FOI and EIR Exemptions for Health Data - Bristol
Introduction
This guide explains how Freedom of Information (FOI) and the Environmental Information Regulations (EIR) apply to health and welfare data held by Bristol, England public bodies. Health and welfare records often include personal data, special category data and third-party information, so many requests will be qualified by exemptions and exceptions. The article summarises the legal framework, how decisions are made, the enforcing bodies and step-by-step actions you can take when requesting anonymised statistics or aggregated public-health information from Bristol public authorities.
How FOI, EIR and Data Protection interact
Local authorities such as Bristol City Council process FOI and EIR requests under UK law but exclude or withhold personal health information where the public authority considers disclosure would breach data protection law. See the council's FOI guidance for request procedure and contact details[1], and the Information Commissioner's Office (ICO) guidance on personal data exemptions and EIR applications for explanation of the legal tests[2].
Penalties & Enforcement
Sanctions for wrongful handling of FOI/EIR requests and unlawful disclosure of protected health data are primarily administrative and supervisory rather than set fines by the council page itself.
- Monetary fines: not specified on the cited page for FOI/EIR enforcement by the council[1].
- Regulatory action: the ICO can issue decision and enforcement notices; specific monetary penalties for data-protection breaches are addressed by the ICO guidance[2].
- Enforcer: Bristol City Council Freedom of Information or Information Governance team handles initial requests and reviews; the ICO enforces compliance nationally[1][2].
- Inspection and complaint pathways: request internal review from the council, then complain to the ICO if unsatisfied; specific time limits for internal review or ICO complaint are not specified on the cited council page[1].
- Appeals/review: internal review by the council, followed by an ICO complaint and possible ICO decision notice; exact statutory time limits where they apply are not specified on the cited council page[1].
- Defences and discretion: public-interest balancing tests, legitimate interests and "reasonable excuse" defences may be considered; detailed tests and examples are set out in ICO guidance[2].
Common violations and typical outcomes
- Unlawful disclosure of identifiable health records โ outcome: remedial action and ICO involvement; monetary amounts not specified on the council page[1].
- Failure to carry out public-interest test โ outcome: ICO decision notice possible, details on ICO page[2].
- Refusal to disclose aggregated/anonymised data without adequate reasoning โ outcome: internal review and ICO complaint route available[1].
Applications & Forms
Bristol City Council accepts FOI and EIR requests via its online request form and by email; the council FOI page provides the submission method and contact details (see citation)[1]. Where a specific official form or fee is required for particular datasets it will be listed on that page; if no form is required or none is published this is indicated on the council FOI guidance[1].
Practical Steps to Request Health or Welfare Data
Follow clear steps to improve your chances of receiving useful information while respecting privacy and legal exemptions.
- Define the data you need and prefer aggregated, anonymised or statistical outputs rather than individual records.
- Submit an FOI or EIR request to Bristol City Council using the online form or contact email on the council FOI page[1].
- Explicitly state format, date range and whether you accept redaction or aggregation to avoid personal data disclosure.
- If refused, request an internal review from the council; if still dissatisfied, complain to the ICO as described in ICO guidance[2].
FAQ
- Can I request individual medical records from the council?
- Generally no; individual medical records are likely to be withheld as personal data and special category data. Requests for aggregated or anonymised statistics are more likely to be released. See the council FOI guidance and ICO guidance on personal data[1][2].
- Will anonymised health statistics be provided?
- Often yes, when the council can reliably anonymise or aggregate data so individuals are not identifiable; if anonymisation is not possible the information may be withheld with reasons provided in the refusal notice[1].
- How do I appeal a refusal?
- First ask the council for an internal review; if you remain dissatisfied you can complain to the ICO. Contact details and procedure are on the council FOI page and ICO guidance[1][2].
How-To
- Identify the exact statistics or aggregated fields you need and why.
- Check existing published data on Bristol's open data and public-health pages before requesting.
- Use the council FOI/EIR online form to submit a clear request; state you accept anonymisation or aggregation.
- If refused, request an internal review from the council within the timeframe stated on their FOI page.
- If internal review upholds the refusal, submit a complaint to the ICO for independent review.
Key Takeaways
- Health and welfare information often qualifies as personal or special category data and is commonly withheld.
- Request aggregated or anonymised statistics to improve disclosure chances.
- Use internal review, then the ICO, if you disagree with a council refusal.
Help and Support / Resources
- Bristol City Council - Freedom of Information
- Information Commissioners Office - Official information and FOI
- Bristol City Council - Data protection and privacy