FOI and Data Journalism Toolkit

Everything UK journalists need to file effective Freedom of Information requests, challenge refusals, navigate exemptions, and find open data. Templates, guides, and tools all in one place.

Start here Guides Tools FAQs

Last reviewed: 15 April 2026Next review due: 15 October 2026

Start here

This hub is for journalists at all experience levels who want to use FOI effectively. Whether you have never filed a request before, are dealing with a refusal, or are building a data-driven investigation, start with the guides below.

New to FOI? Read How to File an FOI Request and then use the FOI Request Builder in our Tools section. Already filing? Jump to Deadlines & exemptions or Authority-specific guides.

In-depth FOI guides

Twenty dedicated, regularly-reviewed guides covering each part of the UK FOI workflow — every page has a plain-English explanation, red flags, a practical checklist, primary source links, and a tool/template CTA.

FOI Basics

The Freedom of Information Act 2000 gives any person the right to request recorded information held by public authorities in England, Wales, and Northern Ireland. Scotland has its own FOISA 2002. Environmental information is governed separately by EIR 2004.

How to File an FOI Request

Step-by-step: drafting, submitting, tracking, and following up a request to any UK public authority.

Investigative Journalism Techniques UK

How FOI fits into a broader investigative toolkit: sources, documents, data, and verification.

Templates

Use the FOI Request Builder in our tools section to generate a ready-to-send request. We have pre-built templates for NHS trusts and police forces — two of the most FOI-active authorities for investigative reporters.

General FOI Request Template

Covers any UK public authority — council, government department, quango.

NHS FOI Template

Pre-formatted for NHS trusts and ICBs, with common request categories.

Police FOI Template

Structured for forces in England, Wales, Scotland, and Northern Ireland.

Deadlines & Exemptions

Understanding how the 20-working-day clock works — and the full list of exemptions — is essential for knowing when an authority is playing fair and when it is not.

Key deadlines at a glance

20working days to respond to an FOI request (from receipt)
20working days to complete an internal review (may extend to 40 for complex cases)
3months to complain to the ICO after internal review (recommended; no hard limit)
28days to appeal an ICO Decision Notice to the First-tier Tribunal

Most commonly cited exemptions

S.12Cost limit (£450/£600) — challenge by narrowing your request

S.21Information accessible by other means — check if it really is

S.22Intended for future publication — ask for a publication date

S.24National security — absolute exemption, hard to challenge

S.35Policy formulation — qualified exemption, apply public interest test

S.36Effective conduct of public affairs — needs qualified person sign-off

S.40Personal data of third parties — often legitimate, sometimes overused

S.43Commercial interests — qualified; check the public interest

Refusals & Appeals

A refusal is not the end. Most FOI refusals can be challenged. The process is: internal review → ICO complaint → First-tier Tribunal → Upper Tribunal (on points of law).

Request an internal review

Write to the authority asking for an internal review of the refusal. Explain specifically why you think the exemption is wrong or the public interest favours disclosure. Keep it concise — one to two paragraphs per exemption challenged.

Complain to the ICO

If the internal review fails or is not completed within 20 working days, complain to the ICO online. Include your original request, the authority's response, and your internal review correspondence. The ICO is free and legally binding.

Appeal to the First-tier Tribunal

If you disagree with the ICO's Decision Notice, you can appeal to the First-tier Tribunal (Information Rights) within 28 days. You can represent yourself. The tribunal can substitute its own decision.

Authority-Specific Guides

Different public authorities have different information management practices, response cultures, and quirks. These guides give you authority-specific tips.

Local Councils

Access to committee papers, agendas, decision logs, and councillor expenses via FOI and the Local Government Act 1972.

NHS Trusts & ICBs

Use our NHS FOI template. Common requests: waiting times, staffing, complaints, and procurement data.

Police Forces

Use our Police FOI template. Crime statistics, use of force, complaints data, and vetting failures.

Central Government Departments

Tips for filing with Whitehall departments, including how to handle s.35 policy exemptions.

Universities & Schools

Higher education is subject to FOI; maintained schools are not directly, but many councils will hold relevant data.

Quangos & Arm's Length Bodies

NDPBs, agencies, and regulators — checking if an organisation is subject to FOI using Schedule 1 FOIA 2000.

UK Data Sources for Journalists

Before filing an FOI request, check whether the data you need is already published. These are the most useful open data portals for UK data journalists.

