Free Toolkit · Guides & Tools

Freedom of Information Toolkit

Your legal right to access recorded information held by public authorities. For universities, NHS bodies, police forces, and government departments — this is how you hold them to account.

1. What is an FOI Request?

A Freedom of Information (FOI) request is your legal right to access recorded information held by public authorities under the Freedom of Information Act 2000 (FOIA).

Information you can request includes:

Crucial distinction: FOI requests are for institutional information. To access data held about you personally (your HR file, emails written about you), use a Subject Access Request (SAR) instead.

2. Why Make an FOI Request? Strategic Uses

3. Who Can You Send an FOI To?

Any public authority covered by the FOIA, including universities, NHS bodies and trusts, local and central government departments, the police, and publicly funded research bodies.

4. How to Make an Effective Request

1

Identify the Correct Contact

Check the authority's website for a dedicated FOI page with the correct email address. Using the official contact ensures your request is logged correctly and the 20-day clock starts.

2

Write a Clear and Focused Request

Your request must be in writing — email is best. Be precise. A vague request can be rejected or run into the cost limit. Use the template below for a robust and legally sound request.

3

Understand the Cost Limit

Authorities are not obliged to comply if the cost of locating information exceeds £450 (18 hours at £25/hour). Use precise date ranges and ask for specific documents rather than "everything about X."

📄 Download FOI Request Template

5. Understanding and Challenging Refusals

An authority must respond within 20 working days. If they refuse, they must state which legal exemption they are applying.

Section 40 — Personal Data

Used to refuse information about identifiable living individuals.

Your strategy

If the personal data you need is your own, use a SAR instead.

Section 43 — Commercial Interests

Used if disclosing information would harm commercial interests.

Your strategy

Argue that the public interest in transparency outweighs the potential harm. Particularly strong for publicly funded projects.

Section 36 — Public Affairs

A broad exemption to protect internal deliberations.

Your strategy

Requires the "reasonable opinion" of a senior "qualified person." In your internal review, ask for evidence this process was followed correctly.

Section 21 — Already Accessible

Used if the information is claimed to already be publicly available.

Your strategy

If you cannot find it, state that the information is not reasonably accessible and ask for a direct link or copy.

6. The Escalation Path

1

Request an Internal Review

You have 40 working days to ask for an internal review. State clearly why you believe the initial decision was incorrect and why any exemptions were wrongly applied.

2

Escalate to the ICO

If still unsatisfied after the internal review, complain to the Information Commissioner's Office (ICO). The ICO can order the authority to release the information.

7. FOI and SAR: Using Them Together

Use FOI to get:

The official meeting minutes about a redundancy policy. The employer's official bullying and harassment policy.

Use SAR to get:

The emails between managers discussing you in relation to that redundancy. Your HR file and all records of how your bullying complaint was handled.

Practical tip: Use WhatDoTheyKnow.com for requests you're happy to be public — it creates a public record of the authority's response, which encourages compliance.