Information rights and data protection: appeal against the Information Commissioner
Source: gov.uk (2025-07-31)

How to appeal to a tribunal against the Information Commissioner's Office (ICO) or ask the tribunal to direct a response if you have not heard from the ICO.

What you can appeal against

You can appeal if you consider that a decision notice issued made by the Information Commissioner’s Office (ICO) on your freedom of information or other information request is wrong. You can also appeal against certain decisions made under the Data Protection Act 2018.

You can ask the tribunal to direct a response if you have not heard from the ICO 3 months after making a complaint under Section 165 of the Data Protection Act 2018.

Your appeal may relate to a request under:
- freedom of information legislation
- environmental information regulations
You can also appeal to the tribunal if the Information Commissioner serves you (under the Data Protection Act 2018 about your handling of personal data) with:
- an information notice
- an assessment notice
- an enforcement notice
- a penalty notice
- a penalty variation notice
You can also apply to the tribunal to direct the ICO respond to your complaint if you made a complaint that there has been a breach of part 3 or 4 of the Data Protection Act 2018 involving data about you and you have received no outcome or up-date after 3 months .

The tribunal

Your case will be dealt with by a tribunal in the General Regulatory Chamber.

The tribunal is independent of the government, and will listen to both sides of the argument before it reaches a decision.

They may ask to look at the information in question before deciding if you should see it.

If you or your representative is outside the UK and wants to give live video or audio evidence, contact the tribunal (https://www.gov.uk/find-court-tribunal) to request it. Tell the tribunal what country you or the representative is in and what type of evidence is being given. You must do this as soon as possible.

Time limits for appealing

You have 28 days to appeal after the ICO sends you its decision.

If you miss the time limit, you can ask for more time to appeal. Explain why you’re late, and the tribunal will decide if it can still accept your case.

How to appeal

Complete the relevant General Regulatory Chamber (First-tier Tribunal) form (https://www.gov.uk/government/collections/general-regulatory-chamber-first-tier-tribunal-forms).

Include the ICO’s decision notice or enforcement notice and any other relevant documents, such as the date of your complaint to the ICO in Data Protection cases.

Clearly say why you think the ICO’s decision was wrong.

Send the form to xxx@xxx.xx (mailto:xxx@xxx.xx) or:

General Regulatory ChamberPO Box 11230LeicesterLE1 8FQ

Telephone: xx-xxxx-xxxx Monday to Friday, 8:30am to 5pm Find out about call charges (https://www.gov.uk/call-charges)

Tribunal staff can explain how the process works, but they cannot give you legal advice.

What happens next

The tribunal will write to you about the next steps.

Find out more about tribunal hearings and decisions (https://www.gov.uk/guidance/general-regulatory-chamber-tribunal-hearings-and-decisions).

Previous decisions

Search the decisions database (http://informationrights.decisions.tribunals.gov.uk//Public/search.aspx) to see how judges made decisions in previous cases.

Legislation and rules

You can find the right to appeal to the tribunal in the following laws and regulations:
- section 57 of the Freedom of Information Act 2000 (http://www.legislation.gov.uk/ukpga/2000/36/section/57)
- sections 79 and 162 of the Data Protection Act 2018 (http://www.legislation.gov.uk/ukpga/2018/12/contents)
- regulation 18 of The Environmental Information Regulations 2004 (http://www.legislation.gov.uk/uksi/2004/3391/regulation/18/made)
- The INSPIRE Regulations 2009 (http://www.legislation.gov.uk/uksi/2009/3157/contents/made)
- The Privacy and Electronic Communications Regulation 2003 (http://www.legislation.gov.uk/uksi/2003/2426/contents/made)
- The Data Protection (Monetary Penalties) (Maximum Penalty and Notices) Regulations 2010 (http://www.legislation.gov.uk/uksi/2010/31/contents/made)
- The Re-use of Public Sector Information Regulations 2015 (http://www.legislation.gov.uk/uksi/2015/1415/contents/made)
You can find the right to apply for a direction to the ICO in:
- Section 166 of the Data Protection Act 2018 (http://www.legislation.gov.uk/ukpga/2018/12/section/166/enacted)
Read detailed rules on how your case will be handled in the:
- General Regulatory Chamber procedure rules (https://www.gov.uk/government/publications/general-regulatory-chamber-tribunal-procedure-rules)
- practice note on closed material in information rights cases (https://www.judiciary.uk/wp-content/uploads/2014/07/practicenote-closed-material.pdf)