Freedom of Information: Ensuring Compliance

Under the Freedom of Information Act requests for information must be responded to in 20 working days in most circumstances (see below).

Timely disclosure of information under the Freedom of Information Act 2000 (FOI Act) is crucial for upholding transparency and accountability in public institutions. Failure to release requested information within statutory timescales can undermine trust and hinder public scrutiny.

A repeated failure to respond in 20 working days can lead to regulatory action by the Information Commissioner.

In this article we will discuss processes and key milestones for ensuring compliance with FOI timescales.

Contents

________________________________________________________________________________________________

About the Author
Michael is an expert in governance and information governance, with many years’ experience developing and improving freedom of information systems and processes. He has worked in this field across the public sector including at Board level. This experience has made him the ideal lead trainer for WuDo Solutions’ five star rated Freedom of Information course.

________________________________________________________________________________________________

Freedom of Information Processes

Establish Clear Internal Procedures

Develop comprehensive internal procedures outlining the process for handling FOIA requests, including the steps involved, responsible personnel, and timelines for response. Clearly define roles and responsibilities to avoid delays and ensure accountability.

Prioritise FOI Requests

Implement a prioritisation system to manage FOIA requests based on their complexity and potential impact. Prioritise requests that involve urgent matters or public interest issues to ensure timely response and compliance with statutory deadlines.

Allocate Sufficient Resources

Although it can feel like a burden complying with FOI requests is a great way to engage with stakeholders. Allocate adequate staff, time, and resources to handle FOI requests promptly and effectively. Ensure that personnel responsible for processing requests are properly trained and equipped with the necessary tools and knowledge to expedite the process.

Utilise Technology and Automation

Leverage technology and automation tools to streamline the FOI request process, from initial submission to final response. You can implement electronic request systems, document management software, and automated workflows to facilitate efficient communication and document retrieval. This can be very helpful when you are chasing people for information needed to respond to requests.

Conduct Regular Training and Awareness Programmes

Provide ongoing training and awareness programs to educate staff about their obligations under the FOI Act and best practices for handling requests. Promote a culture of transparency and accountability within the organisation to encourage compliance and timely disclosure of information.

Establish Effective Communication Channels

Maintain open and transparent communication channels with requesters to provide updates on the status of their requests and address any concerns or queries promptly. Establish clear points of contact and communication protocols to facilitate smooth interaction throughout the process.

Most requestors will appreciate updates on progress with their requests, especially if they are likely to need close to 20 working days to respond. It will also help manage relationships if, on rare occasions, you take longer than you should to respond.

Monitor Performance and Compliance

Regularly monitor performance metrics and compliance with statutory timescales for responding to FOIA requests. Conduct internal audits and reviews to identify bottlenecks, inefficiencies, or areas for improvement and take corrective actions as necessary.

Collaborate with Stakeholders

Collaborate with relevant stakeholders, including legal advisors, information governance teams, and other public authorities, to exchange best practices, share resources, and address common challenges in handling FOI requests. Foster partnerships and knowledge-sharing networks to enhance efficiency and effectiveness.

This is important is because:

  • requests may ask for information containing personal data

  • requests may come from MPs, journalists or other people

  • there may be some sensitivities related to the information requested

You will need to work with others to navigate complex requests and ensure people are comfortable with complying with their statutory duties.

Remember everyone should be treated equally under the FOI Act. Just because someone is a public figure or in the media does not entitle them to special treatment.

Review and Update Policies

Regularly review and update FOIA policies, procedures, and guidance documents to reflect changes in legislation, case law, and best practice. Ensure that policies are aligned with organizational objectives and values while prioritising transparency and accountability.

Emphasise Proactive Disclosure

Promote proactive disclosure of information by routinely publishing relevant documents, reports, and datasets on your website or other accessible platforms. By making information readily available to the public, organisations can reduce the need for formal requests and promote transparency.

 

Freedom of Information Compliance Timeline

________________________________________________________________________________________________

Enjoying this content?
Get articles like this direct to your inbox with our free newsletter. Full of articles, news and resources with all our content accessible in one place. Plus subscribers get exclusive content, priority access to events, and exclusive special offers. You can unsubscribe any time and we won’t use your data for anything else.

