Introduction

The right to know and the right to privacy are inextricably linked. Many people believe they are in conflict, and certainly there are times when observing the rights of individuals prevents information about them being disclosed. However, the right to privacy often depends to some extent on transparency, since individuals cannot defend their right to privacy if they do not know what information is held about them, and what it is used for. There are times when an absolute approach to privacy would be damaging for society, and potentially individuals. What is necessary is a mechanism to balance the two rights.

As Figure 6.1 on the next page illustrates, the most commonly used exemption in the FOIA by far by UK central government bodies in 2017 was the exemption for personal information at s. 40. This demonstrates how important the relationship between these two rights is, and how often it needs to be considered in practice. Whatever an applicant may be interested in, very often personal information is interspersed within documentation. Names, addresses, telephone numbers, signatures – all can be found among documents that may not be primarily about an individual. As personal information is so prevalent across public authorities it is essential that FOI laws provide protection for it.

In the UK protection of personal information is provided by the exemption at s. 40 of the FOIA, and in the EIR by regs 5(3), 12(3) and 13. These provisions seek to avoid a conflict between FOI and the GDPR and the DPA 2018, the laws that govern the use of personal information in the UK. Internationally, many FOI laws incorporate data protection rules, recognising the close link between the two rights.