Data Journalism Beginners Guide

Where to find, clean, and analyse UK public data. Spreadsheets, APIs, and visualisation tools explained.

data.gov.uk ↑

The government's open data portal — thousands of datasets from central and local government.

ONS ↑

Office for National Statistics — census data, economic statistics, and population figures.

WhatDoTheyKnow ↑

Archive of published FOI responses across UK public authorities. Search before you file.

House of Commons Library ↑

Research briefings, committee reports, and written parliamentary questions.

Investigative Data Techniques

How to use Companies House, Land Registry, and court records in investigations.

All FOI & Data Guides

How to File an FOI Request

Step-by-step guide to any UK public authority.

Data Journalism for Beginners

Open data, spreadsheets, and your first visualisation.

Investigative Journalism Techniques

Document trails, sources, and using public records.

Covering Local Government

Councils, FOI, and public access rights.

Tools & Templates

Use our FOI Request Builder to generate ready-to-send requests. Includes NHS and Police-specific templates built by journalists who file these requests regularly.

FOI Deadline Calculator

Add 20 working days to your sent date — get the statutory deadline and a copyable follow-up email.

FOI Request Builder

Generate a compliant, well-drafted FOI request for any UK public authority type in seconds.

FOI Appeal Builder

Draft an internal review request that cites the right exemption (s.12/14/21/22/31/40/41/43).

ICO Complaint Builder

Escalate to the Information Commissioner with the right evidence checklist and format.

EIR vs FOI Selector

6-question decision tree to pick the right regime for environmental information requests.

NHS & Police templates

Authority-specific pre-built templates ready to copy or print.

Recent ICO decision notices

Real, recent Freedom of Information Act rulings by the Information Commissioner — see which authorities are being pulled up, which exemptions get tested, and how often the 20-working-day deadline is missed. The best guide to how the ICO actually decides.

Recent ICO decision notices (FOIA)

as of 2026-08-30

How the Information Commissioner has recently ruled on Freedom of Information Act complaints — the public authority, the FOIA section(s) engaged, and whether the complaint was upheld. A useful gauge of what the ICO expects and where authorities most often fall short (section 10, the 20‑working‑day deadline, recurs often).

Royal United Hospitals Bath NHS TrustFOI 10(1): Upheld
The public authority must provide a substantive response to the request in accordance with its obligations under FOIA. The public authority must take this step within 30 calendar days of the date of this decision notice.
Health · 21 August 2026 · IC-538856-L8S5
Cabinet OfficeFOI 36: Not upheld
1. The complainant has requested information on a speech by the then Prime Minister on 25 February 2025 regarding Russian planes entering UK airspace.
Central government · 21 August 2026 · IC-425914-R7G8
NHS Lincolnshire Integrated Care BoardFOI 1(1): Upheld, FOI 10(1): Upheld
The complainant sent a follow-on request about the budgeted contribution to the Lincolnshire Mental Health and Wellbeing Community Investment Fund for 2026/27. The Commissioner’s decision is that the ICB did not comply with the requirements of section 1(1)(general right of access) of FOIA by failing
Health · 21 August 2026 · IC-545529-B6F9
University of YorkFOI 40(2): Not upheld
The complainant requested information from the University Council (the university) relating to a named individual. The university disclosed some information and withheld the remainder under section 40(2) of FOIA.
Education · 20 August 2026 · IC-486844-G2T1
Brighton & Hove City CouncilFOI 10: Upheld
The public authority has failed to respond to this request within 20 working days, as specified under FOIA. Back to top Print this page For the public Official information Nuisance calls For organisations UK GDPR guidance and resources Freedom of information EIR and access to information Dire
Local government · 20 August 2026 · IC-536421-N6B2
St George's University Hospitals NHS Foundation TrustFOI 40(2): Not upheld
The complainant requested information from St George’s University Hospitals NHS Foundation Trust (“the Trust”) about its handling of matters concerning a named former employee. The Trust disclosed some information but withheld other information under section 40(2) of FOIA on the basis that it is thi
Health · 20 August 2026 · IC-402999-T9T9
Charity Commission for England and WalesFOI 12: Not upheld, FOI 16: Not upheld
1. The Charity Commission relied on section 12(2) of FOIA (cost of confirmation or denial) to refuse the request.
Other, Regulators · 20 August 2026 · IC-423643-Z4L9
Department For Education (DFE)FOI 31(3): Not upheld
The Commissioner’s decision is that the Department for Education was entitled to rely on section 31(3) of FOIA to neither confirm nor deny whether it holds information within the scope of the request for information about a named provider. Section 31 concerns law enforcement.
Central government · 20 August 2026 · IC-431962-H0N2
Dyffryn Cennen Community CouncilFOI 10(1): Upheld
The public authority has failed to respond to this request within 20 working days, as specified under FOIA. The Commissioner requires it to provide the complainant with a response to this request within 30 calendar days in accordance with its obligations under FOIA.
Dyffryn Cennen Community Council · 20 August 2026 · IC-537016-H1P1
Department for Work and Pensions (DWP)FOI 12: Not upheld, FOI 16: Not upheld
The complainant requested information about audit and assurance arrangements for an HGV Skills Bootcamps programme. The Department for Work and Pensions (DWP) refused the request under section 12(1) of FOIA.
Central government · 20 August 2026 · IC-429955-R0D6
Cheshire West and Chester CouncilFOI 40: Not upheld
The complainant requested information about safeguarding complaints made against carers working for a particular company in unregistered children’s homes. Cheshire West and Chester Council (the Council) refused to confirm or deny whether the requested information is held by virtue of section 40(5) (
Local government · 20 August 2026 · IC-529473-T9G3
Learning Academy Partnership (South West)FOI 1(1): Upheld, FOI 10(1): Upheld
The complainant requested information about a restructure at a school. During the investigation the Learning Academy Partnership (a multi-academy trust) disclosed information which it says is all the information it holds that falls within scope of the request.
Education · 19 August 2026 · IC-427234-Q1K7