Sign Up Here:

__________________________________________________________

Timeline for Responding to a Freedom of Information Request

In order to comply with requests within 20 working days you should have a procedure that breaks down a response timeline into key milestones. The exact timings will vary organisation by organisation, depending on their own internal structure and processes. However, it may look something like this

Day 1: Receipt of the Request

One of the key ways of ensuring timely compliance is to recognise requests as soon as they arrive. Not everyone does, or can be required to, make a request to a specific email or postal address.

Once you receive the request:

  • log the request in your FOI tracking system and assign a unique reference number.

  • acknowledge receipt of the request to the requester, confirming the reference number and outlining the expected response timeframe.

Day 2-3: Initial Assessment

It is also important to promptly review the request to determine its scope, clarity, and complexity. The first step is to identify the information requested and assess whether it falls within the scope of the FOI Act.

A lot of requests can also be closed at this stage:

  • you obviously don’t have the information

  • the information is already in the public domain

  • the request would obviously take longer than the statutory limit

  • it is not a FOI request at all – for example someone could be making a subject access request

  • It is a very simple request you can answer straight away. You might, for example, have responded to a request for the same information very recently

Closing requests quickly can reduce the average time you take to respond to complaints, which helps demonstrate compliance if the Information Commissioner needs to look into your FOI processes.

At this stage you should also work out if the request needs clarification or there may be costs involved. In these circumstances you can pause the clock while you are getting further information from the requestor.

Day 4-10: Search and Retrieval of Information

As this stage for outstanding FOI requests you initiate the process of locating and retrieving the relevant information requested. You will need to coordinate with relevant departments or personnel to gather the necessary documents, records, or data. The custodians of information will need to conduct thorough searches across electronic and physical repositories to ensure all relevant information is identified.

Even if an exemption may apply you will need to have a copy of the information. Why? If the Information Commissioner gets a complaint about a refusal to share the information they may need to see it in order to decide if your decision was correct.

You should be prepared to chase people for information if they do not respond promptly.

Day 11-15: Evaluation and Consideration of Exemptions

You will need to evaluate the identified information against the exemptions outlined in the FOI Act. Subject matter experts or custodians of records are likely to have raised concerns they may have about releasing the information requested

If an exemption does apply consider the options for redaction of the information rather than simply refusing the request. Remember, for public interest exemptions you will need to explain why the exemption applies.

Day 16-18: Drafting the Response

Prepare a draft response to the FOI request, including the requested information or any withheld information, along with explanations for any redactions or exemptions applied.

It is likely you will have a standard template letter that you will adapt. Ensure the response is clear, accurate, and complies with the requirements of the Freedom of Information Act, and any relevant guidance or policies. For example, you will need to explain what a person should do if they are unhappy with the response, and remind people of their right to complain to the Information Commissioner.

Day 19-20: Review and Respond

Conduct a thorough review of the draft response to ensure accuracy, completeness, and compliance with legal requirements. Release the response to the requester through the designated communication channel (email, postal mail, etc.). Remember to provide the requested information in the form or format the requestor ask for.

Remember to explain any exemptions applied, along with reasons for withholding information where applicable.

Post-Response: Follow-Up and Compliance

After the response you may have more to do. You should monitor for any follow-up inquiries or concerns from the requester and respond promptly.

You will also need to update your FOI tracking system to record the outcome of the request and any subsequent actions taken. This will help you respond consistently to any future, similar requests.

Sometimes, if requestors are unhappy with your response, they may ask for an internal review which will be part of your FOI processes too.

Finally you should ensure compliance with record-keeping requirements and local retention schedules for FOI requests and responses.

Conclusion

Timely release of information under the Freedom of Information Act 2000 is essential for fostering transparency, accountability, and public trust in governmental institutions. By implementing effective strategies, allocating sufficient resources, and fostering a culture of compliance and transparency, organizations can ensure timely handling of FOIA requests and uphold their obligations to the public.

________________________________________________________________________________________________

Learn About the Freedom of Information

Gain the practical skills you need work with Freedom of Information and GDPR with these five-star rated training course.

Available in person, online or in-house the focus on practical skills and unique post-course support you get by learning with us will ensure you and your organisation can tackle this key governance activity with confidence.

 

Five star training testimonial