Dear Information Commissioner's Office,

Please communicate the following information by way of the Freedom of Information Act:
Information relating to entities registered with the Information Commissioner under the Data Protection Act, i.e. the register of data controllers.

Please include in your response the following infromation: registration number, name, companies house number, address, registration start and end dates, trading names, contact name and contact details.

Yours faithfully,
Mr M Smith

Information Access Inbox, Information Commissioner's Office

Thank you for contacting the Information Commissioner’s Office. We confirm
that we have received your correspondence.

If you have made a request for information held by the ICO we will contact
you as soon as possible if we need any further information to enable us to
answer your request. If we don't need any further information we will
respond to you within our published, and statutory, service levels. For
more information please visit:

[1]https://ico.org.uk/about-the-ico/our-inf...

If you have raised a new information rights concern - we aim to send you
an initial response and case reference number within 30 days.

If you are concerned about the way an organisation is handling your
personal information, we will not usually look into it unless you have
raised it with the organisation first. For more information please see our
webpage ‘raising a concern with an organisation’ (go to our homepage and
follow the link ‘for the public’). You can also call the number below.

If you have requested advice - we aim to respond within 14 days. 

If your correspondence relates to an existing case - we will add it to
your case and consider it on allocation to a case officer.

Copied correspondence - we do not respond to correspondence that has been
copied to us.

For more information about our services, please see our webpage ‘Service
standards and what to expect' (go to our homepage and follow the links for
‘Report a concern’ and ‘Service standards and what to expect'). You can
also call the number below.

For information about what we do with personal data see our [2]privacy
notice.

If there is anything you would like to discuss with us, please call our
helpline on 0303 123 1113.

Yours sincerely

The Information Commissioner’s Office

Our newsletter

Details of how to sign up for our monthly e-newsletter can be found
[3]here.

Twitter

Find us on Twitter [4]here.

 

References

Visible links
1. https://ico.org.uk/about-the-ico/our-inf...
2. https://ico.org.uk/global/privacy-notice/
3. https://ico.org.uk/about-the-ico/news-an...
4. http://www.twitter.com/ICOnews

Owen Boswarva left an annotation ()

Unfortunately ICO will probably refuse to disclose this data. This recent decision notice sets out their position based on a similar request: https://ico.org.uk/media/action-weve-tak....

Information Commissioner's Office

16 October 2019

 

Case Reference Number IRQ0877331

 

Dear Mr Smith

Thank you for your request for information submitted to the Information
Commissioner’s Office (ICO). We received your request on 26 September
2019.
 
We have considered your request under the Freedom of Information Act 2000
(FOIA).

Your request

You requested the following information;
 
‘Please communicate the following information by way of the Freedom of
Information Act: Information relating to entities registered with the
Information Commissioner under the Data Protection Act, i.e. the register
of data controllers. Please include in your response the following
infromation: registration number, name, companies house number, address,
registration start and end dates, trading names, contact name and contact
details.’

Our response

In response, we do hold information within the scope of your request. As
you likely know, a searchable copy of the public register of fee payers is
available on our [1]website. Our response under the FOIA is therefore to
explain that because the information within the register is publicly
available through our website, it is exempt from disclosure under section
21 of the FOIA, as it is available to the public by other means.

Companies House information is also searchable and publicly available,
please find the link to this below.
[2]https://www.gov.uk/government/organisati...

We also refer to a recent decision notice in respect of a request for the
ICO’s register of data protection fee payers.
[3]https://ico.org.uk/media/action-weve-tak...

It may interest you to know that a downloadable copy of the full register
will be placed on our website in due course. We are currently exploring
some technical issues that need to be resolved before we can place the
information we hold in a downloadable format on the website, but this work
is ongoing. I can confirm that we do intend to publish one once our
website development issues are resolved to the extent that this is
possible.
 
In the meantime the current public register we have placed [4]access to on
our website is searchable and you can access details of organisations
registered with us there.

That concludes our response to your information request, we hope that it
clarifies our position.  

Review procedure

If you are dissatisfied with this response and wish to request a review of
our decision or make a complaint about how your request has been handled
you should write to the Information Access Team at the address below or
email [5][ICO request email]
 
Your request for internal review should be submitted to us within 40
working days of receipt by you of this response. Any such request received
after this time will only be considered at the discretion of the
Commissioner.
 
If having exhausted the review process you are not content that your
request or review has been dealt with correctly, you have a further right
of appeal to this office in our capacity as the statutory complaint
handler under the legislation. To make such an application, please write
to our Customer Contact Team, at the address given or visit the
‘Complaints’ section of our website to make a Freedom of Information Act
or Environmental Information Regulations complaint online.
 
A copy of our review procedure can be accessed from our website:  

[6]Review procedure  

Yours sincerely
 

Sarah Whelan
Senior Information Access Officer, Risk and Governance Department
Corporate Strategy and Planning Service
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow,
Cheshire SK9 5AF
T. 0330 414 6322  F. 01625 524510  [7]ico.org.uk  [8]twitter.com/iconews
For information about what we do with personal data see our [9]privacy
notice.
Please consider the environment before printing this email

References

Visible links
1. https://ico.org.uk/ESDWebPages/Search
2. https://www.gov.uk/government/organisati...
3. https://ico.org.uk/media/action-weve-tak...
4. https://ico.org.uk/ESDWebPages/Search
5. mailto:[ICO request email]
6. https://ico.org.uk/media/1883/ico-review...
7. http://ico.org.uk/
8. https://twitter.com/iconews
9. https://ico.org.uk/global/privacy-notice/

Robert Whittaker left an annotation ()

I believe that both this response and the previous decision notice referenced in it are in error, and could be challenged. In particular, the S21 exemption requires not just that the information is available but that it is reasonably available to the applicant.

