Follow this request

There is 1 person following this request

Offensive? Unsuitable?

Requests for personal information and vexatious requests are not considered valid for FOI purposes (read more).

If you believe this request is not suitable, you can report it for attention by the site administrators

Report this request

Act on what you've learnt

Similar requests

More similar requests

Event history details

Are you the owner of any commercial copyright on this page?

ACS:Law investigation progress

John Fletcher made this Freedom of Information request to Information Commissioner’s Office

The request was partially successful.

From: John Fletcher

29 January 2011

Dear Information Commissioner’s Office,

Given your response to my previous request:
http://www.whatdotheyknow.com/request/ac...
, I am somewhat disappointed that no timescale was shared. I note
also that Josh Halliday of the Guardian subsequently made a similar
request. I believe the ICO are not considering the scale of public
interest, nor the potential to give outline responses without
compromising/prejudicing detail.

As the data leak itself appears to be a rather simplistic matter to
investigate (either the data was stored securely or not / either
the information was made available to the public by a hacker or
accidentally by the law firm or web host), I fail to see why the
investigation has dragged on for so long.

On this basis please provide:

1) Any reasons for the investigation not being completed within 3
months of the issue arising.
2) An explanation as to where the complexities in the investigation
arise (which could cause the delay at 1)).
3) Any internal targets for resolution of complaints of this
nature, and whether the investigation of ACS:Law's breach conforms
to these targets.
4) Why, given the huge number of letters (and hence affected
members of the public), the ICO has not seen fit to provide even
cursory updates as to the progress of the investigation. (such as:
'The ICO believes it has carried out investigation sufficient to
close 75% of the expected issues. We hope we may be able to offer a
final conclusion and report by April').
5) Without prejudice as to whether sections have actually been
breached, what sections of the Data Protection Act 1998 are being
evaluated for compliance in the investigation of ACS:Law.

I would expect that 1-4 are answerable in brief without being
prejudicial to the investigation. 5 may be considered exempted due
to the investigation, but I believe a public interest test may be
in favour of disclosure.

You should be aware that speculation on various discussion forums
in relation to this matter is that the ICO is toothless, given the
time that has passed with no resolution. Complaints prior to the
breach do not appear to have been treated with appropriate
seriousness, and after the breach there is no information to
confirm that the ICO are even close to concluding their
investigation many months later.

Yours faithfully,

John Fletcher

Link to this

Information Commissioner’s Office

31 January 2011

Link: [1]File-List

31st January 2011

Case Reference Number IRQ0371764

Dear Mr Fletcher

Thank you for your email of 29 January 2011 in which you have made a
request for information to the Information Commissioner’s Office.

Your request is being dealt with in accordance with the Freedom of
Information Act 2000.  We will respond by 25 February 2011 which is 20
working days from the day after we received your request.

Should you wish to reply to this email, please be careful not to amend the
information in the ‘subject’ field. This will ensure that the
information is added directly to your case. However, please be aware that
this is an automated process; the information will not be read by a member
of our staff until your case is allocated to a request handler.

Yours sincerely

Joanne Crowley

Lead Internal Compliance Officer

show quoted sections

Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow,
Cheshire, SK9 5AF
Tel: 0303 123 1113 Fax: 01625 524 510 Web: www.ico.gov.uk

References

Visible links
1. file:///tmp/rad1E143_files/filelist.xml

Link to this

Information Commissioner’s Office

23 February 2011


Attachment ICOReviewProcedure V8.doc
232K Download View as HTML


Link: [1]File-List

23rd February 2011

Case Reference Number IRQ0371764

Dear Mr Fletcher

I am writing further to our email dated 31 January 2011 in which we
acknowledged your request for information to the Information
Commissioner’s Office (ICO).

As previously explained we are treating your email as a request for
information made under the Freedom of Information Act 2000 (the FOIA). 
As you will appreciate requests made under the FOIA are requests for
recorded information, an authority is not under any obligation to create
information in order to answer a request.

Specifically you referred to your previous request to the ICO (our
reference IRQ0361673) about ACS Law and you asked several questions.  For
your ease of reference we will deal with each one in turn.

“1) Any reasons for the investigation not being completed within 3
months of the issue arising.”
We do not hold any recorded information which would answer this part of
your request.

“2) An explanation as to where the complexities in the investigation
arise (which could cause the delay at 1)).”

We do not hold any recorded information which would answer this part of
your request.

“3) Any internal targets for resolution of complaints of this nature,
and whether the investigation of ACS:Law's breach conforms to these
targets.”

In answer to this part of your request please be advised that the ICO does
not have specific targets for “complaints of this nature”.  However
the ICO’s Business Plans do make reference to 75% of “cases” dealt
with by our Enforcement Team being actioned within three months.  Our
business plans can be found on our website via the following link;
[2]http://www.ico.gov.uk/about_us/what_we_d...

“4) Why, given the huge number of letters (and hence affected members of
the public), the ICO has not seen fit to provide even cursory updates as
to the progress of the investigation. (such as: 'The ICO believes it has
carried out investigation sufficient to close 75% of the expected issues.
We hope we may be able to offer a final conclusion and report by
April').”

We do not hold any recorded information which would answer this part of
your request.

“5) Without prejudice as to whether sections have actually been
breached, what sections of the Data Protection Act 1998 are being
evaluated for compliance in the investigation of ACS:Law.”

In answer to this part of your request please be advised that the ICO’s
investigation is considering section 4(4) of the Data Protection Act 1998
(the DPA) which states;

“Subject to section 27(1), it shall be the duty of a data controller to
comply with the data protection principles in relation to all personal
data with respect to which he is the data controller.”

I trust that the above information is of use to you however if you are
dissatisfied with the response you have received and wish to request a
review of our decision or make a complaint about how your request has been
handled you should write to the Internal Compliance Department at the
address below or e-mail [3][email address]

Your request for internal review should be submitted to us within 40
working days of receipt by you of this response. Any such request
received after this time will only be considered at the discretion of the
Commissioner.

If having exhausted the review process you are not content that your
request or review has been dealt with correctly, you have a further right
of appeal to this office in our capacity as the statutory complaint
handler under the legislation.  To make such an application, please write
to the First Contact Team, at the address below or visit the
‘Complaints’ section of our website to make a Freedom of Information
Act or Environmental Information Regulations complaint online.

 

A copy of our review procedure is attached.

Yours sincerely

Joanne Crowley

Lead Internal Compliance Officer

show quoted sections

Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow,
Cheshire, SK9 5AF
Tel: 0303 123 1113 Fax: 01625 524 510 Web: www.ico.gov.uk

References

Visible links
1. file:///tmp/rad226CA_files/filelist.xml
2. http://www.ico.gov.uk/about_us/what_we_d...
3. mailto:[email address]

Link to this

Things to do with this request

Anyone:
Information Commissioner’s Office only: