Monday, November 16, 2015

Twitter FOI killer

Unfortunately, the tweets below summarise what happened as a result of my appeal against the ICO's decision:


I did not appeal on whether Twitter was a valid way of making a FOI request - my actual appeal was on what a I perceived to be an illogical consequence of how the DN was written. 

My appeal was on these grounds:

1. whether the ICO was correct in deciding that s.1(1)a obligations are not covered in the same way as s.1(1)b when it comes to the medium of communication
2. Whether the ICO's decision notice means that a public authority can ask for an alternative address for the purposes of fulfilling s1(1)a obligations
3. If a public authority can ask for alternative contact details, how would this not be a breach of the 3rd Data Protection Principle


On this, although my appeal overall was dismissed, the FTT stated at para 33:

We consider that the provisions of the Act are clear, concerning how the public authority should communicate with the applicant in fulfilment of its duty to confirm or deny under s1(1)(a). It should communicate to the ‘address for correspondence’ stated by the applicant in the information request. Thus we agree with Mr Ghafoor that the public authority cannot demand, for carrying out the duty to confirm or deny pursuant to s1(1)(a), an address different from the one stated in the request.

So, it appears that I won on my very narrow point. But it is it a totally pyrrhic victory because both the ICO and got our asses handed to us on a point that was not under appeal - the use of Twitter to make the requests. 

There are two issues here:

  • that the Twitter handle is not an appropriate address as per s8
  • that my name was in the request but only in my profile and that there is no reason to impose a burden on a PA to click on a profile

On the address issue, para 28 states:

In our view Mr Ghafoor’s tweet of 7 August 2014 did not satisfy the requirements of s8. In our judgment a Twitter username is not ‘an address for correspondence’ within the meaning
of s8. A means of communication which is limited to 140 characters is unsuitable for correspondence between the public authority and the requester concerning the request.
[my emphasis]


I agree that it CAN be unsuitable, but I am not sure it IS unsuitable. 

For example, a request like this:

@cabinetoffice can I please have under FOI a copy of meetings of minutes between PM and Putin on 12 Feb 2014?

Can be answered like this in 125 characters:

@FOIkid Not held. To appeal, let us know in 2 months. You can complain to ICO, details at https://ico.org.uk/concerns/getting/.

I cannot see what more this reply needs. 

As pretty much every government department, council, NHS body, etc, has a Twitter account and teams of people spouting propaganda at us all day long, it is deemed a medium where complex ideas are set out. It is also a mistake to think of Twitter as only being about the 140 characters. 



I just spent a minute looking through DWP's timeline - I cannot see any instances where they are purely using 140 characters rather than also embedding graphics or linking to documents. I am sure that there are SOME such tweets, but they are the exception. Twitter is commonly and clearly used in a more sophisticated way than the FTT thinks. I think that it can be suitable. In fact, I almost think that the way in which some organisations are linking to their own documents, that it is probably nearly always suitable (aside from some parish councils, etc). 

Turning to the second issue, on whether my name was in the tweet - I agree, it was not there. Para 29 states:

A Twitter user’s real name may or may not be stated in the user’s Twitter profile. We acknowledge that on the facts of this case Mr Ghafoor’s name was readily available to the public authority; in this case it was a simple matter for the authority to look at his profile. But there is a question of principle here. Section 8 does not entitle a requester to impose on a public authority the task of looking elsewhere than the request itself to discover the requester’s real name. On the contrary, s8 explicitly requires the request to state the name of the applicant. Mr Ghafoor’s request did not do so. The fact that, in the particular circumstances of this case, ascertaining the applicant’s real name could not have been easier, did not convert a request not meeting the requirements of s8 into a compliant request. 

It is good that the Tribunal accepts that it is really easy to ascertain my name - I would add that you don't even need to click on the profile - just a hover on the handle is enough. While s.8 does not explicitly lay this burden on the public authority, it is true that they interact with members of the public through Twitter all the time - this task is undertaken all the time. 

With Twitter having become such a common mechanism for communication, the wording of the act is slightly behind (fair enough, Twitter was created six years after the Act was drafted). However, the way in which Twitter is used by all regular users is so clear and the 'task' to looking up the name of the requestor is so slight, that this interpretation is too theoretical and does not take account of how we all use this medium. 

So, here are my next steps...

 
I wonder if the ICO will appeal - this makes its guidance on Twitter requests out of date... wouldn't it be a total hoot if we both appealed. That would almost be cute. 

Update 18/11/15 9.40pm: I have been thinking about appealing this decision notice and have been getting lost in the arguments - but the killer argument I got was courtesy of @foimonkey in the pub this lunchtime who pointed out that since I made my initial request Twitter's fuctionality has been changed in two critical ways: DMs have become open and have no word limit. 

If I appeal my case, they will look at the facts of the case as Twitter was functioning at the time of the request - which means that I have no fall back position on arguing that a public authority can DM a longer reply

So, I think that I will have to leave this.

I do feel bad as I am sure that the FTT is wrong, but I am equally sure that I will lose on the facts of this case. I think that you can continue to use Twitter for requests, so long as you insert your name or your handle is your name. You can also ask them to DM you the reply if they need more space. 

Obviously, if they end up refusing you, and you need it, I would be happy to help with any appeals.   

1 comment:

Wind Noise said...

You might be interested in this appeal

http://www.ocei.gov.ie/en/Decisions/Decisions-List/Wind-Noise-Info-and-Wexford-County-Council.html