Feeds

Freedom of Information Act 'making a difference' to UK

Info Commissioner pleased with progress

  • alert
  • submit to reddit

SANS - Survey on application security programs

The Information Commissioner's Office (ICO) has issued new guidelines for the public sector on how to deal with the Freedom of Information (FOI) Act and data protection requirements.

In the first annual report from the ICO since the FOI Act came into force, the Information Commissioner, Richard Thomas, says that it is already clear that the new laws are making a difference, and that he is encouraged by the progress so far.

"At every level of public life, a great deal of material has been published which has never before seen the light of day...The success of these laws will not be judged by how many requests are made or complaints upheld, but by the readiness of public bodies to release information, proactively or on request," he writes.

On data protection, he acknowledges that "We can't do this because of data protection" is too often invoked by "lazy or incompetent organisations" as an excuse not to do something. He adds: "The law very rarely stops a valid activity altogether. Rather it regulates how information should be handled so that there are no surprises and no mistakes."

He notes that although there have been complaints about disclosure refusals (over 1,000 to date) the majority of refusals are not challenged.

However, around half of the complaints filed cover procedural issues, suggesting that public bodies are still not totally clear about their obligations and responsibilities under the Act. This has prompted the ICO to collate new top-level guidelines for public bodies dealing with requests for information.

The guidelines (which you can read in full on this pdf) broadly encourage public bodies to be positive and proactive about releasing information. "Don't wait to be asked" says one tip, "Supply additional information, where it is useful" says another. It also recommends being extremely clear about the reasons when a request has to be refused, and reminds organisations that the 20 day deadline must be met.

"The principles and rights available under freedom of information laws provide a powerful reminder that governments serve the people, not the other way round," Thomas says. We can't help but agree with that sentiment, even if there are 210 reasons to refuse a request for information.

You can read the full report (also a pdf) here. ®

Related stories

210 reasons to refuse a Freedom of Information request
Firemen challenge £31m planned IT bill
General election debate misses purpose of ID cards

3 Big data security analytics techniques

More from The Register

next story
Dropbox defends fantastically badly timed Condoleezza Rice appointment
'Nothing is going to change with Dr. Rice's appointment,' file sharer promises
Audio fans, prepare yourself for the Second Coming ... of Blu-ray
High Fidelity Pure Audio – is this what your ears have been waiting for?
Did a date calculation bug just cost hard-up Co-op Bank £110m?
And just when Brit banking org needs £400m to stay afloat
MtGox chief Karpelès refuses to come to US for g-men's grilling
Bitcoin baron says he needs another lawyer for FinCEN chat
Zucker punched: Google gobbles Facebook-wooed Titan Aerospace
Up, up and away in my beautiful balloon flying broadband-bot
Apple DOMINATES the Valley, rakes in more profit than Google, HP, Intel, Cisco COMBINED
Cook & Co. also pay more taxes than those four worthies PLUS eBay and Oracle
It may be ILLEGAL to run Heartbleed health checks – IT lawyer
Do the right thing, earn up to 10 years in clink
prev story

Whitepapers

Securing web applications made simple and scalable
In this whitepaper learn how automated security testing can provide a simple and scalable way to protect your web applications.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Top three mobile application threats
Learn about three of the top mobile application security threats facing businesses today and recommendations on how to mitigate the risk.
Combat fraud and increase customer satisfaction
Based on their experience using HP ArcSight Enterprise Security Manager for IT security operations, Finansbank moved to HP ArcSight ESM for fraud management.