InfoGov

Latest Analysis

See all

Events

  • FOI Practitioner Certificate - Act Now

    FOI Practitioner Certificate - Act Now

    12 Oct 2026 9:30 am
    Online (Live)
    From £2199 plus VAT

    This foundation course is designed for those wishing to acquire detailed knowledge of the FOIA and develop the practical skills to enable them to become a more effective FOI Officer.

  • Understanding GDPR Accountability and Conducting Data Protection Audits - Act Now

    Understanding GDPR Accountability and Conducting Data Protection Audits - Act Now

    13 Oct 2026 10:00 am
    Online (Live)
    From £449 plus VAT

    This practical workshop will examine the concept of accountability in detail. Delegates will learn how to use accountability to plan and execute successful data protection audits to support organisational improvement in line with the requirements of UK data protection law.

  • AI and Information Governance: Bridging Innovation and Compliance - Act Now

    AI and Information Governance: Bridging Innovation and Compliance - Act Now

    20 Oct 2026 10:00 am
    Online (Live)
    From £449 plus VAT

    In this workshop, we delve into the evolving realms of 'AI' and 'Machine Learning,' exploring their integration into both public and private sectors. Emphasis is placed on addressing contemporary challenges, with a focus on GDPR and other information governance and records management issues. Participants will leave with practical strategies for approaching Machine Learning and AI, heightened awareness of key resources, and insights into current best practices, ensuring they stay abreast of this rapidly advancing field.

  • How to do a Data Protection Impact Assessment - Act Now

    How to do a Data Protection Impact Assessment - Act Now

    20 Oct 2026 10:00 am
    Online (Live)
    From £449 plus VAT

    On this full day workshop, we will go through every aspect of a DPIA. From best practice on designing a template DPIA through to determining 'high risks' and what may or may not require ICO consultation.

  • Advanced Certificate in GDPR Practice - Act Now

    Advanced Certificate in GDPR Practice - Act Now

    21 Oct 2026 9:30 am
    Online (Live)
    From £2199 plus VAT

    The Advanced Certificate in GDPR Practice is designed for experienced Data Protection Officers seeking to refine and expand their DPO skills and expertise. The course comprises of a rigorous set of engaging masterclasses that teach you to dissect complex data protection scenarios and give practical compliance advice. This immersive experience will empower you with the skills and confidence needed to tackle the most challenging data protection projects within your organisation.

  • UK GDPR Practitioner Certificate - Act Now

    UK GDPR Practitioner Certificate - Act Now

    21 Oct 2026 9:30 am
    Online (Live)
    From £2199 plus VAT

    For all those undertaking the DPO role, this foundation level certificate covers the essential knowledge and practical skills required to successfully navigate the UK data protection landscape.

Events

FOI Practitioner Certificate - Act Now FOI Practitioner Certificate - Act Now
12 Oct 2026 9:30 am
Artificial Intelligence
Online (Live)
Price: From £2199 plus VAT
Understanding GDPR Accountability and Conducting Data Protection Audits - Act Now Understanding GDPR Accountability and Conducting Data Protection Audits - Act Now
13 Oct 2026 10:00 am
Data Protection
Online (Live)
Price: From £449 plus VAT
How to be a Senior Information Risk Owner - Act Now How to be a Senior Information Risk Owner - Act Now
15 Oct 2026 10:00 am
Governance
Online (Live)
Price: From £449 plus VAT
AI and Information Governance: Bridging Innovation and Compliance - Act Now AI and Information Governance: Bridging Innovation and Compliance - Act Now
20 Oct 2026 10:00 am
Artificial Intelligence | Governance
Online (Live)
Price: From £449 plus VAT
How to do a Data Protection Impact Assessment - Act Now How to do a Data Protection Impact Assessment - Act Now
20 Oct 2026 10:00 am
Data Protection
Online (Live)
Price: From £449 plus VAT
Advanced Certificate in GDPR Practice - Act Now Advanced Certificate in GDPR Practice - Act Now
21 Oct 2026 9:30 am
Data Protection
Online (Live)
Price: From £2199 plus VAT
UK GDPR Practitioner Certificate - Act Now UK GDPR Practitioner Certificate - Act Now
21 Oct 2026 9:30 am
Data Protection
Online (Live)
Price: From £2199 plus VAT
How to Handle a Subject Access Request - Act Now How to Handle a Subject Access Request - Act Now
22 Oct 2026 10:00 am
Data Protection
Online (Live)
Price: From £449 plus VAT
Data Ethics - Act Now Data Ethics - Act Now
22 Oct 2026 10:00 am
Governance | Data Protection
Online (Live)
Price: From £449 plus VAT
The New Data (Use and Access) Act - Act Now The New Data (Use and Access) Act - Act Now
22 Oct 2026 10:00 am
Data Protection
Online (Live)
Price: From £249 plus VAT
Working with Childrens Data - Act Now Working with Childrens Data - Act Now
26 Oct 2026 10:00 am
Data Protection
Online (Live)
Price: From £449 plus VAT
AI Governance Practitioner Certificate - Act Now AI Governance Practitioner Certificate - Act Now
29 Oct 2026 9:30 am
Artificial Intelligence | Governance
Online (Live)
Price: From £2399 plus VAT
FOIA Update - Act Now FOIA Update - Act Now
29 Oct 2026 10:00 am
Freedom of Information
Online (Live)
Price: From £449 plus VAT
Law Enforcement Data Processing and Part 3 of the DPA 2018 - Act Now Law Enforcement Data Processing and Part 3 of the DPA 2018 - Act Now
29 Oct 2026 10:00 am
Data Protection
Online (Live)
Price: From £449 plus VAT
The General Data Protection Regulation - Act Now The General Data Protection Regulation - Act Now
02 Nov 2026 10:00 am
Data Protection
Online (Live)
Price: From £449 plus VAT
FOI Practitioner Certificate - Act Now FOI Practitioner Certificate - Act Now
03 Nov 2026 9:30 am
Artificial Intelligence
Online (Live)
Price: From £2199 plus VAT
UK GDPR Practitioner Certificate - Act Now UK GDPR Practitioner Certificate - Act Now
04 Nov 2026 9:30 am
Data Protection
Online (Live)
Price: From £2199 plus VAT
Introduction to GDPR Webinar - Act Now Introduction to GDPR Webinar - Act Now
04 Nov 2026 10:00 am
Data Protection
Online (Live)
Price: From £149 plus VAT
Introduction to FOI Webinar - Act Now Introduction to FOI Webinar - Act Now
04 Nov 2026 11:30 am
Freedom of Information
Online (Live)
Price: From £149 plus VAT
Introduction to Records Management Webinar - Act Now Introduction to Records Management Webinar - Act Now
04 Nov 2026 1:30 pm
Records Management
Online (Live)
Price: From £149 plus VAT
Risk Management in IG - Act Now Risk Management in IG - Act Now
05 Nov 2026 10:00 am
Governance
Online (Live)
Price: From £449 plus VAT
Environmental Information Regulations - Act Now Environmental Information Regulations - Act Now
09 Nov 2026 10:00 am
Artificial Intelligence | Freedom of Information
Online (Live)
Price: From £449 plus VAT
How to do Data Flow Mapping - Act Now How to do Data Flow Mapping - Act Now
10 Nov 2026 10:00 am
Records Management
Online (Live)
Price: From £449 plus VAT
Information & Records Management Practitioner Certificate - Act Now Information & Records Management Practitioner Certificate - Act Now
12 Nov 2026 10:00 am
Records Management
Online (Live)
Price: From £2199 plus VAT
How to Share Personal Data - Act Now How to Share Personal Data - Act Now
16 Nov 2026 10:00 am
Data Protection
Online (Live)
Price: From £449 plus VAT
UK GDPR Practitioner Certificate - Act Now UK GDPR Practitioner Certificate - Act Now
17 Nov 2026 9:30 am
Data Protection
Online (Live)
Price: From £2199 plus VAT
AI and Information Governance: Bridging Innovation and Compliance - Act Now AI and Information Governance: Bridging Innovation and Compliance - Act Now
17 Nov 2026 10:00 am
Artificial Intelligence | Governance
Online (Live)
Price: From £449 plus VAT
Introduction to GDPR Webinar - Act Now Introduction to GDPR Webinar - Act Now
17 Nov 2026 10:00 am
Data Protection
Online (Live)
Price: From £149 plus VAT
Data Ethics - Act Now Data Ethics - Act Now
24 Nov 2026 10:00 am
Governance | Data Protection
Online (Live)
Price: From £449 plus VAT
AI Governance Practitioner Certificate - Act Now AI Governance Practitioner Certificate - Act Now
26 Nov 2026 9:30 am
Artificial Intelligence | Governance
Online (Live)
Price: From £2399 plus VAT
Data Controller, Processor or Joint Controller: What am I? - Act Now Data Controller, Processor or Joint Controller: What am I? - Act Now
27 Nov 2026 10:00 am
Data Protection | Governance
Online (Live)
Price: From £449 plus VAT
How to do Records Management for GDPR - Act Now How to do Records Management for GDPR - Act Now
01 Dec 2026 10:00 am
Records Management
Online (Live)
Price: From £449 plus VAT
EIR Exceptions - Act Now EIR Exceptions - Act Now
01 Dec 2026 10:00 am
Freedom of Information
Online (Live)
Price: From £449 plus VAT
Public Sector Insights: Information Governance - Blake Morgan Public Sector Insights: Information Governance - Blake Morgan
03 Dec 2026 10:00 am
Data Protection
Online (Live)
Price: Free
How to be a Senior Information Risk Owner - Act Now How to be a Senior Information Risk Owner - Act Now
07 Dec 2026 10:00 am
Governance
Online (Live)
Price: From £449 plus VAT
Understanding GDPR Accountability and Conducting Data Protection Audits - Act Now Understanding GDPR Accountability and Conducting Data Protection Audits - Act Now
08 Dec 2026 10:00 am
Data Protection
Online (Live)
Price: From £449 plus VAT
How to Increase Cyber Security in your Organisation - Act Now How to Increase Cyber Security in your Organisation - Act Now
10 Dec 2026 10:00 am
Artificial Intelligence
Online (Live)
Price: From £449 plus VAT
Cyber Security for DPOs - Act Now Cyber Security for DPOs - Act Now
11 Dec 2026 10:00 am
Security
Online (Live)
Price: From £449 plus VAT
FOI: Contracts and Commercial Confidentiality - Act Now FOI: Contracts and Commercial Confidentiality - Act Now
11 Dec 2026 10:00 am
Freedom of Information | Artificial Intelligence
Online (Live)
Price: From £449 plus VAT
How to Handle a Subject Access Request - Act Now How to Handle a Subject Access Request - Act Now
15 Dec 2026 10:00 am
Data Protection
Online (Live)
Price: From £449 plus VAT

Lead Story

External auditors issue key governance recommendations over council cyber attack

The Royal Borough of Kensington and Chelsea Council has been told it must improve its IT systems and cyber security training after a cyber attack last year which disrupted several services for months and led to the theft of residents' data.
October 07, 2026
External auditors issue key governance recommendations over council cyber attack

News

Campaigners invoke UK GDPR to challenge NHS Palantir platform

October 02, 2026
Campaign group 38 Degrees has coordinated legal objections from more than 44,000 people asking NHS England to stop the Federated Data Platform (FDP), which runs on Palantir software, from sharing, storing or using their health records, the Guardian has reported.
See all

Courts, Tribunals and Regulatory Decisions

Click here to see all

Section 166 offers no route to challenge ICO decisions not to investigate under new complaints framework, tribunal rules

The First-tier Tribunal has struck out an application seeking to force the Information Commissioner to investigate a subject access complaint, in a decision that confirms the ICO's harm-based complaints prioritisation framework can dispose of a complaint without any engagement with the data controller and still count as an outcome beyond the reach of section 166 of the Data Protection Act 2018.
Sep 22, 2026

Sector-wide hostility not enough for section 38(2) NCND "endangering effect" exemption

The Home Office was not entitled to neither confirm nor deny whether it held audit records for the Envigo RMS Belton animal research facility, the First-tier Tribunal has ruled, finding that evidence of a hostile environment around animal research did not establish the causal link to endangerment that section 38(2) of the Freedom of Information Act 2000 requires.
Sep 18, 2026

Tribunal upholds NI Prison Service refusal to reveal body scanner hit rate despite "wider public interest"

The First-tier Tribunal has dismissed an appeal against the Northern Ireland Prison Service's (NIPS) refusal to disclose how many X-ray body scans of prisoners produced a positive indication and how many led to the recovery of contraband, finding that the figures would be likely to prejudice the prevention of crime and the maintenance of prison security under section 31 of the Freedom of Information Act 2000.
Sep 14, 2026

Ofqual overturns ICO order to disclose braille exam error notifications by consent

The Information Commissioner has conceded a First-tier Tribunal appeal by Ofqual and agreed that event notifications submitted by exam boards about errors in braille versions of GCSE and A level papers can be withheld under section 31(1)(g) of the Freedom of Information Act 2000, reversing a decision notice in which he had rejected the exemption and ordered disclosure.
Sep 14, 2026

Tribunal overturns "manifestly unreasonable" refusal after council's email tally falls apart

