Encryption policy

Charlie Milton made this Freedom of Information request to Information Commissioner's Office

This request has been closed to new correspondence from the public body. Contact us if you think it ought be re-opened.

Information Commissioner's Office did not have the information requested.

Charlie Milton

Dear Information Commissioner's Office,

Could you please supply a copy of your encryption policy?

Yours faithfully,

Charlie Milton

Information Access Inbox, Information Commissioner's Office

Thank you for contacting the Information Commissioner’s Office. We confirm
that we have received your correspondence.

If you have made a request for information held by the ICO we will contact
you as soon as possible if we need any further information to enable us to
answer your request. If we don't need any further information we will
respond to you within our published, and statutory, service levels. For
more information please visit:


If you have raised a new information rights concern - we aim to send you
an initial response and case reference number within 30 days.

If you are concerned about the way an organisation is handling your
personal information, we will not usually look into it unless you have
raised it with the organisation first. For more information please see our
webpage ‘raising a concern with an organisation’ (go to our homepage and
follow the link ‘for the public’). You can also call the number below.

If you have requested advice - we aim to respond within 14 days. 

If your correspondence relates to an existing case - we will add it to
your case and consider it on allocation to a case officer.

Copied correspondence - we do not respond to correspondence that has been
copied to us.

For more information about our services, please see our webpage ‘Service
standards and what to expect' (go to our homepage and follow the links for
‘Report a concern’ and ‘Service standards and what to expect'). You can
also call the number below.

For information about what we do with personal data see our [2]privacy

If there is anything you would like to discuss with us, please call our
helpline on 0303 123 1113.

Yours sincerely

The Information Commissioner’s Office

Our newsletter

Details of how to sign up for our monthly e-newsletter can be found


Find us on Twitter [4]here.



Visible links
1. https://ico.org.uk/about-the-ico/our-inf...
2. https://ico.org.uk/global/privacy-notice/
3. https://ico.org.uk/about-the-ico/news-an...
4. http://www.twitter.com/ICOnews

Information Commissioner's Office

10 May 2019


Case Reference Number IRQ0841173


Dear C Milton

Thank you for contacting the Information Commissioner’s Office (ICO). We
received your information request on 7 May.
Your request
You asked us for the following: “a copy of your encryption policy”
We have considered your request under the Freedom of Information Act 2000
Our response 
I can confirm that the ICO does not hold information within scope of your
Whilst the ICO does use encryption, where appropriate as part of our
overall approach to privacy and security by design, we do not hold a
document that outlines our internal policy.
We do publish [1]external guidance on encryption on our website which you
may find interesting.
This concludes our response. Thank you for your interest in the ICO.
Next steps
If you are dissatisfied with the response you have received and wish to
request a review of our decision or make a complaint about how your
request has been handled you should write to the Information Access team
at the address below or email [2][ICO request email]
Your request for internal review should be submitted to us within 40
working days of receipt by you of this response.  Any such request
received after this time will only be considered at the discretion of the
If having exhausted the review process you are not content that your
request or review has been dealt with correctly, you have a further right
of appeal to this office in our capacity as the statutory complaint
handler under the legislation.  To make such an application, please write
to the Customer Contact department, at the address below or visit the
‘Complaints’ section of our website to make a Freedom of Information Act
or Environmental Information Regulations complaint online.
A copy of our review procedure is available [3]here.
For information about what we do with personal data see our [4]privacy
Yours sincerely,

Frederick Aspbury
Lead Information Access Officer
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow,
Cheshire SK9 5AF
T. 0330 414 6397 F. 01625 524510  [5]ico.org.uk  [6]twitter.com/iconews
Please consider the environment before printing this email
For information about what we do with personal data see our [7]privacy



Visible links
1. https://ico.org.uk/for-organisations/gui...
2. mailto:[ICO request email]
3. https://ico.org.uk/media/1883/ico-review...
4. https://ico.org.uk/global/privacy-notice/
5. http://ico.org.uk/
6. https://twitter.com/iconews
7. https://ico.org.uk/global/privacy-notice/

Charlie Milton left an annotation ()

Interesting the ICO guide on encryption states - You should have an encryption policy in place that governs how and when you implement encryption' and yet they have no encryption policy themselves.