Katherine Bishop v The Information Commissioner

Facts

Katherine Bishop complained to the Information Commissioner on 25 January 2025 about the way Wirral University Teaching Hospital NHS Foundation Trust had handled her data subject access request. On 26 November 2025 the Commissioner's case officer gave an outcome. The view was that the Trust had infringed its obligations by missing the one-month deadline, but it had since responded with a copy of the data, with third party data redacted. The Commissioner required no further action from the Trust and told the Applicant of her right to take civil action. She then wrote, contending that requested data had been ignored and that further data might exist. The Commissioner replied on 21 and 28 January 2026, saying that he had considered her concerns, that further action, including enforcement, was not reasonable, proportionate or appropriate, and that the case would not be reopened. By form GRC3 dated 4 February 2026 she applied to the Tribunal under section 166(2) of the Data Protection Act 2018. A separate earlier application under that section had been determined on 10 March 2026. On 27 August 2026 Judge Harris admitted the delayed application and directed representations on a proposed strike out. The Applicant no longer sought an enforcement notice and instead sought an order that the Commissioner take appropriate steps on her further complaint.