any organisation I am involved with.

Leave a comment

Filed under common law, Freedom of Information, Information Commissioner, Uncategorized

The missing page about the missing PhD

[reposted from LinkedIn]

[EDIT: you win some, you get the wrong end of the stick on some. It was pointed out to me that the ICO removes items from its disclosure log after two years, which is why the document no longer shows up, and in the comments below I was taken to a copy of the document at WhatDoTheyKnow. Both these points have been confirmed to me in an FOI response from the ICO. What mislead me into thinking there was something more going on was probably the Tribunal’s reference to a “new policy”: it clearly wasn’t so much a policy, as a statement that the ICO would rely on s17(6) FOIA to refuse to reply to future requests, on the grounds that a vexatious campaign was being pursued.]

This is plain odd.

For several years the The London School of Economics and Political Science (LSE), and, consequently, the Information Commissioner’s Office has had to deal to with FOI requests about former Taiwanese president Tsai Ing-wen’s “missing PhD dissertation” (for some background, see here (I don’t vouch for its accuracy)).

A number of these requests have been refused on the grounds of vexatiousness, with many upheld on referral to the ICO.

The Information Tribunal has recently given judgment on one of these, and ruled in favour of the appellant, holding that the request was not vexatious. But what struck me was the fact that both the appellant and the ICO cited in evidence a page (a hosted pdf, going by the URL) on the ICO’s website. The judgment says this

The Appellant stated in his grounds of appeal that after he had complained to the Commissioner about the Authority’s response to the Request, the Commissioner published on the ICO’s website (by reference to a disclosure log) a new policy of not processing FOIA requests seeking information on President Tsai Ing-wen’s PhD.

But a footnote (screenshotted here) correctly notes that the link does not go to this page, and further, I can’t find any sign of it on the UK government web archive or the Wayback Machine. An advanced Google search on the ICO website throws no light.

So I’ve made an FOI request to the ICO, and will update when I get a response.

The views in this post (and indeed most posts on this blog) are my personal ones, and do not represent the views of any organisation I am involved with.

4 Comments

Filed under access to information, FOIA, Freedom of Information, Information Commissioner, Information Tribunal, judgments

You must be taking the PSNI

[Reposted from LinkedIn]

The Information Commissioner’s Office has fined the Police Service of Northern Ireland £750,000 for the failings that led to the public disclosure of the surnames, initials, ranks and roles of all 9,483 PSNI officers and staff, putting countless people’s lives at risk from dissident republicans. The fine would have been £5.6m if the ICO’s “public sector approach” had not been applied.

The disclosure was made in a spreadsheet attached to a Freedom of Information Act response. The spreadsheet was intended to disclose some information, but also contained a hidden tab, where the offending information was situated.

Eleven years ago I was asked to write a piece in The Guardian about the risks of hidden data in spreadsheets. At the time, as many of you will remember, these sort of incidents were prevalent in councils and the NHS. I called for the ICO to do more to warn, and, in fairness, they did. But the fact that this sort of incident was allowed to happen is shocking: the ICO notice points out that there PSNI would regularly create pivot tables to prepare information for disclosure, where the risk of data being hidden (but easily revealed) is particularly high.

The ICO announcement is unusual in that it also allows the Chief Constable of PSNI to comment, and – extraordinarily – to express that he is “extremely disappointed at the level of the fine” (despite the massive reduction over what it would have been if he was in charge of a private sector organisation).

Chief Constable Boucher – you got off lightly.

The views in this post (and indeed most posts on this blog) are my personal ones, and do not represent the views of any organisation I am involved with.

Leave a comment

Filed under Data Protection, fines, Freedom of Information, Information Commissioner, personal data breach, police, UK GDPR

Exempt from FOI? Hoyle say it is

[reposted from LinkedIn]

Although the Information Commissioner’s Office is tasked with enforcing the Freedom of Information Act 2000, the Act contains some provisions which have the effect of ousting the ICO’s jurisdiction. A little-seen one appears in a recent decision notice about a request to the House of Commons for information and correspondence in relation to events at the controversial Opposition Day Debate on 21 February 2024. Much of the controversy turned on the actions of the Speaker of the House, Sir Lindsay Hoyle, who later apologised.

