The ICO recently published some guidance about what to do if you receive an FOI request generated by Artificial Intelligence.

Here is the information as advised by the ICO:

Section 8 FOIA requires people make requests in writing (including by electronic means) and include their name and address for correspondence. A request isn't invalid just because someone's used technology to send multiple requests at the same time. But these issues may be relevant:

• if you're concerned that the requesters haven't provided their real names. A request made in a false name is not valid. You can choose to question the requester's identity if you believe they've used a false name. Have a look at our guidance on pseudonyms: Recognising a request under the FOI Act

• if you think that one group has used AI to send multiple requests. Requests sent by people who appear to be acting together can potentially be aggregated for cost purposes if the requests are for the same or similar information: Can we aggregate the cost of a number of requests?

•  if you suspect the requests were sent out by different people acting together as part of a campaign. Requests sent as part of campaigns are not necessarily vexatious: requesters may be acting together simply to gain information that will assist their case. Our guidance on vexatious requests (section 14(1)) will help: Dealing with vexatious requests

There could be advantages to you if requesters use technology to help them write requests. You might find that the requests are simpler and more clearly written, making it easier to find what the requester wants.

---

Knowledge Bank Guidance

If you would like further help and advice about FOI's please view our Freedom of Information Best Practice Area.
Remember every FOI should be logged with your DPO, our customers can log their FOI's : FOI Log

---

Test your FOI Knowledge: