[Home] [Databases] [World Law] [Multidatabase Search] [Help] [Feedback]
	First-tier Tribunal (General Regulatory Chamber)
You are here: BAILII >> Databases >> First-tier Tribunal (General Regulatory Chamber) >> Campbell v Information Commissioner & Anor [2023] UKFTT 885 (GRC) (23 October 2023) URL: http://www.bailii.org/uk/cases/UKFTT/GRC/2023/885.html Cite as: [2023] UKFTT 885 (GRC)

[New search] [Printable PDF version] [Help]

First-tier Tribunal
(General Regulatory Chamber)
Information Rights

		Heard remotely by CVP Heard on: 25 May 2023
		Decision Given On: 23 October 2023

Decision: The appeal is allowed

Substituted Decision Notice: Within 35 days of this decision, His Majesty's Treasury must issue a fresh response to the request that (i) does not rely on section 12 of the Freedom of Information Act 2000 and (ii) communicates all the data contained in the requested file subject to any further exemption(s).

REASONS
1. On 16 December 2020, Mr Campbell made a request to His Majesty's Treasury ("HMT") for information, pursuant to the Freedom of Information Act 2000 ("FOIA"). In full, it reads:

I would like to ask HMT to share the Amyas Morse Loan Charge Review draft that was shared with a small number of HMRC staff under "strictly controlled conditions" and was (apparently) marked-up by hand before being returned to Loan Charge Review Secretariat for factual errors to be corrected.

I originally made an FOI under the following request :

https://www.whatdotheyknow.com/request/selection_of_loan_charge_review#incoming-1692688

In the response to this, HMRC confirmed that they received a printed draft of the Morse Review which was marked-up by hand and returned to the Loan Charge Review Secretariat. I am asking that the supplied draft be shared so that the "factual errors" corrected by the small HMRC team can be ascertained.

Please publish the review draft document in full and in the state it was in before being printed and handed over to the small HMRC team who manually checked it. Unfortunately, HMRC didn't keep a record of the marked-up version they handed back to LCR Secretariat but an electronic version of the draft is obviously available from the computer systems supplied to the HMC staff who were seconded to the independent LCR team.

The paragraph on page 2 of the FOIA response I received from HMRC makes clear that LCR Secretariat has the relevant document version:

"A small number of government officials in HMRC and HM Treasury were provided early sight of the Independent Loan Charge Review under strict and controlled conditions. This was to correct any factual errors ahead of publication and was provided in hard copy. All copies were returned to Sir Amyas Morse and the Review team and HMRC did not retain any copies."

I am asking for the electronic version of the document draft that produced this hard copy to be produced in full.

2. HMT's response dated 18 January 2021 stated that the Review team was independent, and not part of HMT. While HMT had seconded staff to the Review team, that was a separate role. It further referred Mr Campbell to the terms of the review, providing that all the evidence it received would be destroyed at its conclusion. The document he sought would therefore no longer exist in any event. Mr Campbell requested an internal review, observing that the response was inconsistent with those in other related requests^[1]. HMT maintained its position, so Mr Campbell complained to the Commissioner.
3. During the Commissioner's investigation, HMT also sought to rely on section 12 of FOIA, which exempts a public authority from complying with a request if it estimates that doing so would exceed the relevant cost limit of £600.
4. In a Decision Notice^[2] issued on 8 November 2022, the Commissioner agreed that HMT was able to rely on s.12. HMT's case was summarised as follows:

24. During the course of the Commissioner's investigation the complainant advised that he was aware that at least one email address used for the Review remained operational. He sent an email to [named official]@loanchargereview.org.uk and received an automated response which stated that the account was not monitored. The complainant was of the opinion that this meant relevant information may still be held within "@loanchargereview.org.uk" email accounts.

25. HM Treasury subsequently sought advice from its IT provider, an external contractor, since it was unable to access these email accounts, or mailboxes. The IT provider confirmed that an additional charge would be required to conduct searches of these mailboxes. HM Treasury estimated that the searches would take one working day, and the cost would exceed the appropriate limit set out at section 12 of FOIA.

…

34. HM Treasury explained to the Commissioner that the IT provider was responsible for carrying out all administrative tasks associated with mailbox access and permissions. In order to comply with the request HM Treasury would need to submit a formal request to the IT provider to scope the work and produce a detailed cost estimate.

5. The Commissioner noted that costs "other than staff time" could only be included in the estimate if it would be reasonable to do so. The Commissioner considered that inclusion of this cost to be reasonable in this case, because HMT "does not have any business need to access the mailboxes other than for the purpose of responding to this particular information request". The actual cost of the work by the external contractor was not revealed, the Commissioner agreeing with HMT that it is commercially sensitive information, but it was confirmed to be in excess of £600.
6. As the Commissioner agreed that HMT had been entitled to rely on s.12, no consideration was given to the original basis of refusal.
7. Mr Campbell appealed to the Tribunal. Subsequently, HMT wrote to state that it had now located the requested information. Two files had been found dated 4 December 2019, one "time stamped" at 18:20, the other at 18:33. The draft reports they contain are identical. On 10 February 2023 it wrote to state that one or other of the documents was more likely than not the document that was provided as a hard copy to HMRC officials on 9 December 2019, so provided both. This was without prejudice to its position in this appeal that disclosure was not required under FOIA.
8. Mr Campbell was not satisfied with this disclosure. The two documents provided were not the original files, rather newly created PDF files: their metadata showed them to have been created on 8 February 2023 using the application "Acrobat PDFMaker 19 for Word". Mr Campbell argued that his request had been for the original Word files, and requested that they be disclosed in unaltered form. In its reply on 24 February 2023, HMT refused to do so. It considered that provision of the PDF had satisfied the terms of Mr Campbell's request, and gave further reasons why it did not consider it appropriate to disclose the Word files.

The hearing

9. The appeal was heard by CVP, all participants connecting remotely. No adverse technical issues were encountered, and we are satisfied that the appeal was as fairly and effectively heard as if it had taken place entirely within a physical courtroom. Mr Campbell attended in person. Neither of the respondents were represented or in attendance, having previously confirmed that they were willing to rely on their written evidence and submissions. The documents to be considered were agreed to comprise:

a. The Notice of Appeal;

b. The Commissioner's Rule 23 Response;

c. HMT's Rule 23 Response;

d. A bundle of documents prepared by Mr Campbell, of 12 pages;

e. A bundle of documents prepared by HMT, of 91 pages;

f. Further written submissions by Mr Campbell dated 4 May 2023 and 7 May 2023; and

g. Further written submissions on behalf of HMT dated 5 May 2023.

10. HMT's bundle contained two emails to the Commissioner, each of which specified the amounts that would be charged by the IT contractor. The figures are redacted on the basis of commercial sensitivity. A closed bundle had been provided to the Tribunal containing versions of the emails without that redaction. On 28 April 2023 a direction had been made under rule 14(6) of the Tribunal Procedure (First-tier Tribunal) (General Regulatory Chamber) Rules 2009 that the Tribunal would hold that evidence without it being disclosed to any person other than the respondents. The reasons given for that order misdescribe the contents of the evidence, which we confirmed to Mr Campbell were as previously stated in this paragraph. Given that confirmation, and our agreement that the figures were indeed over £600, Mr Campbell was content that he did not need to see the actual figure. Applying the principles in Browning v Information Commissioner [2014] EWCA Civ 1050, we are satisfied that non-disclosure of the actual figures to Mr Campbell causes no unfairness and that withholding them is appropriate given their commercial sensitivity. For the purposes of this appeal, all that matters is that they are above the relevant limit.
11. We heard evidence and submissions from Mr Campbell and reserved our decision. The Tribunal extends its sincere apologies to the parties for the subsequent delay, arising from judicial workload.

