Follow this request
There is 1 person following this request
Offensive? Unsuitable?
Requests for personal information and vexatious requests are not considered valid for FOI purposes (read more).
If you believe this request is not suitable, you can report it for attention by the site administrators
Report this requestAct on what you've learnt
Similar requests
Cost of ACS:LAW Investigation
To Information Commissioner’s Office by Joe Hickster 23 May 2011
ACS:Law data breach
To Information Commissioner’s Office by John Fletcher 24 November 2010
Discussions regarding ip address as personal data
To Information Commissioner’s Office by P Foomer 7 September 2010
Electoral Registration Officers
To Information Commissioner’s Office by John Cross 18 October 2009
ICO "views" on GP actions
To Information Commissioner’s Office by Dr Neil Bhatia 21 April 2010
CfH briefing to ICO
To Information Commissioner’s Office by Dr Neil Bhatia 14 May 2010
Monitoring of BT in 2009 re targeted online advertising
To Information Commissioner’s Office by Steven Thomlinson 31 October 2009
Home Office - reported to the Information Commissioner's Office
To Information Commissioner’s Office by John Walker 14 October 2009
Communications with DCSF regarding backlog
To Information Commissioner’s Office by Feargal Hogan 20 September 2009
Effectiveness of ICO
To Information Commissioner’s Office by Edwin Morris 3 October 2009
ACS:Law investigation progress
John Fletcher made this Freedom of Information request to Information Commissioner’s Office
The request was partially successful.
From: John Fletcher
29 January 2011
Dear Information Commissioner’s Office,
Given your response to my previous request:
http://www.whatdotheyknow.com/request/ac...
, I am somewhat disappointed that no timescale was shared. I note
also that Josh Halliday of the Guardian subsequently made a similar
request. I believe the ICO are not considering the scale of public
interest, nor the potential to give outline responses without
compromising/prejudicing detail.
As the data leak itself appears to be a rather simplistic matter to
investigate (either the data was stored securely or not / either
the information was made available to the public by a hacker or
accidentally by the law firm or web host), I fail to see why the
investigation has dragged on for so long.
On this basis please provide:
1) Any reasons for the investigation not being completed within 3
months of the issue arising.
2) An explanation as to where the complexities in the investigation
arise (which could cause the delay at 1)).
3) Any internal targets for resolution of complaints of this
nature, and whether the investigation of ACS:Law's breach conforms
to these targets.
4) Why, given the huge number of letters (and hence affected
members of the public), the ICO has not seen fit to provide even
cursory updates as to the progress of the investigation. (such as:
'The ICO believes it has carried out investigation sufficient to
close 75% of the expected issues. We hope we may be able to offer a
final conclusion and report by April').
5) Without prejudice as to whether sections have actually been
breached, what sections of the Data Protection Act 1998 are being
evaluated for compliance in the investigation of ACS:Law.
I would expect that 1-4 are answerable in brief without being
prejudicial to the investigation. 5 may be considered exempted due
to the investigation, but I believe a public interest test may be
in favour of disclosure.
You should be aware that speculation on various discussion forums
in relation to this matter is that the ICO is toothless, given the
time that has passed with no resolution. Complaints prior to the
breach do not appear to have been treated with appropriate
seriousness, and after the breach there is no information to
confirm that the ICO are even close to concluding their
investigation many months later.
Yours faithfully,
John Fletcher
Information Commissioner’s Office
31 January 2011
Link: [1]File-List
31st January 2011
Case Reference Number IRQ0371764
Dear Mr Fletcher
Thank you for your email of 29 January 2011 in which you have made a
request for information to the Information Commissioner’s Office.
Your request is being dealt with in accordance with the Freedom of
Information Act 2000. We will respond by 25 February 2011 which is 20
working days from the day after we received your request.
Should you wish to reply to this email, please be careful not to amend the
information in the ‘subject’ field. This will ensure that the
information is added directly to your case. However, please be aware that
this is an automated process; the information will not be read by a member
of our staff until your case is allocated to a request handler.
