Info Gov

The Information Commissioner's Office (ICO) has revealed that Freedom of Information (FOI) complaints increased by more than 40% in 2025/26, as it pledged to continue taking enforcement action against public authorities that fail to meet their statutory obligations.

Publishing its Annual Report and Financial Statements for 2025/26, the regulator said it received more than 10,000 FOI complaints during the year, reflecting growing demand for access to information despite many public authorities facing continuing resource pressures.

The ICO said it recognised that increasing request volumes were "not necessarily being met with more resources" and had expanded its support for FOI practitioners through newsletters, webinars, self-service resources and sector-specific guidance.

It also published new advice on the use of disclosure platforms to help authorities manage requests more effectively.

The number of data protection complaints also rose significantly, increasing from around 42,300 in 2024/25 to 76,700 in 2025/26.

This change “reflects a significant and sustained increase in demand for our services”, the report said.

Several key performance indicators relating to data protection complaints were rated “red” in the report. This included data showing the watchdog assessed and responded to just 27.4% of complaints within 90 days, well below its target of 80%.

The proportion of complaints handled within six months meanwhile dropped from 98% in 2024/25 to 69% in 2025/26.

Elsewhere, the report highlighted a continued increase in the regulator's use of formal enforcement powers.

The ICO said it had taken more enforcement action under the Freedom of Information Act over the past three years than during the Act's entire previous lifetime. Since introducing its FOI and Transparency Regulatory Manual in 2022, it has issued 24 enforcement notices and 36 practice recommendations.

During 2025/26, the regulator issued eight enforcement notices addressing backlogs affecting almost 2,500 information requests.

The report also underlined the ICO's growing emphasis on proactive publication.

The regulator said it reviewed publication schemes at more than 70 public authorities last year, identifying 18 organisations that did not have compliant schemes on their websites before securing improvements. It said proactive publication could reduce pressure on FOI teams by making routinely requested information publicly available.

On data protection work, the report highlighted a revised public sector regulatory approach that places greater emphasis on warnings, reprimands and enforcement notices to drive lasting improvements, as well as a memorandum of understanding with HM Government committing departments to strengthen data protection governance following a series of high-profile breaches.

The report also outlined progress in implementing the Data (Use and Access) Act 2025, including the introduction of new regulatory powers, reforms to automated decision-making rules and preparations for the ICO's transition to the new statutory Information Commission during 2026/27.

The report comes amid a period of transition for the ICO, moving from a commissioner-led model to a board-led approach. Its commissioner John Edwards resigned in June following allegations of inappropriate humour.

Paul Arnold was appointed as the ICO's first chief executive officer in June last year as part of the restructure and has since taken on the responsibilities of the Information Commissioner following Edwards' departure.

In the report's foreword, Arnold said: "As we transition to the new Information Commission, we are stepping into a new era, and this report sets out the work that has laid the foundations for what comes next."

He said the new Information Commission will bring "greater governance resilience and broader strategic leadership", adding: "Our priorities and our focus remains, as always, on the areas which make the greatest difference to people’s lives. This is what guides our efforts and the Information Commission will continue to champion people’s information rights.”

Also in this section

Jul 13, 2026

Polite, one-off request can still be vexatious where motive is personal, First-tier Tribunal rules

The First-tier Tribunal (General Regulatory Chamber) has upheld the refusal of a freedom of information request to a special educational needs school as vexatious under section 14(1) of the Freedom of Information Act 2000, finding that a polite, factual and non-burdensome request could still amount to a misuse of the Act where its motive was the pursuit of a case against a named individual while…
Jul 13, 2026

Tribunal backs national security refusal of Home Protection Scheme statistics, citing mosaic disclosure risk

The First-tier Tribunal (General Regulatory Chamber) has upheld the Northern Ireland Office's refusal to disclose aggregate application and expenditure figures for its Home Protection Scheme, finding that even high-level statistical data could contribute to a "mosaic" of information capable of assisting terrorists in assessing the protection afforded to police officers and other public servants.
Jul 10, 2026

DWP holds Universal Credit migration code but extracting it would breach FOIA cost limit, tribunal rules

The First-tier Tribunal has overturned an Information Commissioner's finding that the Department for Work and Pensions held no further information about how claimants were selected for Universal Credit managed migration, but ruled that the requester will receive nothing more because the cost of extracting the material would exceed the limit under section 12 of the Freedom of Information Act 2000…
Jul 07, 2026

"Should have held" is not "held": tribunal upholds FCDO not-held response over Somaliland Crown service certificate

The First-tier Tribunal (General Regulatory Chamber) has dismissed an appeal against the Information Commissioner's finding that the Foreign, Commonwealth and Development Office did not hold a copy of a 1955 certificate awarded on behalf of Queen Elizabeth II to a member of the Haud Constabulary in colonial-era Somaliland, concluding on the balance of probabilities that no in-scope information…
Jul 07, 2026

Requester's claim that ICO confused him with his son fails to defeat section 14 vexatiousness finding

The First-tier Tribunal (General Regulatory Chamber) has upheld the Information Commissioner's reliance on section 14(1) of the Freedom of Information Act 2000 to refuse a request about a parish council's data protection registration, finding that the request formed part of a campaign of harassment against the council even though the appellant claimed the requesting history relied on belonged not…
Jul 07, 2026

Late compliance, apology and resource pressures save council from contempt certification over EIR decision notice

The First-tier Tribunal (General Regulatory Chamber) has refused to certify Guildford Borough Council to the Upper Tribunal for contempt over its admitted failure to comply with a substituted decision notice within the required 35 days, finding that the council's late and piecemeal response was capable of constituting contempt but that later compliance, an apology and an explanation grounded in…

InfoGov Masthead Newsletter 800