We don't know whether the most recent response to this request contains information or not – if you are Tilly P please sign in and let everyone know.

Dear Information Commissioner's Office,

Further to the response you provided to an earlier request for a copy of your ROPA
https://www.whatdotheyknow.com/request/r...

You advised this was currently under review and an updated version will be published on your website shortly.

Can you provide me with a link to the updated version(s) as I cannot find them?, or

In absence of updated versions being available on your website can you provide the updated versions in response to this FOI request?

Can you also provide me with the date the review of these documents commenced.

Yours faithfully,

Tilly P

Information Access Inbox, Information Commissioner's Office

Thank you for contacting the Information Commissioner’s Office. We confirm
that we have received your correspondence.

If you have made a request for information held by the ICO we will contact
you as soon as possible if we need any further information to enable us to
answer your request. If we don't need any further information we will
respond to you within our published, and statutory, service levels. For
more information please visit:

[1]https://ico.org.uk/about-the-ico/our-inf...

If you have raised a new information rights concern - we aim to send you
an initial response and case reference number within 30 days.

If you are concerned about the way an organisation is handling your
personal information, we will not usually look into it unless you have
raised it with the organisation first. For more information please see our
webpage ‘raising a concern with an organisation’ (go to our homepage and
follow the link ‘for the public’). You can also call the number below.

If you have requested advice - we aim to respond within 14 days. 

If your correspondence relates to an existing case - we will add it to
your case and consider it on allocation to a case officer.

Copied correspondence - we do not respond to correspondence that has been
copied to us.

For more information about our services, please see our webpage ‘Service
standards and what to expect' (go to our homepage and follow the links for
‘Report a concern’ and ‘Service standards and what to expect'). You can
also call the number below.

For information about what we do with personal data see our [2]privacy
notice.

If there is anything you would like to discuss with us, please call our
helpline on 0303 123 1113.

Yours sincerely

The Information Commissioner’s Office

Our newsletter

Details of how to sign up for our monthly e-newsletter can be found
[3]here.

Twitter

Find us on Twitter [4]here.

 

References

Visible links
1. https://ico.org.uk/about-the-ico/our-inf...
2. https://ico.org.uk/global/privacy-notice/
3. https://ico.org.uk/about-the-ico/news-an...
4. http://www.twitter.com/ICOnews

Information Commissioner's Office

27 April 2019

 

Case Reference Number IRQ0835765

 

Dear Tilly P,

Thank you for your recent request for information we received your request
on 8 April 2019.
 
I have considered your request. Before I can progress your request, I
would like to ask you to provide additional information so that your
request meets the requirements of a valid request set out at section 8
Freedom of Information Act 2000.  Without this additional information we
are unable to progress your request.
 
Please provide your name for correspondence. For example, any variation of
your title or first name combined with your surname (e.g. Mr Smith or John
Smith) will be sufficient to meet this requirement.
 
Please see our published [1]guidance for more information and examples.
 
If you would like us to progress your request please respond providing the
above information as soon as possible. If we do not receive the additional
information within 20 working days, then we will consider your request to
be withdrawn and you will not receive a response.
 
If you would like to withdraw your request there is no need to respond to
this.
 
If you would like to discuss your request please contact me using the IRQ
case reference number above or by replying to this email and leaving the
subject field unchanged.
 
Thank you for your interest in the work of the Information Commissioner's
Office.
 
Yours sincerely
 

Sarah Whelan
Senior Information Access Officer
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow,
Cheshire SK9 5AF
T. 0330 414 6322  F. 01625 524510  [2]ico.org.uk  [3]twitter.com/iconews
Please consider the environment before printing this email
For information about what we do with personal data see our [4]privacy
notice

References

Visible links
1. https://ico.org.uk/media/for-organisatio...
2. http://ico.org.uk/
3. https://twitter.com/iconews
4. https://ico.org.uk/global/privacy-notice/

Dear Information Commissioner's Office,

It is somewhat concerning you choose to wait 20 plus days to cite s8 FOI, requiring me to submit my full name to satisfy either a delaying tactic, relevance of an exemption or both !

My full name is provided below, please confirm when I should expect a full response if this differs from the original due date.

Yours faithfully,

Tilly Parker

Information Commissioner's Office

9 May 2019

 

Case Reference Number IRQ0835765

 

Dear T Parker

Thank you for your recent request for information and for providing your 
name. 
 
We have considered your request under the Freedom of Information Act 2000.
I acknowledge your comments regarding the delay in the request for your
full name, in accordance with Section 8 of the FOIA. This response has
been provided within 20 working days from the date of your initial
correspondence of the 8 April.
 