The First-tier Tribunal has ordered North Tyneside Council to respond afresh to a request for records about a school boundary fence after finding the council was not entitled to refuse it as manifestly unreasonable under regulation 12(4)(b) of the Environmental Information Regulations 2004, and that the evidence it relied on to show a burdensome course of dealings did not bear scrutiny.
Sep 14, 2026

Tribunal upholds council's s31 refusal over parish council collapse emails despite "no investigation" challenge

The First-tier Tribunal has dismissed an appeal against East Lindsey District Council's refusal to disclose correspondence about the collapse of North Thoresby, Grainsby and Waithe Parish Council, holding that the council's handling of conduct complaints against parish councillors was a function within section 31(2) of the Freedom of Information Act 2000 even though no formal investigation into the collapse had ever taken place.
Sep 14, 2026

Tribunal backs NPCC cost-limit refusal of request on Chinese-made police surveillance cameras

The First-tier Tribunal has dismissed an appeal against the National Police Chiefs' Council's refusal to confirm whether it holds information on the proportion of Chinese-manufactured surveillance cameras used by UK police forces, finding that the cost of establishing whether the information existed would exceed the appropriate limit under section 12(2) of the Freedom of Information Act 2000.
Sep 11, 2026

Requester cannot sidestep FOIA cost limit by asking for raw databases, tribunal rules

The First-tier Tribunal has dismissed an appeal against the Financial Ombudsman Service's refusal of a request for all its staff training and guidance material, rejecting the appellant's argument that the service could have complied within the cost limit by simply handing over its databases and repositories, while finding that the service breached its duty to provide advice and assistance under section 16 of the Freedom of Information Act 2000.
Sep 09, 2026

Upper Tribunal breaks with Moss and recognises article 10 right to receive information in FOIA appeals

The Upper Tribunal has held that First-tier and Upper Tribunals are not bound by precedent to automatically reject the limited right to receive information under article 10 (“Freedom of Expression”) of the European Convention on Human Rights (ECHR) recognised by the Grand Chamber in Magyar Helsinki Bizottság v Hungary departing from the 2020 decision in Moss v Information Commissioner ( that had led tribunals to dismiss such arguments for six years.
Sep 01, 2026

DfE "acting in concert" argument on repeated requests rejected as campaigner's appeals fail

The First-tier Tribunal has dismissed three appeals brought by campaigner Dr Robert Abrahart against the Department for Education, upholding two findings that his requests were vexatious under section 14(1) of the Freedom of Information Act 2000 and confirming in the third that emails withheld under sections 35 and 42 were exempt, while rejecting the department's attempt to treat requests from co-campaigners as repeated requests under section 14(2).
Aug 27, 2026

High Court upholds Met Police 90-day WhatsApp auto-deletion policy despite ICO concerns

The High Court has dismissed a judicial review challenge to Metropolitan Police guidance requiring officers to activate WhatsApp's disappearing messages function on force-issued devices, upholding the lawfulness of a policy that automatically deletes conversations after 90 days despite documented concerns from the Information Commissioner's Office and the force's own data protection impact assessment.
Aug 03, 2026

Tribunal upholds Cabinet Office refusal to confirm whether ministers declared criminal convictions

The First-tier Tribunal has upheld, by a majority, the Cabinet Office's refusal to confirm or deny whether any serving government ministers declared criminal convictions during their appointment process, dismissing an appeal brought by Times journalist George Greenwood while ruling that the Information Commissioner erred in law by treating the relevant exemption as absolute rather than qualified.
Aug 03, 2026

Section 166 application succeeds as tribunal finds ICO left complaints unresolved

The First-tier Tribunal (General Regulatory Chamber) has ordered the Information Commissioner to take further steps and issue a written outcome on a data protection complaint after finding that the regulator invited the complainant to return if dissatisfied with the department's response, received her further material but then did not demonstrate that it had concluded the complaints.
Jul 30, 2026

Tribunal rejects Cleveland Police blanket withholding of child protection guidance

The First-tier Tribunal has partly overturned an Information Commissioner's decision allowing Cleveland Police to withhold the entirety of its Child Protection Guidance, ruling that the force was not entitled to refuse the whole document under the law enforcement exemption and ordering disclosure of a redacted version that reveals the majority of its contents.
Jul 28, 2026

IPT awards damages against MI5 for first time over surveillance of journalist's phone data

The Investigatory Powers Tribunal (IPT) has ordered MI5 and the Police Service of Northern Ireland to pay £10,000 each in damages to former BBC Northern Ireland home affairs correspondent Vincent Kearney, after finding that a series of communications data authorisations targeting him between 2006 and 2014 were not in accordance with the law and disproportionate, in breach of his rights under Articles 8 and 10 of the European Convention on Human Rights.
Jul 23, 2026

Polite, one-off request can still be vexatious where motive is personal, First-tier Tribunal rules

The First-tier Tribunal (General Regulatory Chamber) has upheld the refusal of a freedom of information request to a special educational needs school as vexatious under section 14(1) of the Freedom of Information Act 2000, finding that a polite, factual and non-burdensome request could still amount to a misuse of the Act where its motive was the pursuit of a case against a named individual while criticising the Information Commissioner for relying on undisclosed allegations the requester had no…
Jul 13, 2026

Tribunal backs national security refusal of Home Protection Scheme statistics, citing mosaic disclosure risk

The First-tier Tribunal (General Regulatory Chamber) has upheld the Northern Ireland Office's refusal to disclose aggregate application and expenditure figures for its Home Protection Scheme, finding that even high-level statistical data could contribute to a "mosaic" of information capable of assisting terrorists in assessing the protection afforded to police officers and other public servants.
Jul 13, 2026

DWP holds Universal Credit migration code but extracting it would breach FOIA cost limit, tribunal rules

The First-tier Tribunal has overturned an Information Commissioner's finding that the Department for Work and Pensions held no further information about how claimants were selected for Universal Credit managed migration, but ruled that the requester will receive nothing more because the cost of extracting the material would exceed the limit under section 12 of the Freedom of Information Act 2000 despite neither the department nor the Commissioner had relied on this exemption.
Jul 10, 2026

"Should have held" is not "held": tribunal upholds FCDO not-held response over Somaliland Crown service certificate

The First-tier Tribunal (General Regulatory Chamber) has dismissed an appeal against the Information Commissioner's finding that the Foreign, Commonwealth and Development Office did not hold a copy of a 1955 certificate awarded on behalf of Queen Elizabeth II to a member of the Haud Constabulary in colonial-era Somaliland, concluding on the balance of probabilities that no in-scope information was held even though the department might once - and perhaps should - have held it.
Jul 07, 2026

Requester's claim that ICO confused him with his son fails to defeat section 14 vexatiousness finding

The First-tier Tribunal (General Regulatory Chamber) has upheld the Information Commissioner's reliance on section 14(1) of the Freedom of Information Act 2000 to refuse a request about a parish council's data protection registration, finding that the request formed part of a campaign of harassment against the council even though the appellant claimed the requesting history relied on belonged not to him but to his son, who lives at the same address and shares his name.
Jul 07, 2026

Late compliance, apology and resource pressures save council from contempt certification over EIR decision notice

The First-tier Tribunal (General Regulatory Chamber) has refused to certify Guildford Borough Council to the Upper Tribunal for contempt over its admitted failure to comply with a substituted decision notice within the required 35 days, finding that the council's late and piecemeal response was capable of constituting contempt but that later compliance, an apology and an explanation grounded in resource constraints meant certification would be disproportionate.
Jul 07, 2026

Must Read

Slide background

Why AI must power
the next wave
of Social Housing
delivery

 

 

 

 

For years, national housing policy has wrestled with the tension between
aspiration and delivery. Targets have been set and missed; waiting lists
have grown longer,and the most vulnerable people in our society have
been left with fewer safe,affordable places to call home. Technology has a
key role to play to address this situation writes Andrew Lloyd
of Search Acumen.

Why AI must power
the next wave
of Social Housing
delivery

For years, national housing policy has wrestled with the
tension between aspiration and delivery. Targets have been
set and missed; waiting lists have grown longer, and the
most vulnerable people in our society have been left with fewer
safe, affordable places to call home. Technology has a
key role to play to address this situation writes Andrew Lloyd
of Search Acumen.

Webinar

The Data Use and Access Act 2025 introduces a new right to complain, which will come into effect on 19 June 2026. This right elevates data protection complaints from an internal process issue to a matter of legal compliance, with all organisations requiring a consistent, robust, and well-documented complaints framework in place.

Ward Hadaway partner Phil Tompkins and solicitor Lucy Baxter discuss the main points of this new right to complain in our on-demand video.

Sponsored articles

InfoGov - news, analysis, case updates, resources, jobs and training for public sector data protection, FOI, cyber security and surveillance professionals.

Latest Jobs

Job search

Login Form

InfoGov Masthead Newsletter 800