FOIA 2000 / DPA 2018 / UK GDPR Statutory Rights
UK Freedom of Information & Privacy Rights
An exhaustive legal guide to accessing government documents under the Freedom of Information Act 2000 and retrieving personal files via UK GDPR Subject Access Requests.
FOI & Data Access Request Evaluator
FOI & Privacy Rights Evaluator
Select your request category to view statutory response deadlines, fees, and ICO enforcement rights.
Legal Comparison: FOI vs Subject Access Request (SAR)
| Feature | FOI Request (FOIA 2000) | Subject Access Request (SAR) |
|---|---|---|
| Information Access | Public authority operational data, spending, policies, minutes. | Personal data held about the applicant (medical records, HR files). |
| Statutory Deadline | 20 Working Days | 1 Calendar Month |
| Cost Limit / Fee | £600 (Central Govt) / £450 (Local Councils). Free if under cap. | 100% Free of Charge. |
| Public Interest Test | Applies to qualified exemptions (Section 2). | Not applicable. Personal data rights are fundamental under UK GDPR. |
Frequently Asked Questions (FAQ)
Under Section 10 of the Freedom of Information Act 2000, public authorities must respond to valid FOI requests promptly and no later than 20 working days following receipt of the request.
A Subject Access Request (SAR) allows individuals to request a copy of all personal data held about them by any public or private organization, free of charge, within 1 calendar month under Article 15 of UK GDPR and Section 45 of DPA 2018.
First, request an Internal Review from the public body. If dissatisfied with the internal review outcome, file a free appeal to the Information Commissioner's Office (ICO). The ICO can issue an enforceable Decision Notice compelling disclosure.