Your request
 
'Dear Information Commissioner's Office, Further to the response you
provided to an earlier request for a copy of your ROPA
[1]https://eur03.safelinks.protection.outlo...
You advised this was currently under review and an updated version will be
published on your website shortly. Can you provide me with a link to the
updated version(s) as I cannot find them?, or In absence of updated
versions being available on your website can you provide the updated
versions in response to this FOI request? Can you also provide me with the
date the review of these documents commenced.'
 
Our response
 
We are currently reviewing the processing activities in different
Departments, our aim is to make the record more detailed. We are breaking
down into much more detail every processing activity. Therefore due to
this ongoing work we have not published an updated version on our website.
 
As referenced in your request, we disclosed the record of processing
activity for general processing and law enforcement processing on 28
February 2019. The response to which you refer advised that a revised
version will be published on our website, no timescale was advised. The
ICO is committed to proactively publishing information and this
information will be published in due course.
 
It may help you to know that we have created two basic templates to help
document processing activities; one for controllers and one for
processors. Please find a link to these enclosed.
 
[2]https://ico.org.uk/for-organisations/gui...
 
Next steps
 
I hope this response is clear. If you would like me to clarify anything
about the way your request has been handled please contact me.
 
You can ask us to review the way we have handled your request. Please see
our review procedure
[3]https://ico.org.uk/media/about-the-ico/d...
 
Following our internal review, if you remain dissatisfied with the way we
have handled your request, there is a statutory complaints process and you
can report your concern to the regulator. I have included information
about how to do this separately.
 
Yours sincerely,
 
 

Sarah Whelan
Senior Information Access Officer
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow,
Cheshire SK9 5AF
T. 0330 414 6322  F. 01625 524510  [4]ico.org.uk  [5]twitter.com/iconews
Please consider the environment before printing this email
For information about what we do with personal data see our [6]privacy
notice

References

Visible links
1. https://eur03.safelinks.protection.outlo...
2. https://ico.org.uk/for-organisations/gui...
3. https://ico.org.uk/media/about-the-ico/d...
4. http://ico.org.uk/
5. https://twitter.com/iconews
6. https://ico.org.uk/global/privacy-notice/

Dear Information Commissioner's Office,

Please pass this on to the person who conducts Freedom of Information reviews.

I am writing to request an internal review of Information Commissioner's Office's handling of my FOI request 'ROPA'.

It is extremely disappointing for the UK Regulator to a) ask me to provide my full name 20 days after receiving my request before they would deal with my request and then b) respond with a very poor excuse that an updated version of their ROPA previously provided in (Feb 2019) was not yet ready to be published for the reasons stated.

Ignoring the fact you failed to answer the request in full and the ROPA disclosed in Feb was not a completed ROPA either.

Please provide me with ICOs ROPA for the business functions that have completed this in full, accompanied with the timeline of when work on the ROPA was commenced and due dates for full completion.

As the ICO, the UK Regulated body responsible for ensuring organisations compliance with the GDPR / DPA'18 is still not in a position to disclose and or publish their ROPA at the date of writing please also provide ICO's own GDPR compliance project reports from the date of commencement up to today.

A full history of my FOI request and all correspondence is available on the Internet at this address: https://www.whatdotheyknow.com/request/r...

Yours faithfully,

Tilly P

Information Access Inbox, Information Commissioner's Office

Thank you for contacting the Information Commissioner’s Office. We confirm
that we have received your correspondence.

If you have made a request for information held by the ICO we will contact
you as soon as possible if we need any further information to enable us to
answer your request. If we don't need any further information we will
respond to you within our published, and statutory, service levels. For
more information please visit:

[1]https://ico.org.uk/about-the-ico/our-inf...

If you have raised a new information rights concern - we aim to send you
an initial response and case reference number within 30 days.

If you are concerned about the way an organisation is handling your
personal information, we will not usually look into it unless you have
raised it with the organisation first. For more information please see our
webpage ‘raising a concern with an organisation’ (go to our homepage and
follow the link ‘for the public’). You can also call the number below.

If you have requested advice - we aim to respond within 14 days. 

If your correspondence relates to an existing case - we will add it to
your case and consider it on allocation to a case officer.

Copied correspondence - we do not respond to correspondence that has been
copied to us.

For more information about our services, please see our webpage ‘Service
standards and what to expect' (go to our homepage and follow the links for
‘Report a concern’ and ‘Service standards and what to expect'). You can
also call the number below.

For information about what we do with personal data see our [2]privacy
notice.

If there is anything you would like to discuss with us, please call our
helpline on 0303 123 1113.

Yours sincerely

The Information Commissioner’s Office

Our newsletter

Details of how to sign up for our monthly e-newsletter can be found
[3]here.

Twitter

Find us on Twitter [4]here.

 

References

Visible links
1. https://ico.org.uk/about-the-ico/our-inf...
2. https://ico.org.uk/global/privacy-notice/
3. https://ico.org.uk/about-the-ico/news-an...
4. http://www.twitter.com/ICOnews

Information Commissioner's Office

30 May 2019

 

Case Reference Number RCC0847108

 

Dear T Parker

Thank you for your correspondence dated 29 May 2019.
 
This correspondence will now be treated as a request for an internal
review of the response we provided to your recent request for information
under the Freedom of Information Act 2000.
 
We will aim to respond by 26 June 2019 which is 20 working days from the
day after we received your recent correspondence.  This is in accordance
with our internal review procedures which were provided with our response.
 
Yours sincerely
 

Sarah Whelan
Senior Information Access Officer
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow,
Cheshire SK9 5AF
T. 0330 414 6322  F. 01625 524510  [1]ico.org.uk  [2]twitter.com/iconews
Please consider the environment before printing this email
For information about what we do with personal data see our [3]privacy
notice

 
 

References

Visible links
1. http://ico.org.uk/
2. https://twitter.com/iconews
3. https://ico.org.uk/global/privacy-notice/

Information Commissioner's Office

01 June 2019
 
Case Reference Number RCC0847108
 
 
Review of response to information request
 
 
I write further to your email of 29 May 2019 in which you requested a
review of the handling of your request dealt with under the reference
number IRQ0835765.  I am the Group Manager in the Information Access
service team and I have been asked to review the way we handled your
request for information. I can confirm that I have had no prior
involvement in the handling of this request.
 
Your information request
 
 
“08 April 2019 11:39 To: Information Access Inbox Subject: Freedom of
Information request - ROPA Dear Information Commissioner's Office, Further
to the response you provided to an earlier request for a copy of your ROPA
https://eur03.safelinks.protection.outlo...
You advised this was currently under review and an updated version will be
published on your website shortly. Can you provide me with a link to the
updated version(s) as I cannot find them?, or In absence of updated
versions being available on your website can you provide the updated
versions in response to this FOI request? Can you also provide me with the
date the review of these documents commenced. Yours faithfully, Tilly P”
 
Our response
 
 
My colleague Sarah Whelan responded to your information request on 9 May
2019 and stated:
 
“We are currently reviewing the processing activities in different
Departments, our aim is to make the record more detailed. We are breaking
down into much more detail every processing activity. Therefore due to
this ongoing work we have not published an updated version on our website.
 
As referenced in your request, we disclosed the record of processing
activity for general processing and law enforcement processing on 28
February 2019. The response to which you refer advised that a revised
version will be published on our website, no timescale was advised. The
ICO is committed to proactively publishing information and this
information will be published in due course.
 
It may help you to know that we have created two basic templates to help
document processing activities; one for controllers and one for
processors. Please find a link to these enclosed.
 
[1]https://ico.org.uk/for-organisations/gui...
 

Your information review request
 
 
You wrote to us on 29 May 2019 and stated:
 
“To: Information Access Inbox Subject: Internal review of Freedom of
Information request - ROPA Dear Information Commissioner's Office, Please
pass this on to the person who conducts Freedom of Information reviews. I
am writing to request an internal review of Information Commissioner's
Office's handling of my FOI request 'ROPA'. It is extremely disappointing
for the UK Regulator to a) ask me to provide my full name 20 days after
receiving my request before they would deal with my request and then b)
respond with a very poor excuse that an updated version of their ROPA
previously provided in (Feb 2019) was not yet ready to be published for
the reasons stated. Ignoring the fact you failed to answer the request in
full and the ROPA disclosed in Feb was not a completed ROPA either. Please
provide me with ICOs ROPA for the business functions that have completed
this in full, accompanied with the timeline of when work on the ROPA was
commenced and due dates for full completion. As the ICO, the UK Regulated
body responsible for ensuring organisations compliance with the GDPR /
DPA'18 is still not in a position to disclose and or publish their ROPA at
the date of writing please also provide ICO's own GDPR compliance project
reports from the date of commencement up to today.”
 
 
Our internal review
 
 
As requested I have conducted an internal review of your information
request. I will address each of your points of dissatisfaction in turn.
 
Firstly you were dissatisfied that you were asked to provide your full
name and in particular with the time frame which was taken for my
colleague Sarah Whelan to request this. You state that it took 20 days for
this to occur. Under Section 8 of The Freedom of Information Act (FOIA)
2000 in order for a request for information to be valid, a full name must
be supplied. Ms Whelan’s request to you was made 19 calendar days and 14
working days after you submitted your request. Under FOIA we have 20
working days to respond to any information request received and I find
that Ms Whelan was correct to ask for your full name.
 
I also find that 14 working days from receipt of your request was in
plenty of time to reply to your request within the statutory time frame. I
also note that you were concerned this request would impact on the time
frame within which you could expect a reply from The Information
Commissioners Office (ICO). The date of your original request being 8
April 20 working days from this is 7 May which would have been the
statutory deadline had this been a valid information request. You
confirmed your full name on 30 April which gave a statutory deadline of 30
May. I note that you received your full response to the information
request on 9 May. This is both within the statutory timelines and reflects
good service as it did not unnecessarily prolong your response. I find
that your complaint is not upheld in respect of this point.
 
In relation to your assertion that it was a “poor excuse” that Ms Whelan
stated the ROPA’s are not ready for publication having already published
this in Feb 2019: Ms Whelan did explain in her response that each
processing activity is currently being reviewed and broken down into much
more detail and that this will take some time to complete. At this time
there is no known timescale for the completion of this. I find in this
respect that your information request was answered correctly and your
complaint is not upheld.
 
In relation to your request for the ICO’s ROPA for business functions that
have completed this in full and a timeline when ROPA work commenced and
due dates for completion: this is a new request for information in
addition to your original request and will be logged and acknowledged as a
new complaint and responded to by a member of the Information Access Team.
 
In relation for information on GDPR compliance project reports from the
date of commencement up to today: this is also a new request for
information and will be dealt with by a member of the Information Access
Team.
 
This concludes my internal review and all matters have been addressed.
 
Complaint procedure
 
If you are dissatisfied with the outcome of this review you can make a
formal complaint with the ICO in its capacity as the regulator of The
Freedom of Information Act 2000. Please follow the link below to submit
your complaint:

[2]https://ico.org.uk/concerns/

 
 
Yours sincerely
 
 
 
 
 
 
 

Elizabeth Baxter
Information Access Group Manager
 
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow,
Cheshire SK9 5AF
T. 0330 3131840  F. 01625 524510  [3]ico.org.uk  [4]twitter.com/iconews
For information about what we do with personal data see our [5]privacy
notice
Please consider the environment before printing this email

 
 

References

Visible links
1. https://ico.org.uk/for-organisations/gui...
2. https://ico.org.uk/concerns/
3. http://ico.org.uk/
4. https://twitter.com/iconews
5. https://ico.org.uk/global/privacy-notice/

Information Commissioner's Office

13 June 2019

 

Case Reference Number IRQ0846576

 

Dear T Parker

Request for Information
 
Thank you for your correspondence dated 29 May 2019.
 
Your request is being dealt with in accordance with the Freedom of
Information Act 2000. We will respond promptly, and no later than 26 June
2019 which is 20 working days from the day after we received your request.
 
[When using e-mail]
Should you wish to reply to this email, please be careful not to amend the
information in the ‘subject’ field. This will ensure that the information
is added directly to your case. However, please be aware that this is an
automated process; the information will not be read by a member of our
staff until your case is allocated to a request handler.
 
Yours sincerely
 

Sarah Whelan
Senior Information Access Officer
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow,
Cheshire SK9 5AF
T. 0330 414 6322  F. 01625 524510  [1]ico.org.uk  [2]twitter.com/iconews
Please consider the environment before printing this email
For information about what we do with personal data see our [3]privacy
notice

References

Visible links
1. http://ico.org.uk/
2. https://twitter.com/iconews
3. https://ico.org.uk/global/privacy-notice/

Information Commissioner's Office

3 Attachments

3 July 2019

 

Case Reference Number IRQ0846576

 

Dear T Parker,

I write further to your 29 May 2019 email in which you submitted an
information request to the ICO. We have dealt with your request under the
Freedom of Information Act 2000 (FOIA) and our response is below.
 
Your request
 
In your email you asked;

“Please provide me with ICOs ROPA for the business functions that have
completed this in full, accompanied with the timeline of when work on the
ROPA was commenced and due dates for full completion. As the ICO, the UK
Regulated body responsible for ensuring organisations compliance with the
GDPR / DPA'18 is still not in a position to disclose and or publish their
ROPA at the date of writing please also provide ICO's own GDPR compliance
project reports from the date of commencement up to today.”

