Refusal Explained

Where the organisation refuses a request in whole or in part, the response states the reasons.

Criterion: H1
Level: Level 1
Domain: Redaction and Exemptions
Reflects: Article 12(4)

Intent

A person cannot challenge a refusal that gives no reasons. With the reasons, they can take it to the Information Commissioner's Office or a court.

How to test it

An assessor scores the criterion against a single response:

Score 2: The response states the reasons for refusing the request, in whole or in part.
Score 1: The response cites a legal provision or a policy without saying how it applies here.
Score 0: The response refuses the request and gives no reasons.
Not applicable: The organisation did not refuse the request in whole or in part.

The law it reflects

This criterion reflects Article 12(4) of the UK GDPR. That mapping is a guide, not a legal test: conformance is judged against the criterion, not the article.

See H1 in context in the full standard.