EU Regulation 2016/679 - Decision Register

ICO REGISTER / LAW/FREEDOM OF INFORMATION ACT 2000

ICO enforcement under Freedom of Information Act 2000

These are ICO actions under the Freedom of Information Act 2000, which gives a right of access to information held by public authorities. It is access-to-information law, separate from data protection.

2

Actions under this law

1% of the register

0

Monetary penalties

0 with a published figure

£0

Penalties published

sum of stated amounts

none

Largest single penalty

2023 to 2023

Span on the register

1 sectors

What this law is

The Freedom of Information Act 2000 gives a right of access to information held by public authorities. The ICO enforces it separately from data protection law.

On this register 2 of 216 actions (1%) name the Freedom of Information Act 2000, mostly as enforcement notices (2 of 2). None of them carries a published monetary figure.

By action type

  • Enforcement notice2 (100%)

By year

By sector

03Every action under this law

2 entries, newest first. 1 carry a page here.
OrganisationDateActionPenaltySector
Shropshire Council9 May 2023Enforcement notice-Local government
London Borough of Lewisham21 Mar 2023Enforcement notice-Local government

04The other laws on this register

05How these fines are worked out

Provenance and independence

Source: ICO enforcement register (ico.org.uk/action-weve-taken/enforcement/), as published on 4 September 2026. Contains public sector information licensed under the Open Government Licence v3.0.

GDPRFine.com is an independent tracker of ICO enforcement. It is not affiliated with, endorsed by or connected to the Information Commissioner's Office, and it uses no ICO branding. Where the ICO's own wording is reproduced it is quoted and attributed; everything else on these pages is our own summary of the published record.

The ICO's register held 222 entries on that date. 6 of them are prosecutions of named individuals, with ages and home towns in the ICO's own summary. This tracker indexes organisations, so those 6 are excluded and every count on these pages is out of 216. They remain on the ICO's own register.

An entry says what the Commissioner did on the date shown. It is not a statement about the organisation today, and the ICO can amend or remove a register entry at any time. Amounts and provisions are as published by the ICO; where the published notice does not state a figure or name a provision, these pages say so rather than filling the gap.

Register: ico.org.uk/action-weve-taken/enforcement/. Corrections: questions@gdprfine.com.

REGISTER UPDATED 2026-04-28