Issues

12. In its correspondence of 24 February 2023 disclosing the PDF files, further reasons for refusing to disclose the Word files were given by HMT. They appear to be very contentious, and are extensively discussed in the parties' written submissions. We cannot, however, see that they are relevant to the actual issues that arise in this appeal. The Tribunal's role is described in Information Commissioner v Malnick and Anor [2018] UKUT 72 (AAC) at [45] and [90]. The question for us to decide is whether the provisions of FOIA have been correctly applied. In the respondents' rule 23 Responses and subsequent written submissions, the sole basis upon which the duty to disclose does not apply is the exemption at s.12. That issue will be determinative. The initial claim not to hold the information has fallen away, as HMT now accepts that it has held the requested information throughout.
13. The dispute as to the provision of the PDF files will be relevant, however, to the terms of any substituted decision notice if the appeal is allowed, see Montague v Information Commissioner [2022] UKUT 104 at [76]. If providing the PDF files complied with the request, then no further steps need to be specified. For that reason, we do consider it appropriate to decide whether the terms of Mr Campbell's request require the original Word file(s) rather than the (digital) printout he has received.

Section 12 – cost limit

Legal principles

14. FOIA does not oblige a public authority to comply with a request for information if it estimates that the cost of compliance would exceed the appropriate limit. The Freedom of Information and Data Protection (Appropriate Limit and Fees) Regulations 2004 set that limit at £600. The public authority's estimate must be reasonable, in the sense of being sensible, realistic and supported by cogent evidence. Under regulation 4(3), it may only take account of the following activities:

a. determining whether the public authority holds the information,

b. locating it, or a document which may contain the information,

c. retrieving it, or a document which may contain the information, and

d. extracting it from a document containing it.

15. The regulations then provide, at regulation 4(4), that:

(4) To the extent to which any of the costs which a public authority takes into account are attributable to the time which persons undertaking any of the activities mentioned in paragraph (3) on behalf of the authority are expected to spend on those activities, those costs are to be estimated at a rate of £25 per person per hour.

16. So, in practice, the cost limit will be exceeded by over 24 hours' estimated time spent on regulation 4(3) activities.
17. As held in Kirkham v Information Commissioner [2018] UKUT 126 (AAC), the test is subjective to the public authority but then qualified by an objective element. The Tribunal first makes findings as to the nature of the estimate made by the public authority. These will be related to the way in which the public authority holds the information; FOIA does not impose any particular record-keeping practices. The Tribunal may next remove from the estimate any amount which it considers unreasonable, either on account of the nature of the activity to which it relates or its amount. In performing its assessment, the Tribunal recognises that the statute's use of the word 'would exceed' likely indicates a higher degree of certainty than if read 'may' or 'might'.

HM Treasury's factual case

18. At the time of its response to the request, and when the appeal was lodged, HMT considered that if the requested information existed anywhere, then it must be in the email mailboxes of the personnel who had worked for the Review team. An email to the Commissioner (our version is undated) states:

With apologies for the delay, it has taken some time to get information from our IT provider.

We have now received confirmation from our IT provider that it would take approximately 1 day to conduct the searches required and to extract the information. Therefore their minimum fee for doing this would be [redacted] plus VAT, which means a minimum charge of [redacted].

This means that if the Treasury were to ask for the work to go ahead, we would breach the cost exemption …

19. As already noted, we have been shown the unredacted version of this text and are satisfied that the cost would be in excess of £600. The signatory of the email has been redacted, even from our closed version, but in the email signature their job title is given as Head of Information Rights, Corporate Centre Group, HM Treasury.
20. HMT also relies on a second email from the same unidentified person, sent to the Commissioner on 11 August 2022. This responds to questions for more detail, and we set it out that part of the email in full:

A more detailed explanation as to the work that would be required in order to access the mailboxes, ie why it would require specialist support.

The searches would need to be conducted by a particular role by the Treasury's IT supplier, NTT. This means that it is a set price which is based on a contractually agreed rate card which details their day costing rates. So this is a fixed price.

The reason that the work needs to be done by the Treasury's IT supplier rather than by Treasury officials is because the existing IT contract provides an end to end IT service, which is facilitated by the incumbent IT provider. IT-related administration tasks are the responsibility of the Treasury's service provider and not the customer.

The Treasury has indicated that staff do not have access to the mailboxes – what does that mean in practice?

We have stopped access to these particular mailboxes as the staff no longer need to access them as their roles changed. The mailbox does not appear in their official Microsoft Outlook account, so they cannot gain access unless the Treasury's external to Government IT supplier restores their rights to do so.

