Damien Terry v The Information Commissioner

Facts

The applicant, Damien Terry, made a data subject access request to Creditlink Account Recovery Solutions Limited, a private company which he said was processing his personal data without his explicit consent. When the request was not answered he complained to the Information Commissioner, the complaint being handled under reference IC-500190-Y6Y7. On 27 May 2026 the Commissioner's case officer wrote to say that the complaint had been considered under the Commissioner's published framework and that no further investigation would be conducted, although a record of the complaint would be kept; the applicant was told of his options, including requesting a review and issuing court proceedings. On 21 July 2026, following review, the Commissioner confirmed the same outcome, explaining that the material did not indicate that further regulatory action was necessary or that there was a level of data protection risk justifying further investigation, and pointing the applicant to the courts and to the Parliamentary and Health Service Ombudsman. By form GRC3 dated 30 June 2026 the applicant applied to the First-tier Tribunal under section 166(2) of the Data Protection Act 2018 for an order that the Commissioner take appropriate steps to respond to his complaint, complaining that the Commissioner had failed to investigate and had failed to issue Information, Assessment and Enforcement Notices. The Commissioner applied by form GRC5 dated 22 July 2026 to strike the application out.