EU Regulation 2016/679 - Decision Register

ICO / 2023 / 17234/ENFORCEMENT NOTICE

London Borough of Lewisham

Enforcement noticeFreedom of Information Act 200021 March 2023

None

Financial penalty

Enforcement notice, no fine

21 March 2023

Date on the register

Freedom of Information Act 2000

Law relied on

provision not named

Local government

Sector

20 actions on the register

In one line

The ICO issued London Borough of Lewisham with a enforcement notice on 21 March 2023 under the Freedom of Information Act 2000. No financial penalty attaches to it.

01The record

Organisation named
London Borough of Lewisham
Action
Enforcement notice
Date published
21 March 2023
Register year
2023
Provisions cited
Not named in the published notice
Penalty
None (not a financial penalty)
Sector on the register
Local government
ICO register reference
17234
Register status
Published on the ICO enforcement register, 4 September 2026
Notice documents
1 PDF published by the ICO
Sector share of register
20 of 216 actions (9%)
Actions published that year
80
Actions under this law
2
Position on the register
41st of 216, oldest first
Published the same day
This entry alone
Entries for this organisation
2 on this register

02What happened, and where it sits

London Borough of Lewisham received an ICO enforcement notice on 21 March 2023. The Commissioner acted under the Freedom of Information Act 2000. An order to act. An enforcement notice requires the organisation to take, or stop taking, specified steps by a deadline, and failure to comply is itself an offence.

No sum is attached to this action. Enforcement notices are corrective, not financial, which is why London Borough of Lewisham appears on the register without a figure beside it.

London Borough of Lewisham is filed under Local government, which accounts for 20 of the 216 actions on the register (9%). In 2023 the ICO published 80 enforcement actions in total, 21 of them enforcement notices. 2 actions on the register name Freedom of Information Act 2000.

Counted from the oldest entry forward, this is the 41st of 216 actions on the register and the 6th of 20 in Local government. London Borough of Lewisham appears 2 times on this register: enforcement notice on 21 March 2023 and reprimand on 16 August 2023. The ICO publishes one document for this action, 205 KB in total: "Lewisham Council enforcement notice". It is the authority for everything on this page.

03The ICO's own account

The London Borough of Lewisham has been served with an Enforcement Notice as a result of the evidence seen by the Commissioner about its performance in relation to its statutory duties under the Freedom of information Act (FOIA). Specifically:

At the end of 2022, the total number of overdue requests was 338, 221 of which were over 12 months old. The oldest unanswered request was submitted to the Council on 3 December 2020; and

The failure by the London Borough of Lewisham to provide sufficient mitigation for its performance in its response to our enquiries regarding this performance.

The Enforcement Notice requires the London Borough of Lewisham to provide responses to requests that are over 20 working days old and devise and publish an action plan to mitigate delays.

Quoted from the ICO's published register entry (ico.org.uk), Open Government Licence v3.0.

The law behind this action

Freedom of Information Act 2000

The Freedom of Information Act 2000 gives a right of access to information held by public authorities. The ICO enforces it separately from data protection law.

All 2 register actions under Freedom of Information Act 2000

What a enforcement notice does

An order to act. An enforcement notice requires the organisation to take, or stop taking, specified steps by a deadline, and failure to comply is itself an offence.

Published notice

04Other entries for London Borough of Lewisham

1 further entry on the register
OrganisationDateActionLawPenaltySector
London Borough of Lewisham16 Aug 2023ReprimandUK GDPR-Local government

05Nearest entries on the register

All Local government actions/All 2023 actions/The full register

06Work out an exposure of your own

Provenance and independence

Source: ICO enforcement register (ico.org.uk/action-weve-taken/enforcement/), as published on 4 September 2026. Contains public sector information licensed under the Open Government Licence v3.0.

GDPRFine.com is an independent tracker of ICO enforcement. It is not affiliated with, endorsed by or connected to the Information Commissioner's Office, and it uses no ICO branding. Where the ICO's own wording is reproduced it is quoted and attributed; everything else on these pages is our own summary of the published record.

The ICO's register held 222 entries on that date. 6 of them are prosecutions of named individuals, with ages and home towns in the ICO's own summary. This tracker indexes organisations, so those 6 are excluded and every count on these pages is out of 216. They remain on the ICO's own register.

An entry says what the Commissioner did on the date shown. It is not a statement about the organisation today, and the ICO can amend or remove a register entry at any time. Amounts and provisions are as published by the ICO; where the published notice does not state a figure or name a provision, these pages say so rather than filling the gap. This entry was read from the register page at https://ico.org.uk/action-weve-taken/enforcement/2023/03/london-borough-of-lewisham/.

Register: ico.org.uk/action-weve-taken/enforcement/. Corrections: questions@gdprfine.com.

REGISTER UPDATED 2026-04-28