How we comply with the legislation we regulate


The aim of this page is to explain how the Information Commissioner’s Office (ICO) fulfils its obligations under the legislation we regulate. It explains how you can access information we hold, including your personal data and the standards we adhere to with regard to that information. It also explains what you can do if you think we have not complied with your rights under the legislation we regulate.


Our approach

For full details about how we fulfil our obligations under the legislation we regulate see our internal compliance and information security strategy.


Access to information that we hold

We publish a lot of the information we hold, on this website. Before you make a written request please check the following pages:

Guide to information
The ICO routinely publishes information about us, our spending, our priorities, our decisions, our policies and procedures, information in lists and registers, and about our services. We publish this information in accordance with the model publication scheme. This section helps you find that information.

Our disclosure log
View our responses to previous requests made under the Freedom of Information Act.

News and events
See our latest press releases, our views on current topics and developments, as well as information on conferences and events.

Frequently asked questions
We’ve compiled a list of FAQs about how we comply.


Still can’t find what you are looking for?

You can make a request by emailing the internal compliance department or writing to us at:

Internal Compliance Department
Information Commissioner's Office
Wycliffe House
Water Lane

For more information about how we handle information requests, please see our Request handling procedure.

What we need from you
Be specific about what you are requesting. Make sure that you provide us with a focused request giving, where appropriate, a relevant timeframe. For example, 2008/09, January to April 2010, or any reference number you may have. And please let us know how you would like the information to be provided to you eg by post or email.

For guidance on making an information request to public authorities, see our page on how to access official information.

What you should expect from us
We aim to acknowledge your request, or ask for more information to clarify your request, within two days of receiving it. We will respond to your freedom of information request within 20 working days from the day after we receive it (the statutory timeframe). We will respond to your request for your own personal information within 40 calendar days from the day we receive your request.

Not satisfied?

If you are dissatisfied with our response to your information request made under the Freedom of Information Act or the Environmental Information Regulations you have a right to have that decision reviewed by us. For information on how we respond to requests for review, please see our internal review procedure.

If you are dissatisfied with our response to your request for personal information you have a right to complain to us.

For further information please see our responsible information request charter.

Other useful items

  • News and events

    Find out the latest news on data protection and freedom of information.

  • What we cover

    From data protection and electronic communications to freedom of information and environmental regulations.

  • Taking action

    The ICO can take action to ensure public authorities meet their responsibilities when dealing with information requests. Read about what we can do and the action we have taken.