Andrzej Witold Kuczys v The Information Commissioner

Facts

The Applicant, Andrzej Witold Kuczys, complained to the Information Commissioner on 21 February 2025 about a data controller's handling of his personal data. His complaint had four strands: that correspondence he had marked confidential, raising concerns about the Controller's use of CCTV recording, had been opened by staff and his concerns not delivered; that his request for CCTV footage had been refused; that staff could access, disclose or distribute his personal data without his consent; and that the Controller had failed to supply sufficient information in response to his data subject access request. On 17 December 2025 the case officer gave an outcome, finding the Controller had complied over the CCTV footage by offering him a viewing, but identifying deficiencies in the DSAR response, and wrote to the Controller with advice. On 31 March 2026, after obtaining the Controller's account of its lawful bases under the UK GDPR, the case officer concluded that no further regulatory action was justified. The Applicant expressed dissatisfaction, and on 30 April 2026 a reviewing officer upheld the handling of the complaint. The Applicant applied to the Tribunal by form GRC3 dated 16 April 2026, seeking an order that the Commissioner respond to each point raised. The Commissioner applied to strike the application out.