Yours sincerely
Joanne Crowley
Lead Internal Compliance Officer
show quoted sections
Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow,
Cheshire, SK9 5AF
Tel: 0303 123 1113 Fax: 01625 524 510 Web: www.ico.gov.uk
References
Visible links
1. file:///tmp/rad1E143_files/filelist.xml
Information Commissioner’s Office
23 February 2011
Link: [1]File-List
23rd February 2011
Case Reference Number IRQ0371764
Dear Mr Fletcher
I am writing further to our email dated 31 January 2011 in which we
acknowledged your request for information to the Information
Commissioner’s Office (ICO).
As previously explained we are treating your email as a request for
information made under the Freedom of Information Act 2000 (the FOIA).
As you will appreciate requests made under the FOIA are requests for
recorded information, an authority is not under any obligation to create
information in order to answer a request.
Specifically you referred to your previous request to the ICO (our
reference IRQ0361673) about ACS Law and you asked several questions. For
your ease of reference we will deal with each one in turn.
“1) Any reasons for the investigation not being completed within 3
months of the issue arising.”
We do not hold any recorded information which would answer this part of
your request.
“2) An explanation as to where the complexities in the investigation
arise (which could cause the delay at 1)).”
We do not hold any recorded information which would answer this part of
your request.
“3) Any internal targets for resolution of complaints of this nature,
and whether the investigation of ACS:Law's breach conforms to these
targets.”
In answer to this part of your request please be advised that the ICO does
not have specific targets for “complaints of this nature”. However
the ICO’s Business Plans do make reference to 75% of “cases” dealt
with by our Enforcement Team being actioned within three months. Our
business plans can be found on our website via the following link;
[2]http://www.ico.gov.uk/about_us/what_we_d...
“4) Why, given the huge number of letters (and hence affected members of
the public), the ICO has not seen fit to provide even cursory updates as
to the progress of the investigation. (such as: 'The ICO believes it has
carried out investigation sufficient to close 75% of the expected issues.
We hope we may be able to offer a final conclusion and report by
April').”
We do not hold any recorded information which would answer this part of
your request.
“5) Without prejudice as to whether sections have actually been
breached, what sections of the Data Protection Act 1998 are being
evaluated for compliance in the investigation of ACS:Law.”
In answer to this part of your request please be advised that the ICO’s
investigation is considering section 4(4) of the Data Protection Act 1998
(the DPA) which states;
“Subject to section 27(1), it shall be the duty of a data controller to
comply with the data protection principles in relation to all personal
data with respect to which he is the data controller.”
I trust that the above information is of use to you however if you are
dissatisfied with the response you have received and wish to request a
review of our decision or make a complaint about how your request has been
handled you should write to the Internal Compliance Department at the
address below or e-mail [3][email address]
Your request for internal review should be submitted to us within 40
working days of receipt by you of this response. Any such request
received after this time will only be considered at the discretion of the
Commissioner.
If having exhausted the review process you are not content that your
request or review has been dealt with correctly, you have a further right
of appeal to this office in our capacity as the statutory complaint
handler under the legislation. To make such an application, please write
to the First Contact Team, at the address below or visit the
‘Complaints’ section of our website to make a Freedom of Information
Act or Environmental Information Regulations complaint online.
A copy of our review procedure is attached.
Yours sincerely
Joanne Crowley
Lead Internal Compliance Officer
show quoted sections
Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow,
Cheshire, SK9 5AF
Tel: 0303 123 1113 Fax: 01625 524 510 Web: www.ico.gov.uk
References
Visible links
1. file:///tmp/rad226CA_files/filelist.xml
2. http://www.ico.gov.uk/about_us/what_we_d...
3. mailto:[email address]
Things to do with this request
- Add an annotation (to help the requester or others)
- Download a zip file of all correspondence
Make and explore Freedom of Information requests