Section 34 of FOIA creates an absolute exemption (i.e. not subject to a public interest test) if the exemption is required for the purpose of avoiding an infringement of the privileges of either House of Parliament. But section 34(3) goes further, and says that

A certificate signed by the appropriate authority certifying that exemption…is, or at any time was, required for the purpose of avoiding an infringement of the privileges of either House of Parliament shall be conclusive evidence of that fact.

Such a certificate closes things down: it is not open to the ICO (or a court) to say “we disagree – the exemption is not required to avoid informing the privilege of House Houses”.

All very interesting, and the decision notice is still worth reading, to see how it all works.

But, who, you might ask, is the “appropriate authority” who signed this certificate?

Well, dear friends, section 34(4) FOIA says that, when the privilege of the Commons is at issue, the appropriate authority is the Speaker of the House – a certain Sir Lindsay Hoyle MP.

The views in this post (and indeed most posts on this blog) are my personal ones, and do not represent the views of any organisation I am involved with.

Leave a comment

Filed under access to information, FOIA, Freedom of Information, Information Commissioner, parliament

Gender critical beliefs not relevant in determining whether FOI request was vexatious

[reposted from LinkedIn]

The holding and expression of gender critical beliefs was not valid evidence for LNER to take into account in determining that an FOI request was vexatious.

Can a public authority take into account a requester’s public comments elsewhere, when considering whether a request is vexatious under s14 of the Freedom of Information Act 2000, in circumstances where the comments are expressions of a belief, the holding of which is a protected characteristic under the Equality Act 2010? The answer, says the Information Commissioner’s Office, in a well-argued decision notice, is “no” – however much the authority might disagree with the expressions.

The request was to London North East Railway (a company wholly owned by the Department for Transport), and therefore a public authority for the purposes of FOIA), and was for information about the process and costs of decorating a train in Pride colours, the processes for selecting train designs more generally and about plans for future designs.

LNER refused the request as vexatious, and justified this to the ICO on grounds including the content of social media posts by the requester

have demonstrated views that indicate a bias against transgender individuals, [that complying could lead to] harmful discourse and cause distress to our transgender employees and the people that the Pride train represents [and that the requester’s] focused questions on binary sex divisions and the specific targeting of a Pride-themed train…indicates a shift toward a disruptive agenda rather than an informational one.

In response, the requester

accepted that she had a binary view of sex, but…that this was a protected belief [citing Forstater v CGD]

LNER had therefore, in her view,

unlawfully discriminated against her because it had refused to provide information, that she would otherwise have been entitled to receive, due to her beliefs.

The ICO ruled that LNER had been entitled to take “a holistic view of the request” and nothing in principle had prevented it taking account of social media posts. However

the question of vexatiousness does not turn on what the complainant’s beliefs are, or are not. Nor whether she is, or is not, entitled to those beliefs

The question was “whether the request had a serious purpose and value” – here, it did – and whether that was outweighed by factors pointing towards vexatiousness. The ICO found that it was not:

the complainant’s motivation may well have a grounding in her beliefs, but the public authority has not demonstrated that she has made the request just to be disruptive, or just to target individual. Nor has it demonstrated that it would be subject to an unjustified burden if it were to respond to the present request

The right to information under FOIA is a species of the Article 10 ECHR right to receive and impart information. This is an important decision by the ICO on the extent of the right.

The views in this post (and indeed most posts on this blog) are my personal ones, and do not represent the views of any organisation I am involved with.

Leave a comment

Filed under access to information, Equality Act, FOIA, Freedom of Information, human rights, Information Commissioner

Department for the Economy (Northern Ireland) v Information Commissioner and White (GIA/85/2021)

I wrote recently about the fact that a judgment in the Upper Tribunal, which the Information Commissioner cites in guidance, was not publicly available anywhere. The ICO had refused to disclose it in response to a Freedom of Information Act request and suggested the requester ask for a copy directly from the Tribunal.

I don’t know if the requester did, but I thought it would be helpful to do so, and upload it here. (Kudos to the Tribunal for the swift, helpful reply.)

I’m also going to contact Bailii, and see if they might host a copy as well.

The views in this post (and indeed most posts on this blog) are my personal ones, and do not represent the views of any organisation I am involved with.

Leave a comment

Filed under access to information, Environmental Information Regulations, FOIA, Freedom of Information, Information Commissioner, Open Justice, Upper Tribunal

JR judgment, and the lack of third party rights under FOIA

[reposted from LinkedIn]

The Freedom of Information Act 2000 (FOIA) confers rights on those requesting information, and obligations on public authorities (it also confers duties and powers on the Information Commissioner). What it does not do is confer any rights on someone whose information is held by a public authority and requested to be disclosed: if someone asks for that third party’s information and the public authority discloses, or is minded to disclose, the third party can do little or nothing to stop it.

That appears to be illustrated by a case in the High Court of Northern Ireland. I say “appears” because there doesn’t seem to be a judgment yet, and so I’ve had to piece together what seems to have been at issue.

FOIA requests were made by three unionist MPs to the Legal Services Agency (LSA) for funding for legal cases brought by victims’ campaigner Raymond McCord. It appears that the LSA proposed to disclose the information, and Mr McCord (because he has no rights as a third party under the FOIA regime itself) brought judicial review proceedings to prevent disclosure.

According to the media reports, those proceedings have failed, with the judge saying

There is a legitimate public interest in the openness and accountability of the LSA as a public authority responsible for the expenditure of substantial public funds…[Mr McCord’s] contention that he is a private individual sits uneasily with his own description as a ‘peace campaigner’ and his various interviews with the media, including when he challenged the public claims made by Mr Allister about the appropriateness of him being granted legal aid…Self-evidently, the applicant has injected himself into the public discourse on a number of high-profile cases which are of obvious and manifest interest to the public. This is particularly so in relation to Brexit litigation.

It also appears that at some stage the ICO was involved, and indicated its view that disclosure would “likely be unfair and unlawful”. I imagine that this was because Mr McCord made a data protection complaint. In any event, the ICO said that its view was not legally binding (an interesting side note: could the ICO have issued an enforcement notice under section 149 of the Data Protection Act 2018 to prevent a public authority releasing personal data under FOIA?)

This issue of “third party rights” (or lack thereof) under FOIA is a very interesting one. The section 45 Code recommends that public authorities consult with third parties where necessary, and have regard to their representations, but this still doesn’t confer a direct right.

The views in this post (and indeed most posts on this blog) are my personal ones, and do not represent the views of any organisation I am involved with.

Leave a comment

Filed under Data Protection, FOIA, Freedom of Information, Information Commissioner, judgments, judicial review, personal data

FOI performance data – and some suggestions

In the last couple of years the approach by the Information Commissioner’s Office (ICO) to Freedom of Information Act 2000 (FOIA) regulation and enforcement has greatly improved. Kudos to the Commissioner, John Edwards, Warren Seddon, Director of Freedom of Information and Transparency and all the other people who’ve contributed to the improvement.

But what the increased focus on public authorities’ performance is showing is how poor, in many cases, it is: in particular, many public authorities are failing – whether through lack of resource, or lack of concern (or a combination of both) – to comply with statutory and guideline timescales for compliance. It’s evident that more could (and should) be done.

Parts 8.5 and 8.6 of the 2018 Code of Practice, issued by the Cabinet Office under section 45 of FOIA, says that public authorities with over 100 Full Time Equivalent (FTE) employees should, as a matter of best practice, publish on a quarterly basis, details of their FOIA compliance. The information should include:

The number of requests received during the period;

The number of the received requests that have not yet been processed;

The number of the received requests that were processed in full (including numbers for those that were met within the statutory deadline, those where the deadline was extended and those where the processing took longer than the statutory deadline);

The number of requests where the information was granted in full;

The number of requests where the information was refused in full; The number of requests where the information was granted in part and refused in part;

The number of requests received that have been referred for internal review (this needs only reporting annually).

