- Enforcing jurisdiction
- United Kingdom · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
DPA case FS50912491 – Dismissed (United Kingdom, 2020)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
The Information Commissioner's Office in the UK dismissed a request for information about a grievance process within the Department of Finance. They decided that the information included personal data that couldn't be shared without violating privacy rules. This matters because it shows the importance of protecting personal information even in public records.
What happened
The Department of Finance refused to disclose personal information related to a grievance process.
Who was affected
Individuals whose names and job roles were included in the grievance process documentation.
What the authority found
The ICO ruled that the requested information was personal data and could not be disclosed without breaching data protection principles.
Why this matters
This decision highlights the need for organizations to carefully consider privacy when handling personal data, even in public inquiries. It reinforces the idea that personal information should remain confidential.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Archived or cached source text retrieved.
Automated check recorded — 18 October 2026.
Processing notes: national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The complainant requested information regarding a grievance process within the Department of Finance in Northern Ireland (the Department) under FOIA. The information included interview notes and statements as well as names, ranks and job roles of interviewees in the evidence gathering process. The Department refused disclosure for reasons of data protection, relying on section 40 (2) FOIA. Does the information in question constitute personal data and would disclosure contravene data protection principles? The ICO decides that the Department correctly refused to disclose the requested information under section 40(2) FOIA, by way of section 40(3A) a. The requested information constitutes personal data and can not be anonymised to prevent identification of data subjects from the data released. The ICO considers Article 6 (1) (f) as a potential basis for processing, confirms legitimate interest and necessity but concludes that the rights and freedoms of the data subjects outweigh the legitimate interest in disclosure. It takes into consideration the extent of a potential disclosure under FOIA (to the wider public), the data subjects’ reasonable expectation of confidentiality and potential stress in case of disclosure.
Outcome
Dismissed
The complaint or investigation was dismissed.
Related Enforcement Actions (0)
No other enforcement actions found for DPA case FS50912491 in UK
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. DPA case FS50912491 - United Kingdom (2020). Retrieved from cookiefines.eu
Last updated: