The aim of this page is to explain how the Information Commissioner’s Office (ICO) fulfils its obligations under the legislation we regulate. It explains how you can access information we hold, including your personal data and the standards we adhere to with regard to that information. It also explains what you can do if you think we have not complied with your rights under the legislation we regulate.
Access to the information we hold
A lot of the information we hold is published on this website. Before you make a written request please check the following pages:
The information charter outlines the standards that you can expect from the ICO when we request or hold information, including but not limited to personal data about you or your enquiries.
Read full details about how we fulfil our obligations under the legislation we regulate in our internal compliance and information security strategy.
Still can’t find what you are looking for?
You can make a request by emailing the internal compliance department or writing to us at:
Internal Compliance Department
Information Commissioner's Office
For more information about how we handle information requests, please see our Request handling procedure or our request handling performance.
What we need from you
Be specific about what you are requesting. Make sure that you provide us with a focused request giving, where appropriate, a relevant timeframe. For example, 2008/09, January to April 2010, or any reference number you may have. And please let us know how you would like the information to be provided to you eg by post or email.
For guidance on making an information request to public authorities, see our page on how to access official information.
What you should expect from us
We aim to acknowledge your request, or ask for more information to clarify your request, within two days of receiving it. We will respond to your freedom of information request within 20 working days from the day after we receive it (the statutory timeframe). We will respond to your request for your own personal information within 40 calendar days from the day we receive your request.
If you are dissatisfied with our response to your information request made under the Freedom of Information Act or the Environmental Information Regulations you have a right to have that decision reviewed by us. For information on how we respond to requests for review, please see our internal review procedure.
If you are dissatisfied with our response to your request for personal information you have a right to complain to us.
For further information please see our responsible information request charter.