Skip to main content

Court of Appeal rules ICO acted lawfully in subject access request complaint litigation

  • Date 10 October 2023
  • Type News

The UK Information Commissioner has welcomed the Court of Appeal’s ruling on a long-running court battle over a subject access request complaint.

In a judgment published today, the court upheld an earlier High Court decision by Mr Justice Mostyn to dismiss a claim by Mr Ben Delo that the ICO had unlawfully failed to determine his complaint about a subject access request he had made to Wise Payments Limited.

The case raised important questions about how far the ICO has to go in investigating and reaching a decision on the merits of every complaint.

The ICO welcomes the Court of Appeal’s confirmation that the ICO has broad discretion in deciding the extent to which it investigates each complaint and is entitled to reach and express a view on the complaint, without necessarily determining whether there has been an infringement.

The ICO also welcomes the court’s decision that the ICO acted lawfully in deciding the outcome of Mr Delo’s complaint.

Information about what to expect when making a complaint to the ICO is available on our website, where we explain the possible outcomes.

Notes to editors
  • The Information Commissioner’s Office (ICO) is the UK’s independent regulator for data protection and information rights law, upholding information rights in the public interest, promoting openness by public bodies and data privacy for individuals.
  • The ICO has specific responsibilities set out in the Data Protection Act 2018 (DPA2018), the United Kingdom General Data Protection Regulation (UK GDPR), the Freedom of Information Act 2000 (FOIA), Environmental Information Regulations 2004 (EIR), Privacy and Electronic Communications Regulations 2003 (PECR) and a further five acts and regulations.
  • The ICO can take action to address and change the behaviour of organisations and individuals that collect, use, and keep personal information. This includes criminal prosecution, non-criminal enforcement and audit.
  • To report a concern to the ICO telephone call our helpline on 0303 123 1113, or go to ico.org.uk/concerns.