Lambeth London Borough Council

The complainant has requested information in relation to the London Borough of Lambeth Council’s (the Council) preparation for GDPR. The Commissioner’s decision is that the Council has breached section 10(1) of the Act by not complying with section 1(1). The Commissioner requires the public authority to provide a response, in accordance with the Act, to the requests relating to a) GDPR readiness and b) security incidents. The public authority must take these steps within 35 calendar days of the date of this decision notice. Failure to comply may result in the Commissioner making written certification of this fact to the High Court pursuant to section 54 of the Act and may be dealt with as a contempt of court.