Source: ICO decision notices · retrieved 2026-08-30 · a rolling sample of FOIA notices; read each in full for the Commissioner’s reasoning.

Frequently Asked Questions

How long does a public authority have to respond to an FOI request?

Under the Freedom of Information Act 2000, public authorities in England, Wales, and Northern Ireland must respond within 20 working days. Scotland has its own Freedom of Information (Scotland) Act 2002, also with a 20-working-day limit. The clock starts from the date the authority receives the request, not when you sent it.

Can a public authority refuse an FOI request entirely?

Yes, if an exemption applies. There are two types: absolute exemptions (where the public interest test does not apply, e.g. national security, court records, parliamentary privilege) and qualified exemptions (where the authority must apply a public interest test). Common qualified exemptions include policy formulation, commercial interests, and personal data. Authorities must still confirm whether they hold the information unless doing so would itself reveal exempt information.

What is the difference between FOI and EIR?

The Environmental Information Regulations 2004 (EIR) cover requests for environmental information held by public authorities. EIR has a broader definition of who is subject to it (it can catch privatised utilities and some private companies exercising public functions), has a presumption in favour of disclosure, and uses exceptions rather than exemptions. If your request involves anything environmental — land, water, air, planning, biodiversity — use EIR rather than FOI.

What happens if a public authority misses the 20-working-day deadline?

A missed deadline is a breach. You can complain to the Information Commissioner's Office (ICO) immediately — you do not have to wait for an internal review first when the issue is delay. The ICO can issue Decision Notices requiring the authority to respond. Serial late responses can result in formal enforcement action and reputational damage for the authority.

Can I appeal a refusal?

Yes. First, request an internal review from the authority — they must complete this within 20 working days (or 40 for complex cases). If you are still unhappy, complain to the ICO, which will investigate and can issue a Decision Notice ordering disclosure. The ICO's decisions can be appealed to the First-tier Tribunal (Information Rights) and beyond on points of law.

Are there FOI exemptions that are commonly misused?

Yes. Section 12 (cost limit — requests costing more than £450 or £600 to respond to) and Section 36 (prejudice to effective conduct of public affairs) are among the most overused. Section 12 can sometimes be managed by narrowing your request. Section 36 requires sign-off by a "reasonable opinion" of a qualified person — challenge it if the authority cannot explain who gave that opinion and why.

Does FOI apply to private companies?

Generally no — FOI in the UK only applies to public authorities listed in the Act or designated by Order. However, some private companies carrying out public functions may be caught by EIR. Privatised utilities are often subject to EIR for environmental information. Companies contracting with public bodies are not subject to FOI directly, but the authority holding the contract may be.