The requester has asked for the whole register, not just the ability to search it. To obtain all the information requested via repeatedly using an online search would not, in my opinion, be reasonable. Unless such a search facility allows wildcards or there is another way to systematically query the underlying database, one would not be able to guarantee that it could be used to return all the records.

Moreover, the search facility at https://ico.org.uk/ESDWebPages/Search would appear to be limited to 100 result at a time, and shows nothing if your search returns more than 100 results. This severely limits its ability to be used to recover all the requested information. The only way I could see it being used in this case would be to systematically try every possible registration number individually. But then one would need to be told the form and range of possible registration numbers.

And then we are back to the original question, of whether the totality of the information is reasonably accessible by this method. Is it really reasonable to expect the requester to query each possible registration number individually to obtain all the information?

Daniel Morris left an annotation ()

Systematically probing the register by searches based on registration number should (!) trigger a lockout or some kind of rate limiting, as hammering it in excess of the 611,046 valid records would likely act like a Denial Of Service attack.

In the DN, had the applicant tried to search the postcode WC2H 9JQ then 0 results would show, as "More than 100 registrations found." Checking a software/CRM company that is spamming for business has registered and paid a fee is a very legitimate use of the register.

The extent of the ICO's progress on plans for publishing the register can be assessed, in their totality, here:
https://www.whatdotheyknow.com/request/p...

Dear Information Commissioner's Office,

Please pass this on to the person who conducts Freedom of Information reviews.

I am writing to request an internal review of Information Commissioner's Office's handling of my FOI request 'Register of data controllers'. This request was for information relating to entities registered with the Information Commissioner under the Data Protection Act.

I believe that the Office's response is in error, because the exemption referenced requires that the information is reasonably available. To obtain the totality of the information requested via repeatedly using an online search would not, in my opinion, be reasonable.

A full history of my FOI request and all correspondence is available on the Internet at this address: https://www.whatdotheyknow.com/request/r...

Yours faithfully,
Mr M Smith

Information Access Inbox, Information Commissioner's Office

Thank you for contacting the Information Commissioner’s Office. We confirm
that we have received your correspondence.

If you have made a request for information held by the ICO we will contact
you as soon as possible if we need any further information to enable us to
answer your request. If we don't need any further information we will
respond to you within our published, and statutory, service levels. For
more information please visit:

[1]https://ico.org.uk/about-the-ico/our-inf...

If you have raised a new information rights concern - we aim to send you
an initial response and case reference number within 30 days.

If you are concerned about the way an organisation is handling your
personal information, we will not usually look into it unless you have
raised it with the organisation first. For more information please see our
webpage ‘raising a concern with an organisation’ (go to our homepage and
follow the link ‘for the public’). You can also call the number below.

If you have requested advice - we aim to respond within 14 days. 

If your correspondence relates to an existing case - we will add it to
your case and consider it on allocation to a case officer.

Copied correspondence - we do not respond to correspondence that has been
copied to us.

For more information about our services, please see our webpage ‘Service
standards and what to expect' (go to our homepage and follow the links for
‘Report a concern’ and ‘Service standards and what to expect'). You can
also call the number below.

For information about what we do with personal data see our [2]privacy
notice.

If there is anything you would like to discuss with us, please call our
helpline on 0303 123 1113.

Yours sincerely

The Information Commissioner’s Office

Our newsletter

Details of how to sign up for our monthly e-newsletter can be found
[3]here.

Twitter

Find us on Twitter [4]here.

 

References

Visible links
1. https://ico.org.uk/about-the-ico/our-inf...
2. https://ico.org.uk/global/privacy-notice/
3. https://ico.org.uk/about-the-ico/news-an...
4. http://www.twitter.com/ICOnews

Information Commissioner's Office

21 November 2019

 

Case Reference Number IRQ0877331

 

Dear Mr Smith

RCC0892138

Thank you for your correspondence dated 12 November 2019.
 
This correspondence will now be treated as a request for an internal
review of the response we provided to your recent request for information
under the Freedom of Information Act 2000.
 
We will aim to respond by 10 December 2019 which is 20 working days from
the day after we received your recent correspondence.  This is in
accordance with our internal review procedures which were provided with
our response.
 
Yours sincerely
 

Sarah Whelan
Senior Information Access Officer
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow,
Cheshire SK9 5AF
T. 0330 414 6322  F. 01625 524510  [1]ico.org.uk  [2]twitter.com/iconews
Please consider the environment before printing this email
For information about what we do with personal data see our [3]privacy
notice

References

Visible links
1. http://ico.org.uk/
2. https://twitter.com/iconews
3. https://ico.org.uk/global/privacy-notice/

Information Commissioner's Office

1 Attachment

  • Attachment

    Re ICO response information review request RCC0892138.html

    10K Download

18 December 2019

 

Case Reference Number RCC0892138

 

Dear M Smith

 

Please accept our apologies the response to your internal review was sent
on 9 December 2019, however there was an error in the email address and so
unfortunately this was not delivered.

Please find the response attached.

Yours sincerely
 
 

Sarah Whelan
Senior Information Access Officer, Risk and Governance Department
Corporate Strategy and Planning Service
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow,
Cheshire SK9 5AF
T. 0330 414 6322  F. 01625 524510  [1]ico.org.uk  [2]twitter.com/iconews
For information about what we do with personal data see our [3]privacy
notice.
Please consider the environment before printing this email

References

Visible links
1. http://ico.org.uk/
2. https://twitter.com/iconews
3. https://ico.org.uk/global/privacy-notice/