Our response
 
I can confirm we hold information within the scope of your request. I have
attached a copy of our records of processing activities. There are two
documents, one covering our general processing activities and the other
covering our processing for law enforcement purposes. We do not hold a
timeline for the completion of these documents. I can also clarify that
whilst these documents aren’t currently published on our website we have
previously disclosed these documents in response to information requests.
 
It may be helpful if I add that our ROPAs are working documents subject to
review and amendments. As you will be aware from Ms Whelan’s response we
are currently in the process of expanding upon the information in the
attached. Our Information Management and Compliance team are leading this
work and will be consulting internally with different business functions
in due course.
 
In response to the part of your request which asks for the ICO’s GDPR
compliance reports, I have attached a scanned document which contains our
Change Programme project monthly reports from November 2016 to June 2018
when the project was completed. You will see that some information has
been redacted from these reports because it does not fall within the scope
of your request. For clarity I can confirm that no information which falls
within the scope of your request has been withheld.

Please accept my apologies for the fact that this response is late. I hope
the information provided is helpful.

Next steps
 
If you are dissatisfied with the response you have received and wish to
request a review of our decision or make a complaint about how your
request has been handled you should write to the Information Access team
at the address below or e-mail [1][ICO request email].

Your request for internal review should be submitted to us within 40
working days of receipt by you of this response. Any such request received
after this time will only be considered at the discretion of the
Commissioner.
 
If having exhausted the review process you are not content that your
request or review has been dealt with correctly, you have a further right
of appeal to this office in our capacity as the statutory complaint
handler under the legislation. To make such an application, please visit
the ‘Concerns’ section of our website to make a Freedom of Information Act
or Environmental Information Regulations complaint online.
 
A copy of our review procedure is available here
[2]https://ico.org.uk/media/1883/ico-review....
 
Yours sincerely
 
Joanne Wright
Senior Information Access Officer
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow,
Cheshire SK9 5AF
T. 0330 414 6664   F. 01625 524510 
 
 
 

References

Visible links
1. mailto:[ICO request email]
2. https://ico.org.uk/media/1883/ico-review...

Dear Information Commissioner's Office,

Thank you for your response.

For clarity, I would be grateful if you could confirm the response provided in terms of 'General ROPA' is complete and accurately reflects the ICO's General Processing of Personal Data as at the date of my request and the date associated with this version when it accurately reflected the ICO's General Processing of Personal Data?

Yours faithfully,

Tilly P

Information Access Inbox, Information Commissioner's Office

Thank you for contacting the Information Commissioner’s Office. We confirm
that we have received your correspondence.

If you have made a request for information held by the ICO we will contact
you as soon as possible if we need any further information to enable us to
answer your request. If we don't need any further information we will
respond to you within our published, and statutory, service levels. For
more information please visit:

[1]https://ico.org.uk/about-the-ico/our-inf...

If you have raised a new information rights concern - we aim to send you
an initial response and case reference number within 30 days.

If you are concerned about the way an organisation is handling your
personal information, we will not usually look into it unless you have
raised it with the organisation first. For more information please see our
webpage ‘raising a concern with an organisation’ (go to our homepage and
follow the link ‘for the public’). You can also call the number below.

If you have requested advice - we aim to respond within 14 days. 

If your correspondence relates to an existing case - we will add it to
your case and consider it on allocation to a case officer.

Copied correspondence - we do not respond to correspondence that has been
copied to us.

For more information about our services, please see our webpage ‘Service
standards and what to expect' (go to our homepage and follow the links for
‘Report a concern’ and ‘Service standards and what to expect'). You can
also call the number below.

For information about what we do with personal data see our [2]privacy
notice.

If there is anything you would like to discuss with us, please call our
helpline on 0303 123 1113.

Yours sincerely

The Information Commissioner’s Office

Our newsletter

Details of how to sign up for our monthly e-newsletter can be found
[3]here.

Twitter

Find us on Twitter [4]here.

 

References

Visible links
1. https://ico.org.uk/about-the-ico/our-inf...
2. https://ico.org.uk/global/privacy-notice/
3. https://ico.org.uk/about-the-ico/news-an...
4. http://www.twitter.com/ICOnews

Information Commissioner's Office

24 September 2019

 

Case Reference Number IRQ0846576

 

Dear T Parker,

I write further to your email of 12 September 2019.
 
I can confirm that the documents which we provided in response to your
previous request were the records of the ICO's processing activities as
held at the time of your request. 

I hope this information is helpful.

Yours sincerely
 
Joanne Wright
Senior Information Access Officer
 
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow,
Cheshire SK9 5AF
T. 0330 414 6664   F. 01625 524510 

 

We don't know whether the most recent response to this request contains information or not – if you are Tilly P please sign in and let everyone know.