In terms of explaining how simple it would be for officials to be given access to the mailboxes so they could then conduct the searches themselves, administrative tasks associated with mailbox access and permissions are currently actively carried out by the Treasury's IT service provider, following a formal request by the Treasury. We are therefore unsure what further costs (to the minimum charge of [redacted] which we set out previously) would be involved to conduct the work in practice or how simple it would be for access to be granted.

Clarify whether the estimated cost is based on a contractual arrangement, and whether you have been provided with a breakdown of activities.

The cost is based on the grade of employee that would conduct this search and the contractual day rate that is in place between the Treasury and NTT.

We are unable to confirm how long the work would take because the Treasury would first need to make a formal request to ask the IT provider to scope the work and provide any associated costs and timelines to conduct the work.

So that the ICO can understand what work would be involved, the process involved if the Treasury were to ask NTT (the Treasury's supplier) to retrieve those email accounts and their contents.

The Treasury would raise a request with NTT to carry out the searches, NTT would then provide a statement of work back to us, setting out how much time this would take and high level tasks that would need to be carried out. The Treasury would then either query or agree this and, if the Treasury agreed it, NTT would then carry out the work. If the work was done successfully, the Treasury would pay for the work.

21. This explanation was accepted by the Commissioner in his Decision Notice.
22. Since the appeal was lodged, HMT has discovered that it additionally held the requested information elsewhere. This is explained in its rule 23 Response of 27 February 2023 as follows:

25. Given the Appellant's appeal, and in order to seek to avoid unnecessary dispute, HMT has (since the appeal was begun) made further enquiries to confirm the factual position. This has been prompted inter alia by the fact that HMT has a new IT supplier, with a materially different charging regime than that in place at the time of the original request. As material, those enquiries have identified a repository relating to the LCRS on infrastructure shared with HMT. That repository was (in accordance with the practices set out above) segregated and unavailable to HMT civil servants, so was not located via the searches undertaken in response to the request. As a result, its existence was not identified at the time of the IC's investigation.⁶ Under the old IT contract, the process for accessing that repository would have been the same as for the LCRS email addresses: ie., expenditure exceeding £600.⁷ …

The footnote at the end of that extract reads:

⁷ A small number of specialist technical IT managers had sufficient levels of privilege within the relevant HMT systems that they could, in principle, have bypassed the segregation and accessed identified the existence of the repository data. These individuals are specialist IT managers, and it is not part of their function to deal with FOIA requests. In any event, those individuals' privileges would have allowed them to identify the files, but not to extract them or pass them to those dealing with the Appellant's FOI request. Accordingly, it would have been both reasonable (reg. 4(3) Fees Regulations) and necessary to use the IT supplier to obtain the data, and that would have exceeded the appropriate limit (£600).

23. None of the Commissioner's submissions need setting out separately, and we shall record Mr Campbell's submissions, so far as necessary, within our own consideration.

Consideration

24. We find that s.12 is not engaged, for each of the following discrete reasons.

A. The work of the IT contractor must be estimated at £25 per hour

25. First, we consider that regulation 4(4) applies to the work to be done by HMT's outsourced IT department. It must therefore be estimated at £25 per hour. The Decision Notice refers to it as "costs other than staff time". But the wording of regulation 4(4) does not restrict itself to staff, employees or civil servants, rather to "persons undertaking any of the activities mentioned in paragraph 3". Here, the day rate to the contractor would be paid to locate, retrieve and extract the requested information. It involves a human being sitting at a computer undertaking regulation 4(3) activities. The Commissioner's relevant guidance^[3] states that:

13. A public authority should note that even if it uses contract or external staff to carry out some or all of the permitted activities, it can only include their time at the rate of £25 per hour irrespective of the actual cost charged or incurred.

