UK case law

Simon Curtin v Information Commissioner & Anor

[2026] UKFTT GRC 227 · First-tier Tribunal (General Regulatory Chamber) – Information Rights · 2026

Get your free legal insight →Email to a colleague
Get your free legal insight on this case →

The verbatim text of this UK judgment. Sourced directly from The National Archives Find Case Law. Not an AI summary, not a paraphrase — every word below is the original ruling, under Crown copyright and the Open Government Licence v3.0.

Full judgment

Background to the appeals

1. This case concerns two appeals which were consolidated by an order dated 29 April 2025. They concern two decisions of the Information Commissioner (“IC”) dated 28 October 2024, reference IC-292124-F1N2 (the “First Decision”) and 17 March 2025, reference IC-348013-F2L6 (the “Second Decision”) (together “the Decisions”). The First Decision concerned a request for information submitted by Mr Curtin to the Ministry of Defence (“MOD”) on 2 November 2023 concerning Unidentified Aerial or Anomalous Phenomena (“UAPs”) and/or Unidentified Flying Objects (“UFOs”). The Second Decision concerned a request for information submitted by Mr Curtin to the MOD on 21 August 2024 concerning the UK’s presentation about UAP at a Five Eyes meeting. The First Decision

2. Mr Curtin first wrote to the MOD on 31 August 2023 (the “August Request”) seeking the following information for the period from 1 January 2009 to the current date: “I would appreciate you providing me with information under the Freedom of Information Act (2000), which refers to the following topics:

1. Any documents, reports, photographs or memos related to UAP/UFO.

2. Any documents, reports, photographs or memos related to the Five Eyes Foreign Material Recovery Program (FMP) with a specific focus on UAP/UFO. 3.Information on the objective, scope and operation aspects of the FMP in relation to UAP. 4.Any assessments, studies or analyses conducted by the relevant UK government department regarding recovered foreign materials associated with UAP/UFO.

5. Any communication or correspondence between the relevant UK government department and other Five Eyes alliance members regarding the FMP and UAP/UFO

6. Any records of encounters with UAP/UFO, including incident reports, witness testimonies and analysis of potential national security threats.”

3. Mr Curtin provided a list of key phrases in his request which might assist the search.

4. The MOD refused this request on 26 September 2023 citing section 12 of FOIA on the basis that it would exceed the appropriate limit of 24 hours to answer the request. Further clarification was provided at Mr Curtin’s request on 2 November 2023.

5. On the same date, Mr Curtin wrote to the MOD to refine his earlier request in the following terms (the “November Request”): “Thank you for your letter of 2 nd November 2023 and in particular your helpful analysis of the searches to date. My recommendation to expedite the search within the cost guidelines set out by the FOIA would be as follows; search only for the following terms: Five Eyes (FVEY) or Five Eyes Material Programme (FMP) Unidentified Flying Objects (UFO) Unidentified Anomalous Phenomena (UAP) Unidentified Aerial Phenomena (UAP) All-Domain Anomaly Resolution Office (AARO) As UAPs are not seen by the MOD as a ‘threat’ or a ‘national security’ issue, I think it would be sensible to remove these two terms from the search. [The request went on to offer a further revision should this be necessary] If this still turns up too many responses to investigate within the cost guidelines, then I would recommend the following alternatives (in the following order): Reduce the search timescale (currently set at 2009-2023 current date) to a 2019-2023 range for example to reduce the number of documents. Remove Five Eyes (FVEY) or Five Eyes Material Programme (FMP) from the search terms.”

6. The MOD responded on 4 December 2023 to the November Request as a stand-alone request and refused to confirm or deny that it held information in scope of the request on the basis of sections 23 (security bodies), 24 (national security), 26 (defence) and 27 (international relations) of FOIA.

7. Mr Curtin requested an internal review on 6 December 2023 and the MOD provided an outcome to that review on 29 February 2024, upholding its neither confirm nor deny (NCND) response.

