Canterbury City Council – Dismissed (United Kingdom, 2019)

Dismissed
Information Commissioner's Office1 November 2019United Kingdom
final
Dismissed

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Canterbury City Council was asked to release information about property complaints but withheld it, claiming it was personal data. The ICO agreed, noting that the data was about the complainant and should not be disclosed broadly.

What happened

Canterbury City Council withheld complaint information, citing it as personal data.

Who was affected

The complainant and potentially other individuals involved in the property complaints.

What the authority found

The ICO determined that the complaint information was the complainant's personal data and should not be disclosed to the public.

Why this matters

This case illustrates the importance of recognizing when information is personal data and protecting it accordingly. It serves as a reminder for public authorities to carefully evaluate data requests to ensure privacy is not compromised.

GDPR Articles Cited

Art. 4(1) GDPR
Art. 5(1)(a) GDPR
Art. 6(1)(f) GDPR

National Law Articles

40(2) FOIA
Full Legal Summary
Detailed

The complainant has requested the disclosure of information about complaints in respect of a specified property over a defined period of time. Canterbury City Council (“the Council”) withheld the information because it considered that the information within scope was the personal data of third parties and that disclosure would breach the GDPR principles. The complainant challenged the decision before the ICO. Are the information contained in the complaints sensitive personal data? Would a disclosure to the word art large and not to the complainant only, contravene GDPR principles ? The Commissioner’s decision is that, as the complainant and his family have either owned or occupied the land in question during the time period specified, all the information falling within the scope of the request is in fact the complainant’s own personal data. The ICO has therefore applied Regulation 5(3) of the Environmental Information Regulations 2004 (EIR) which prevents disclosure to the world at large of information including personal data. Also, the ICO considered that the personal data at issue were criminal offence data about the complainant, as described by Article 10 GDPR, and not special category of personal data, as described by Article 9 GDPR. The complainant requested information about members’ registers of declaration of interest. Snowdonia National Park Authority (‘the Authority’) withheld the information requested under section 40(2) of the FOIA. This provision applies as an exemption to the principle of disclosure, if there is third party personal data concerned. The Commissioner found that the Authority had incorrectly applied section 40(2) to the request. The Commissioner required the public authority to disclose the information requested by the complainant, namely, the previous copies of the members’ registered of declaration of interest. The Commission found that the information comprised declaration of personal interest forms completed by members of the

Outcome

Dismissed

The complaint or investigation was dismissed.

Related Enforcement Actions (0)

No other enforcement actions found for Canterbury City Council in UK

This is the only recorded action for this entity in this jurisdiction.

Details

Decision Date

1 November 2019

Authority

Information Commissioner's Office

GDPRhub ID

gdprhub-182

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Canterbury City Council - United Kingdom (2019). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: