You are here:
Freedom of information: responding to requests
Know what to do if you receive a request for information under the Freedom of Information Act, including when you can charge for a response or refuse the request. Use our template letters to help you respond to requests.
Contents
The Freedom of Information Act 2000 (FOIA) is different legislation from the UK General Data Protection Regulation (UK GDPR). FOIA practice has not changed following Brexit.
Dealing with these requests can be tricky. If you have any further questions that aren't covered by this article, contact the Information Commissioner’s Office (ICO) directly.
What a valid request looks like
Under the FOIA, the request must:
It's likely that most written requests for information will meet these criteria. Even if a request isn't valid, you must provide advice and assistance to the requester, such as by telling them what they need to
- 2021 exams: how to respond to subject access requests (SARs)
- 'Cheat sheet' for data protection officers
- Child protection records: transfer guidance
- Data protection impact assessments
- Data protection impact assessments: role of the DPO
- DPO's report to governors: template
- Email security: sending personal data
- GDPR: using technology to deliver remote learning
- How to respond to subject access requests in the summer holidays
- International data transfers under the UK GDPR
- Parents' right to access their child's educational record
- Pupil records: transferring to other schools or education providers
- Role of the data protection officer (DPO)
- Schools' reporting requirements
- 'Special category' data under the UK GDPR
- Subject access requests: guidance and template forms
- Taking and displaying pupil photos and information
- Taking documents home: securing personal data
- QuickRead: The UK GDPR
- The UK GDPR: summary
- UK GDPR: at what age can pupils give consent?
- UK GDPR audit
- UK GDPR: choose your ‘lawful basis’ for processing personal data
- UK GDPR: ensuring your suppliers are compliant
- UK GDPR mythbuster
- UK GDPR: personal data breach procedure
- UK GDPR: seeking consent for processing personal data
- UK GDPR: sharing safeguarding information
- UK GDPR: staff briefing
- UK GDPR: staff posters and handout
- UK GDPR: template record of processing activities
- UK GDPR: using apps and online services with pupils
More from The Key
Bitesize training with a big impact
Our on-demand training has your whole board covered and lets them learn at a time and pace that suits them.
Help your new governors hit the ground running with our expertly-designed induction training, and our role-specific courses support your link governors develop key skills and confidence in their role.
New eLearning: DSL refresher training
Your DSL’s training should be refreshed at least once every 2 years.
Designed in collaboration with safeguarding experts, our 2.5 hour online refresher training course reminds DSLs how to put their knowledge into practice, with in-depth, real-world scenarios.
- Need-to-know: DfE publishes new statutory guidance on the cost of school uniform 19 Nov 2021 08:51
- Need-to-know: STPCD 2021 published 4 Oct 2021 10:30
- In the news: Your weekly round-up for 20 to 27 August 2021 27 Aug 2021 08:00
- In the news: Your weekly round-up for 6 to 13 August 2021 13 Aug 2021 08:00
- In the news: Your weekly round-up for 30 July to 6 August 2021 6 Aug 2021 08:00
The Key has taken great care in publishing this article. However, some of the article's content and information may come from or link to third party sources whose quality, relevance, accuracy, completeness, currency and reliability we do not guarantee. Accordingly, we will not be held liable for any use of or reliance placed on this article's content or the links or downloads it provides. This article may contain information sourced from public sector bodies and licensed under the Open Government Licence v3.0.