8. Mr Curtin contacted the IC on 3 March 2024 to complain about the way his request had been handled.

9. On 28 October 2024, the IC issued the First Decision. In this he decided that the MOD was entitled to rely on section 23(5) and section 27(4) of FOIA to refuse to confirm or deny that it holds the requested information. The Second Decision

10. Mr Curtin wrote to the MOD on 21 August 2024 to ask for the following information: “You will be aware, as it has been released by the MOD earlier this month, that two MOD officials represented the UK in attending a Five Eyes (FVEY) meeting at the Pentagon on 24 May 2023. The meeting was entitled “FVEY Inaugural UAP Caucus Working Group”. As you may also be aware, an agenda of this meeting was published recently as part of a FOI request in the US. In this agenda, timetabled for 1015-1130 (i.e. for 75 minutes) each of the four FVEY partners (Australia, Canada, United Kingdom and New Zealand) were asked to provide ‘partner UAP updates’ suggesting a UK briefing time of 15-20 minutes. I am writing to request under the terms of the FOIA (2000) all details in all formats i.e. notes, presentation slides, videos etc from the United Kingdom UAP update section only, relating to information provided by the two MOD officials and any questions they received and responses they gave.”

11. The MOD responded to this request on 17 September 2024, confirming that a search had been conducted for the requested information and that the request had been assessed to fall within scope of sections 24 (national security), 26 (defence) and 27 (international relations). The response also explained that the MOD considered section 23(5) (security bodies) of FOIA to provide a basis on which to refuse to neither confirm nor deny (NCND) whether any information was held. In response, Mr Curtin wrote to the MOD on 18 September 2024 asking it to conduct an informal internal review of the decision.

12. The MOD replied on 4 October 2024 clarifying its application of the exemptions as follows: “Taking your further points into consideration, it may be helpful if I explain that when it comes to the case of sensitive material, the Department has an obligation to protect such information and apply appropriate exemptions under the Act. Prior to the release of information under US FOI legislation, the “Neither Confirm Nor Deny” (NCND) position for requests on this topic applied for the majority of exemptions. That still remains the case for Section 23(5) (Information supplied by, or relating to, bodies dealing with security matters). However, since the US disclosure of information, the way in which we apply exemptions to similar FOI requests has changed in that, the NCND principle has not been engaged, and we can confirm some information is held, but this still remains exempt.”

13. Mr Curtin asked the MOD to conduct a formal internal review on 5 October 2024, to which the MOD responded on 24 January 2025. It explained that whilst the release of the agenda for the FVEY meeting of the 24 May 2023 (released on 13 June 2024) does affect how MOD may respond to some requests on this subject going forward in respect of the NCND principle, however, fundamentally each request is dealt with on a case-by-case basis. The MOD explained that having considered this request from first principles it had concluded that it should not have made a substantive response to the request under section 1, and rather that the: “position is that the NCND limb of the exemptions detailed below [ie sections 23(5), 24(2), 26(3) and 27(4)] are engaged, I have not made any assessment of the section 1 declaration made in the response of the 4th October 2024 confirming that information was held. This means I have not considered whether any information potentially gathered actually related to the wording of your request, or was outside the scope such as purely administrative information related to the attendance at the meeting.”

14. Mr Curtin contacted the IC on 1 December 2024 to complain about the way his request for information had been handled.

15. On 17 March 2025, the IC issued the Second Decision. In this he found that the MOD was entitled to rely on section 23(5) to refuse to confirm or deny whether it holds the requested information. Abbreviations used in this decision “AARO” means All-Domain Anomaly Resolution Office “August Request” means, within the First Appeal, Mr Curtin’s request for information dated 31 August 2023 “the Decisions” means both the First Decision and the Second Decision “First Decision” and “First Decision Notice” mean the IC’s decision dated 28 October 2024, reference IC-292124-F1N2. The appeal to the Tribunal of this decision is referred to as the “First Appeal”. “FMP” means Five Eyes Material Programme “FOIA” means the Freedom of Information Act 2000 . All references to sections are references to sections of this Act unless otherwise specified “FVEY” means Five Eyes “IC” means the Information Commissioner, the First Respondent “MOD” means the Ministry of Defence, the Second Respondent “NCND” means Neither Confirm Nor Deny “November Request” means, within the First Appeal, Mr Curtin’s refined request for information dated 2 November 2023 “Second Decision” and “Second Decision Notice” mean the IC’s Decision dated 17 March 2025, reference IC-348013-F2L6. The appeal to the Tribunal of this decision is referred to as the “Second Appeal”. “UAP” means Unidentified Anomalous Phenomena and/or Unidentified Aerial Phenomena “UFO” means Unidentified Flying Object “UNUDHR” means United Nations Universal Declaration of Human Rights “UT” means the Upper Tribunal, Administrative Appeals Chamber Procedural matters concerning the hearing Procedural matters concerning the hearing

16. This matter had previously been partially heard on 11 July 2025. However, this hearing was abandoned and, accordingly, a new Tribunal panel which had not previously heard the case was convened before whom a fresh hearing took place.

17. There was an OPEN session attended by all the parties present and a CLOSED session which was attended only by the MOD and its representatives.

18. The Tribunal considered an OPEN bundle of documents (431 pages).

19. The Tribunal also considered a CLOSED bundle of withheld documents (3 pages). Prior to the hearing an application under rule 14 of the Tribunal Rules had been made as regards the withheld material and an order made that disclosure of the information contained in the closed bundle should not be disclosed or published to any person other than the IC and MOD in this case pending further order. Further orders in relation to Rule 14 were made before the hearing in relation to further clarification filed by the IC on a CLOSED basis and at the hearing in relation to a response to this clarification filed by the MOD.

20. The following gist of the CLOSED session was approved by the Tribunal and provided to Mr Curtin. This focused on seven questions raised by Mr Curtin (set out in bold below) which were put to the MOD by the panel on his behalf: “1. Why, if the application of section 23 is "an absolute exemption", as indicated by the first and second respondent, has the second respondent itself released information relating to these security bodies (specifically the FOI release of 2nd August 2024) and a Five Eyes UAP meeting [A96-A100] The second respondent explained that, to the best of its knowledge and understanding, no material has been released pertaining to Section 23 bodies – the information provided was that 2 people attended the meeting, who did not work for a section 23 body. The point the appellant makes seems to assume that Defence Intelligence is a Section 23 body, which it is not.

2. The 2024 House of Commons answer confirmed, "there are no current plans to create a dedicated team to investigate incidences of alleged sightings [in relation to UAP].", [A106] so where is the published mandate for a security body/bodies to be collecting such information proactively? The second respondent appreciated the highlighting of the formal position of the MOD as provided by the then Minister for the Armed Forces (Mr Luke Pollard MP), and reiterated that this remains the position of the department. In its submissions it identified that there is no reasonable expectation that any mandate could be published for a body the Minister has rightly ruled as not planned ever to exist.

3. If such information were being collected by a security body inadvertently as a result of other operations, why is it not incumbent on the MoD, given the scientific importance of that data, to publicly release such information in a way so that it cannot be related back to the security body or reveal the nature of their operations (Case Law: Lownie at [62])? On the planning assumption that the appellant means by Security Bodies those which are as defined within the Section 23 of the FOI Act. On that basis, the bodies would reasonably be expected to operate under the Intelligence Services Act, or other Investigatory Powers of UK Statute. As such they would be rightly targeting subjects of interest. All other hypothetically collected information, assuming that NCND remains in this regard, it would be inadvertent collection - it could be reasonably expected to be discarded as soon as reasonable, and indeed not shared with anyone outside of the collection team so as to assure the proportionality of any such hypothetical collection operation. As such, noting the formal position of the MOD (A106), therefore MOD would take no reasonable steps in gaining such information, even if it did hypothetically exist, noting we would hold to NCND.

4. If reporting on UAP is outside of specifically declared government policy, why would a security body have and hold information on them? The second defendant made the submissions, again based on the assumption that “Security Body” referred to those listed within Section 23 of the act. It is however a matter of NCND for the open hearing. The Panel questioned on the second defendant’s understanding of the wording of the question, drawing the attention to “have and hold”, and wanted to understand if it was the second defendant’s position that this would be read in the same way as retained.

5. Why has the first respondent continued to additionally rely on the "Glomar" NCND response in relation to section 23 for the Five Eyes aspect of the information requests, when these aforementioned numerous public releases of information from across the Five Eyes partners, one from the second respondent themselves, confirm this event (the UAP Inaugural Caucus). The second respondent at this point confirmed for the Panel the reason for the change in position, namely from S23(5) to S12. This is based largely on the panel of the previous tribunal, raising with the second respondent, that they should have seen the email of the 3rd November 2023, referred to by the MOD as FOI/2023/13273, and it should have been treated as a clarification of the original request of the 31st August 2023, referred to by the MOD as FOI/2023/10542 for which a S12 response was provided to the appellant. The Panel thanked the second defendant for explaining the reason for the change in the handling of this case and the matter of the decision notice. In this the Panel referred to the ICO DN (A8) in paragraph 6 that the ICO themselves in their decision notice do not appear to treat these as a single case. The Panel recognised that due to the circumstances of the previous hearing that no formal record or GIST of the closed session had been recorded that made this clear to the appellant before today. The second respondents submitted that it was an error shared by both defendants that ultimately led to the DN as issued.

6. Information on UAP activities across the 14 year 10 month time period of the initial information request would have been collated from numerous sources, including military personnel and systems not categorised as section 23 bodies given that "the UK air defence community detects and monitors all flying air systems 24 hours a day to provide an identified air picture" [A101-A105], and the appellant has not been provided with any evidence that every one of these sources would be bona fide excluded bodies, so why has a blanket section 23 exemption been applied across this time frame? To support this point I quote a recent (4th September 2025) parliamentary response from the UK government's under-secretary of defence regarding UAP information, "The broad term UAP may be contained within documents such as ships logs, Defence Air Safety Occurrence Reports (DASORS) or correspondence from members of the public" [Additional evidence from Hansard submitted to the tribunal on 22nd December 2025]. It is important to note that the first respondent recognised [A11, paragraph 20 of DN] that, "The MOD has not argued that all of the requested information, if held, would fall within the scope of section 23(5)", but critically there was no further expansion or investigation of this point. The second respondent considered this point, and in relation to the new position under S12, that this would fall within this new handling, and on the matter around section 23 bodies then it would be similar to the previous hypothetical positions articulated in response to Q3 and Q4.

7. Why, given that the UK government have publicly confirmed that no new material on UAP has been classified since 2009 [A106], are the MoD acting in contradiction of this position by withholding what, by corollary, must be unclassified information on UAP from the public? The second respondent highlighted that the position the minister took in the response to the Parliamentary Question remains the department’s position on the matter. There was then a closed submission that highlighted the example of reports like “SCIENTIFIC & TECHNICAL MEMORANDUM – no. 55/2/00” produced a report, referred by the appellant as the Condign report, this itself contains redactions on topics of National Security. The second respondent maintains that this is completely appropriate and in no way information on UAP. The Panel then noted that with the change of the second respondent’s position to S12 that no further detail need be given. GIST on next steps: The Panel directed that a gist be produced of the closed question section that could be released to the appellant. The second respondent agreed to this and took the action to prepare that GIST over lunch. The Panel instructed the second respondent to make sure they included an explanation within the GIST on why the position has now changed from S23(5) to S12. The Panel then reflected that some of the answers to the questions could have been heard in open, however accepted that that could not have been known until the question is asked and answered as to where the Panel’s follow-on question may lead. The second respondent confirmed that this was direction to require that the GIST was as close to the answers given as possible. It was then discussed how the Government Legal Department would correspond directly with the Judge to assure that the GIST could be considered in a timely manner. The Panel then requested clarification on reference numbers that are quoted within B232 and B233, and requested understanding of where they come from. The second defendant couldn't identify the reference number "FOIA-00021017 - MOD" however did recognise the reference FOI2023/13273. “

21. Having considered all the evidence, the Tribunal’s view was that the reasons for its decision could be properly set out in an OPEN decision and therefore did not prepare a separate CLOSED decision. The First Appeal

22. Mr Curtin appealed the First Decision to the Tribunal on 11 November 2024. He gave the following grounds for appeal:

23. The IC did not give enough weight to the UK government (and thus MOD)’s position that UAPs do not constitute a military threat to the UK and the distinction between US and UK definitions is not relevant. Mr Curtin relies in this connection on the statement made by Baroness Goldie (then Minister of State for Defence) in the House of Lords on 30 June 2021 which stated as follows: “The [MOD] holds no reports on unidentified aerial phenomena but constantly monitors UK airspace to identify and respond to any credible threat to its integrity, and is confident in the existing measures in place to protect it…He is quite right about the closure of the UFO desk in 2009…The MoD has no plans to conduct its own report into UAP because, in over 50 years, no such reporting indicated the existence of any military threat to the UK.” a. The IC did not give enough weight to the public interest in this issue under section 27(4) and overstated the impact of information release on international relations which has “enforced the inappropriate over-censorship of this information.” b. The IC’s acceptance of the MOD’s NCND position for all the information requested over a period of 14.5 years is disproportionate and inappropriate, given the UK government’s declared ‘no threat’ position. c. The IC did not appropriately consider the evidence provided by Mr Curtin that the existence of a meeting had already been put in the public domain both before the request (by the US Government in June 2023) and further information was released prior to publication of the First Decision Notice. d. The IC did not investigate the MOD’s refusal of the request under section 24 and 26 of FOIA and so has produced an incomplete analysis, which is unbalanced and unfair. e. There has been significant delay in the handling of the request, resulting in a period of almost 14 months between the request and publication of the First Decision Notice. The timings in this case represent a concerning inefficiency and prejudice both the Appellant and the public’s right to timely information of public interest. f. There should be sanctions in place within FOIA to motivate compliance with published timescales for reviews.

24. The outcome sought by Mr Curtin was as follows: a. A reversal of the IC’s decision in the First Decision Notice to state that the MOD is not entitled to rely on section 23(5) and 27(4) and must comply with the Appellant’s information request. b. Acceptance that all relevant information in the public domain prior to the First Decision Notice should be considered by the IC and MOD. c. Acceptance that the IC should have reviewed the case under sections 24 and 26 of FOIA. d. Agreement that the MOD is further unable to refuse the information request under sections 24 and/or 26 of FOIA e. An apology to Mr Curtin, with explanation as to why the request/case took so many days to be reviewed by the MOD and IC. f. Action to be taken to ensure the delays in handling this case, both within the IC and MOD, do not occur in future cases. The IC’s response to the First Appeal

25. The IC filed a Response dated 6 December 2024. He relied on the First Decision Notice as setting out his findings and the reasons for those findings. He maintained that the Appellant’s grounds of appeal do not disturb his findings. He made the following additional observations:

26. In relation to information put into the public domain after the request, following Montague v The Information Commissioner and Department for International Trade [2022] UKUT 104 (AAC) and [2023]EWCA Civ 1278, these are not relevant considerations at the time the MOD responded to the request on 4 December 2023. a. It was not necessary for the IC to consider the MOD’s application of sections 24 and 26 of FOIA as he determined the MOD could rely on section 23(5) and 27(4) to refuse to NCND that information was held. b. The grounds concerning delay fall outside the jurisdiction of the Tribunal. The MOD’s response to the First Appeal

