Problems & escalation

When the response is late, incomplete or refused

Start by identifying the right you used and the deadline that applies. The next step differs between data-protection complaints, FOI internal reviews and EIR reconsiderations.

Reviewed: September 2026

Late or missing response

SAR or data-rights request overdueCheck ID, clarification and extension issues before treating the organisation as late.FOI or EIR response overdueCheck working-day calculation, clarification and any valid extension.

Refusal or withheld information

SAR refusalExemptions, restrictions, other people's information and manifestly unfounded or excessive requests.FOI / EIR refusalRead the refusal notice critically and identify the route to review.

Escalation

Data-protection complaint and ICO escalationOrganisations now have a statutory complaint-handling duty; give them the opportunity to address the issue before ICO escalation where appropriate.FOI / EIR internal reviewAsk the authority to reconsider the handling of your request before taking the issue to the Commissioner.