26. In the Decision Notice, the Commissioner appears to have treated the IT contractor as akin to an off-site storage facility. This is, we find, a misapplication of the regulations and the Commissioner's own guidance. The cost of an outsourced IT contract no doubt increases with the types of work that come within its scope. The customer must carefully balance the risk of paying a greater up-front cost for services it might then not need, against the risk that out-of-scope work does later become necessary and incurs extra cost. Here, HMT chose to enter into an outsourcing contract that failed to include recovering old mailboxes and (although this is far from clear) may have forced it to then let the contractor do the rest of the job as well, being searching through the mailbox and extracting the data. This was work which could quite foreseeably have been necessary to comply with FOIA requests, especially if (as was again a decision taken by HMT) mailboxes were to be configured to become inaccessible to internal HMT staff upon the conclusion of the review.
27. We can further illustrate our reasoning on this issue by reference to a hypothetical public authority that outsources its entire FOIA function in return for a fixed annual cost. The operation of regulation 4(4) would be unaffected, the work being done by the contractor's personnel "on behalf of the authority". The public authority might be able to agree a lower annual cost with the contractor if it agrees that work on some particular types of requests, unlikely to arise in practice, will attract an extra hourly charge. That is a commercial risk on both sides. If it does arise, and the public authority is then charged by the contractor at £50 per hour, then the regulation 4(4) rate of £25 would doubtless still apply: the contractor's personnel are still doing regulation 4(3) work on behalf of the public authority. Turning to the present situation, HMT claims to have arranged its affairs such that when the present circumstances arose, virtually all the regulation 4(3) work could only be done by outsourced IT personnel, in its own words – "administrative tasks associated with mailbox access and permissions are currently actively carried out by the Treasury's IT service provider" – and at more than £25 per hour. We see no principled basis to distinguish this from the former, hypothetical, situation. There being no evidence before us to justify a finding that fulfilling the request would take the contractor over 24 hours, it therefore falls below the cost limit.
28. Finally, part of the Commissioner's reasoning on this point was that "it is reasonable to include the cost, on the basis that HM Treasury does not have any business need to access the mailboxes other than for the purpose of responding to this particular information request". Neither the regulations nor the guidance provides that a separate business need must be identified before the rate at regulation 4(4) applies.
29. For the above reasons, the comparison with retrieval from an off-site storage site is inapt. The estimate is comprised of activity done by human beings on the public authority's behalf and which falls squarely within regulations 4(3) and 4(4), and which at the rate of £25 per hour would not exceed £600. This element of the appeal must be allowed on that basis.

B. The quote for accessing the mailboxes was misconceived

30. Second, and in the alternative, we accept Mr Campbell's criticisms of the following passage from the HMT email of 11 August 2022:

In terms of explaining how simple it would be for officials to be given access to the mailboxes so they could then conduct the searches themselves, administrative tasks associated with mailbox access and permissions are currently actively carried out by the Treasury's IT service provider, following a formal request by the Treasury. We are therefore unsure what further costs (to the minimum charge of [redacted] which we set out previously) would be involved to conduct the work in practice or how simple it would be for access to be granted.

31. But the "minimum charge of [redacted] set out previously" was not a minimum charge levied by the contractor for all bespoke work. It was the minimum estimated cost for searching for and retrieving the information. There is nothing in the earlier email on which the estimated cost was based, or elsewhere in the evidence, to justify a finding that simply granting another user access to an active mailbox would either fall outside the contractor's non-chargeable obligations or attract a minimum charge of 1 day's work. The mailboxes were still in existence even if their original users could not log in to them; in the words of the email, "[i]t would seem that a request was not raised to have the mailboxes deleted". Granting another user access to an email mailbox is a very commonplace IT requirement in any workplace, and it is easy to think of some examples: compliance with FOIA requests frequently involves searching other users' emails, for which access must be given; many managers will have had the experience of being given access to the email of a suspended or ill employee; and likewise, investigation of disciplinary proceedings and grievances will often require such access.
32. As observed in HMT's further written submissions at paragraph 10(3), the degree of evidence required to prove a fact is a matter for the Tribunal. We agree with Mr Campbell that it would be extremely surprising if the mere granting of access to another user's mailbox would be separately chargeable in a large government department, let alone in a sum that exceeds £600. The Tribunal would require clear evidence in order to reach such a finding. There is none before us. The contractor was never asked to grant access HMT staff access to the mailboxes, it was asked to search through them and retrieve the information. The cost of simply granting access to the mailbox was never obtained, even if it were chargeable in the first place.
33. While neither party has made the argument, we also wonder at the absence of any exploration of whether the mailboxes could have been exported by the IT contractor (for example as .pst files). These could then have been searched by HMT staff. While our conclusion does not rest on this point, the apparent failure by HMT to ever consider it does serve as a further illustration of the lack of care with which the estimate was reached, and the overall absence of any cogent explanation for why it was to be the IT contractor that did the searching and extraction.

C. There is no evidence that retrieving the information from the document library would be in excess of £600

34. While we acknowledge HMT's compliance with its duty of candour by disclosing the existence of the 'repository' when it was subsequently found, we reject its argument that it does not affect our consideration of the appeal.
35. The repository is also described in the documentary evidence as a 'depository' or a 'document library', but it is clear that it was hosted on Microsoft SharePoint. We shall describe it as a document library. HMT argues in its further written submissions that this had not been identified at the time of the request because access was restricted to a small number of IT managers with high level access, and it was not part of their function to comply with FOIA requests. We cannot see how this assists HMT: first, the reasonableness of the estimate is plainly affected by an alternative source having been omitted; second, in virtually all FOIA requests the information is not directly held by FOIA compliance officers – it is their job to find it.
36. We agree with Mr Campbell that the document library should reasonably have been included as a possible source when estimating the cost of compliance. The document "Framework for interaction between the Independent Loan Charge Review, HM Treasury and Revenue & Customs during the review" dated 24 September 2019 stated:

22. Information held by the Secretariat should be stored on the dedicated SharePoint depository for the Independent Review of the Loan Charge. This can only be accessed by the Reviewer and the Secretariat, and subsequently will be stored in accordance with relevant legislation.

37. Even if the use of a document library not been emblazoned on that document, we consider that any reasonable estimate in the present case would have taken into account whether a document library exists. It was ultimately found when one of the "high-privileged managers … ran an enterprise-wide search which identified the repository." If that could be done now, it could and ought to have been done then. If it could not be done then because of the prevailing contractual arrangements, then this was outsourcing of the regulation 4(3) task of determining whether information was held and locating it, as already explained above. Insofar as HMT argues that only those high level managers could detect 'segregated' document libraries – the Review's documents being segregated from others within HMT – we consider that this possibility ought reasonably to have been taken into account in forming the estimate and enquiries made.
38. As this panel can legitimately take notice, document libraries (whether on Sharepoint / Teams from Microsoft, or on its competitors' equivalents) are now the routine way of storing information belonging to a particular team or project. The failure to take reasonable steps to determine whether there was a document library, and to then take it into account to produce an estimate, was unreasonable.
39. In its rule 23 Response and its further written submissions, HMT asserts that the cost of retrieval from the document library would, in any event, have been the same as was quoted in relation to the mailboxes. Even were reliance on the mailboxes not undermined for the reasons we give above, we would reject this entirely unevidenced and unexplained assertion. We are unable to simply make such an assumption in the absence of HMT providing (or, we infer, having themselves had regard to) any contractual, technical or other evidence that would support it. It is entirely plausible that the information could have been provided using the document library without exceeding the cost limit, and the failure to consider this fatally undermines the basis of HMT's estimate.
40. For completeness, we also reject the unevidenced assertion that the "high level managers" would be unable to provide access to the contents of the document library to other internal HMT staff to conduct the actual searching and extraction, or that the external IT contractor could not have given such access, and must have done everything itself.

Conclusion on s.12

41. The public authority's estimate must be reasonable, in the sense of being sensible, realistic and supported by cogent evidence. For each of the above reasons, HMT's estimate is none of those things. Taking matters as at the time of HMT's response to the request, we find that s.12 did not exempt it from compliance with s.1(1). The Commissioner's Decision Notice to the contrary was therefore in error of law, and we allow the appeal.

Has HMT now complied with the request?

