The Cabinet Office – Dismissed (United Kingdom, 2020)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The UK's Information Commissioner's Office decided that the Cabinet Office didn't have to confirm or deny if it had information about discussions between The Queen and the Prime Minister. This decision was based on rules protecting communications with the Sovereign. It highlights how certain information can be kept confidential under specific exemptions.
What happened
The Cabinet Office refused to confirm or deny holding information about discussions between The Queen and the Prime Minister.
Who was affected
The request concerned communications involving The Queen and the Prime Minister, Boris Johnson.
What the authority found
The ICO decided that the Cabinet Office could rely on exemptions to refuse confirming or denying the existence of the requested information.
Why this matters
This case shows how certain exemptions can protect sensitive communications from public disclosure. It emphasizes the balance between transparency and privacy in governmental communications.
GDPR Articles Cited
National Law Articles
The complainant requested information from the Cabinet Office about whether The Queen and the Prime Minister, Boris Jonson had discussed the topics of Brexit or the prorogation of Parliament at their weekly meetings, or had exchanged correspondence on these subjects under The Freedom of Information Act (FOIA) and The Environmental Information Regulations (EIR). The Cabinet Office refused to confirm or deny whether it held any information on the basis of section 37(2) by virtue of section 37(1)(a) (communications with the Sovereign),arguing that confirmation or denial would reveal The Queen's personal data. The complainant challenged the Cabinet Office’s decision before the ICO. The Commissioner had to determine whether the Cabinet Office is entitled, on the basis of the exemption defined by the FOIA and the EIR, to refuse to confirm or deny whether it holds the requested information. The commissioner considered if the Cabinet Office could rely on section 37(2) of the FOIA and on regulation 13 of the EIR to refuse to confirm whether it holds any information falling within the scope of the request. The ICO held that the Cabinet Office can rely on the section 37 (2) FOIA to deny whether it holds information in the scope of the request; the former defines that information is exempt if it relates to 'communications with the Sovereign' and according to the section 37 (2), the duty to deny does not arise in relations to information which is exempt information defined by subsection 1. The EIR provides that the duty to confirm or deny whether information is held does not arise if it would contravene any of the principles relating to the processing of personal data set out in Article 5 of the GDPR. The Cabinet Office could rely on that section of the regulation if two conditions are met: if the confirmation or denial of having information would constitute the disclosure of a third party’s personal data; and providing this confirmation or denial would contravene one of
Outcome
Dismissed
The complaint or investigation was dismissed.
Related Enforcement Actions (0)
No other enforcement actions found for The Cabinet Office in UK
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. The Cabinet Office - United Kingdom (2020). Retrieved from cookiefines.eu
Last updated: