FOI Exemptions & Review Rights - London

Technology and Data England 4 Minutes Read · published February 02, 2026 Flag of England

In London, England the Freedom of Information framework for local public bodies is governed by the Freedom of Information Act 2000 and related regulations; this guide explains common exemptions, how to request internal reviews, and how to escalate to the Information Commissioner. It is written for residents, journalists and organisations dealing with boroughs, the Greater London Authority and other London public bodies. The article summarises enforcement tools, practical action steps to challenge refusals, and where to find official forms and contacts for London authorities.

How FOI and exemptions apply in London

Public authorities in London respond to FOI requests under the Freedom of Information Act 2000 and the Environmental Information Regulations 2004 where environmental information is concerned. Common exemptions include national security, personal data, commercial interests and law enforcement. The statutory text and exemption list are set out in the Act and in regulations; consult the Act for exact wording and exceptions.[1]

Many exemptions are subject to public interest tests that can make withheld material disclosable.

Requesting reviews and escalation

If you disagree with a response, first request an internal review from the public authority. If unsatisfied after internal review, you may complain to the Information Commissioner, who can issue decision or enforcement notices. Timetables and detailed complaint steps are published by the ICO. [2]

Start with a clear, dated internal review request citing the original request reference.

Penalties & Enforcement

This section summarises enforcement powers, sanctions, and review routes relevant to London public bodies.

  • Monetary penalties: specific fixed fines for ordinary FOI refusals are not set out on the FOI Act page; enforcement is principally by ICO notices and remedies rather than routine fixed fines. See the ICO and primary legislation for statutory detail.[1]
  • Enforcement notices: the ICO can issue decision and enforcement notices ordering disclosure or other remedies; the ICO guidance describes these powers and how they are applied.[2]
  • Criminal offences: the Act creates offences (for example, altering records to avoid disclosure) with criminal penalties; consult the primary legislation for exact sections and penalties.[1]
  • Escalation: typical route is initial request, internal review, ICO complaint, then tribunal or court challenges where permitted; exact time limits and procedural steps are set by the ICO and the Act pages.[2]
  • Enforcer and complaints contact: the Information Commissioner enforces FOI across England, including London; local enforcement often begins with the public authority's FOI team or transparency officer. See the Greater London Authority and local borough FOI pages for contact points and submission methods.[3]
If a public body fails to provide an internal review, complain to the ICO promptly.

Applications & Forms

FOI requests: most London public bodies accept FOI requests by email, online form or post and do not charge for making a request; fees can apply where the cost of compliance exceeds statutory limits (see legislation).
Internal review: no universal national form is required; authorities commonly provide an internal review request form or accept a written request by email—check the authority's FOI page for the method.
ICO complaint: the ICO provides an online complaint form and guidance on time limits for complaints to the Commissioner.[2]

Common violations and typical outcomes

  • Unjustified refusal citing a non-applicable exemption — outcome: internal review and possible ICO decision notice requiring disclosure.
  • Failure to respond within statutory time — outcome: ICO complaint can lead to enforcement action; exact remedies depend on circumstances.
  • Withholding redacted records without justification — outcome: ICO may order disclosure or clearer justification of redactions.
Document and preserve all correspondence and dates to support any appeal or ICO complaint.

Action steps

  • Make a clear FOI request to the relevant London authority, quoting your preferred contact and a reasonable deadline.
  • If refused, request an internal review in writing within the authority's stated timescale.
  • If unsatisfied, submit a complaint to the ICO using the official complaint process.
  • Retain copies of all correspondence and note dates to support appeals.

FAQ

How long does a public authority have to respond to an FOI request?
They must normally respond promptly and within 20 working days from receipt; consult the authority's page for confirmation.
Can I request environmental information differently?
Yes, environmental information is handled under the Environmental Information Regulations 2004 which has similar but distinct rules and exceptions.
How do I appeal if I disagree with an ICO decision?
You may be able to appeal ICO decisions to the First-tier Tribunal; check the ICO decision notice for appeal routes and time limits.

How-To

How to challenge a refusal from a London public body:

  1. Check the authority's FOI response and note the reasons and exemption cited.
  2. Request an internal review in writing to the authority's FOI or transparency team, citing the original request reference.
  3. If unsatisfied with the review, submit a complaint to the Information Commissioner using the ICO online complaint process.
  4. If the ICO issues a decision you dispute, consider appeal routes such as the First-tier Tribunal and seek legal advice if needed.

Key Takeaways

  • FOI in London follows the Freedom of Information Act 2000 and ICO enforcement pathways.
  • Start with an internal review, then escalate to the ICO if needed.

Help and Support / Resources


  1. [1] Freedom of Information Act 2000 - legislation.gov.uk
  2. [2] Information Commissioners Office - make a complaint
  3. [3] Greater London Authority - Freedom of Information