Such statistics were meant to extend to the wider the public sector the performance data reporting by central government.

However, six years on, in my experience and to my knowledge, very few public authorities who are meant to be doing this are in fact doing so – including, as far as I can ascertain, the ICO itself.

I have three suggestions.

  1. The ICO should start to compile and publish this information (if it doesn’t lead by example, it can hardly criticise other public authorities for failing to publish).
  2. The ICO should write an open letter to all public authorities with more than 100 FTE staff, asking them to write to the ICO advising whether they are complying with parts 8.5 and 8.6 of the Code, and if they are not, whether they are taking steps to. (I bear in mind that the ICO will not know which public authorities have not than 100 FTE staff, which is why it might need to be an open letter). In the event of future FOI complaints about performance, the ICO could then have regard to whether or not (or how) a public authority had responded to the open letter.
  3. If – as I suspect – there is, or comes to be, a widely held view that the requirements of parts 8.5 and 8.6 of the Code are too onerous for many public authorities, then consideration should be given by the Cabinet Office, in consultation with the ICO, to issuing a new/revised Code (section 45 empowers the Minister for the Cabinet office to issue, or revise, the Code “from time to time”).

It can be in no one’s interests – not public authorities’, not the ICO’s and not the public’s – to have a Code of recommended good practice which is simply ignored by many. If it’s ignored because its requirements, if followed would impose too great a burden, then get the thing changed. But – also – make sure that any revisions still address the need for better data on performance than currently exists.

The views in this post (and indeed most posts on this blog) are my personal ones, and do not represent the views of any organisation I am involved with.

2 Comments

Filed under Cabinet Office, FOIA, Freedom of Information, Information Commissioner, section 45 code

Pseudonymous FOI requests are not valid requests

[reposted from LinkedIn]

For a request for information under the Freedom of Information Act 2000 to be a valid one it must, under section 8, be in writing, describe the information requested and state “the name of the applicant” and an address for correspondence.

Does the name have to be the person’s real name?

“Yes”, says Judge Griffin (uncontroversially) when striking out an appeal to the First Tier Tribunal.

In the case, a person purporting to be “Simon Shannon” had made a (purported) request for information to the Civil Aviation Authority, which was partly refused, on the basis that the specific information was not held. “Simon Shannon” then made a (purported) complaint to the Information Commissioner’s Office who issued a (purported) decision notice upholding the refusal.

“Simon Shannon” then brought a (purported) appeal before the Tribunal. In his application he listed his address as “The Houses of Parliament”. This led the ICO to ask the Tribunal to direct that “Simon Shannon” give his real address. This then led to “Simon Shannon” applying to have the purported appeal struck out and for permission to lodge a new appeal in the name of Thomas Deacon – his real name.

The problem with this was, the judge pointed out, that as s8 FOIA requires that a request state “the” name of the applicant, rather than “a” name, this means that a pseudonym will not suffice, and a request made in the name of a pseudonym, as had been the case with “Simon Shannon”, was not a valid request. And there is a reason this matters:

“When an applicant uses a pseudonym to make a request to a public authority
that authority is deprived of the opportunity to consider whether those parts
of the Act [such as when considering whether requests are vexatious, or whether aggregated costs of two or more requests exceed the appropriate limit] to which the applicant’s identity is relevant apply to the request.”

It followed that, as the request was not a valid request, the ICO “unknown to him, had no power to consider a complaint under section 50 of the Act, nor to issue a decision notice”. And it further followed that the Tribunal had no jurisdiction – it could not simply permit the appeal to be remade in the person’s real name, because there was no ICO decision capable of being appealed.

None of this is especially new to FOI practitioners and lawyers, but the judgment is a clear and helpful explainer of the issues.

The views in this post (and indeed most posts on this blog) are my personal ones, and do not represent the views of any organisation I am involved with.

Leave a comment

Filed under access to information, FOIA, Freedom of Information, Information Commissioner, Information Tribunal, pseudonym