42. While the Tribunal must decide the appeal based on the situation at the time of HMT's response, when next considering what substituted decision notice to make (if any), regard can be had to the up-to-date position. If the requested information has now been provided then no substituted decision is necessary.
43. HMT first argues that the PDF copies it has provided fulfil Mr Campbell's original request "asking for the electronic version of the document draft [that produced the hard copy]". If Mr Campbell had requested an electronic version we might agree, but his request refers to the electronic version. It is clearly a reference to the Word file that was itself printed for the purpose of the meeting he mentions, even before the surrounding context of the request is taken into account. It is not enough to produce a different electronic version, really amounting to a photocopy in digital form, as providing the PDFs has done.
44. HMT's next objection gives us more pause, being that it is "not willing to disclose the Word version in order to protect the personal details of other public officials who have accessed and worked on the document." This concern arises, at least in part, from the way in which Mr Campbell had already used the metadata contained in the PDF files provided to him. We need not resolve the factual arguments between the parties, as our greater concern is that this part of HMT's case really amounts to claiming that part of the requested information additionally attracts one of the exemptions at s.40 of FOIA concerning personal data. Yet HMT's submissions do not acknowledge this, and it has never sought to formally rely upon a new exemption. While minor issues of redaction can be adjudicated upon when making a substituted decision notice, HMT appears to be arguing that disclosure is entirely inappropriate due to disclosure of the names concerned. That should have been be a freestanding ground for opposing the appeal, yet it has never been identified as such. Applying the overriding objective, and the treatment of this issue in Birkett v DEFRA [2011] EWCA Civ 1606 at [27] and [28], we do not consider it appropriate at this late stage, and without the issue having been properly raised, to decide a further exemption.
45. During the hearing, the panel explored with Mr Campbell whether the Word file could (in a technical sense) be disclosed while concealing the names of those who had worked on it. He did not think it could, because changing the metadata has the effect of changing one of the dates that he wishes to inspect. We asked whether he would be satisfied with all the metadata from the Word file being disclosed (for example by screenshot or by being exported to another file) and names redacted. He would not, because he does not trust HMT.
46. Our conclusion rests on the entitlement at s.1(1) being to have information communicated, rather than to inspect how it is held. If a person were to request a letter held in physical form, then a photocopy would usually suffice. It communicates all the information that the physical letter contains. FOIA does not entitle the requester to inspect the original letter. Yet even a physical letter might have a type of metadata. The requester might say "this is a black and white photocopy, and I need to know whether the letter was printed on white or blue paper". In some circumstances, the colour of the paper may well be information about the letter itself and the requester would be entitled to have it disclosed. The entitlement is still only to the information however, and would be satisfied in those circumstances by providing a colour photocopy (or even by just telling the requester what colour the paper is). The information would have been communicated within the meaning of s.1(1)(b).
47. Nothing in s.1(1) entitles a requester to additional information in order to satisfy themselves that the information has been communicated honestly. The Information Commissioner and the Tribunal each have statutory powers to satisfy themselves that a public authority has complied with its obligations under FOIA, where they consider it appropriate to undertake that enquiry. Therefore, the only remedy available to a requester who believes that the information given is not the information actually held is to make a complaint to the Commissioner.
48. Applying those principles to the Word file(s) in question, s.1(1) only entitles Mr Campbell to the information it contains. It does not entitle him to the file itself. If Mr Campbell has the information contained in the Word file specified in his request communicated to him, including all its metadata unaltered from the time specified in his request, then HMT will have complied with s.1(1). The information can be communicated in any suitable format provided that it does communicate the information. It is a matter for HMT whether any of that information engages an exemption under FOIA, and should be redacted or even (which we anticipate will be unlikely) such as prevent any disclosure at all.
49. If Mr Campbell does not believe that any exemption has been correctly applied, or that the information given is false or misleading, then his remedy is to make a further s.50 complaint to the Commissioner: Smith v Information Commissioner (Information rights - Freedom of information - public authority) [2022] UKUT 261 (AAC). The Commissioner can then investigate that complaint to the extent he considers appropriate, and issue a Decision Notice against which there is a further right of appeal.

Signed

Judge Neville

Date: 19 October 2023

Note 1   Mr Campbell provided a link to one such example: https://www.whatdotheyknow.com/request/internal_treasury_and_hmrc_commu#incoming-1678266     [Back]

Note 2   https://ico.org.uk/media/action-weve-taken/decision-notices/2022/4022750/ic-99461-w7y6.pdf     [Back]

Note 3   https://ico.org.uk/media/for-organisations/documents/1199/costs_of_compliance_exceeds_appropriate_limit.pdf     [Back]