27. The MOD filed a Response dated 16 January 2025. It also submitted that the grounds of appeal do not disturb the IC’s findings in the First Decision Notice. It made the following observations in relation to the Appellant’s grounds: a. The statement of Baroness Goldie to the House of Lords that no reporting had indicated the existence of a military threat from UAP in the past 50 years cannot bear any more weight than the IC gave it. The public interest factor underpinning the NCND position in this case relates to the particular nature of the s23(3) bodies and, for the purposes of s.27, the nature of the relationships between the FVEY members. Responses under FOIA which would be revelatory of the intelligence sources available to government and international partners and/or reveal their analytical capabilities remain highly sensitive. The distinction between the UK and US definition of UAP is not relevant to the particular public interest that leads the MOD to rely on 23(5) and 27(4). b. The public interest balance is to be gauged at the date of responding to the request, on 4 December 2023. c. There was no obligation on the IC to determine all the exemptions relied upon. d. The allegations of delay are not justiciable grounds of appeal. Mr Curtin’s Reply to the IC’s and MOD’s responses to the First Appeal

28. Mr Curtin filed a summary of his position on 31 January 2025 responding to both Responses, together with a background information document. In summary, he made the following points: a. The UK’s policy on UAPs, as set out in Baroness Goldie’s statement, is clear and unequivocal and has been the UK policy since at least 2009. It is not within the MOD’s remit to deviate from this position and it has no published mandate on principle to keep information on UAPs from the general public in the UK. b. The Appellant has been clear and careful about the definition of UAPs in the context of this case – he says “ UAPs are by definition phenomena that exhibit some or all of the characteristics (known as the “five observables”) which human technology, as defined by the scientific establishment is currently incapable of creating ”. He summarised it thus “ UAPs are the class of phenomena remaining once all other alternatives have been evaluated and dismissed – and the number of instance of these phenomena occurring each year are significant .” c. The release of information that demonstrates UAPs represent advanced technology to the open scientific establishment is critical to further understanding the phenomena and could lead to significant technological advances to benefit the UK population. d. He has not been provided with any evidence to support the engagement of any exemptions in this case. He contends that any withholding of information on UAPs is inconsistent with both the UK government’s policy position and the human rights principles to freedom of access to information in Article 19 of the United Nations Universal Declaration of Human Rights (“UNUDHR”). e. There is no evidence that any of the possible UAP data collected involved security service personnel, from witnesses through to data collection. He does not accept that a section 23 exemption would apply to all the information requested. f. The IC has used its discretion incorrectly in accepting the MOD’s application of a public interest test to support an exemption under section 27. The MOD has overstated the nature and impact of prejudice under section 27 and understated the public good of revealing the requested information. g. The difference between the UK and US definitions of UAP is irrelevant to this case because he has requested information on UAPs as defined by the UK government. h. He has not been provided with any evidence that any of the information that is the subject of the request would prejudice international relations in any way. i. He does not agree that the allegations of delay fall outside the Tribunal’s jurisdiction. j. The IC’s failure to investigate the section 24 and 26 exemptions “ invalidates the DN and represents prejudice against the appellant’s rights under FOIA”.

29. The Appellant also filed a consolidated Reply in both Appeals on 3 June 2025. This made the following additional points in response to the First Appeal: a. The case has to be judged against current UK government policy and this is of material and fundamental relevance to the significant public interest and scientific good engaged in this case, and the MOD’s approach to information release should reflect this.

30. If reporting on UAPs is outside government policy, he questions why a security body would have information on them. He also questions why a blanket exemption was applied. The Second Appeal

31. Mr Curtin appealed the Second Decision to the Tribunal on 30 March 2025. He gave the following grounds for appeal: a. The IC did not give enough weight to the UK government (and thus MOD)’s position that UAP s do not constitute a military threat to the UK. There is significant public interest and good in releasing this information.

32. The IC has not appropriately investigated the inconsistent and flawed application of NCND in relation to the reliance by the MOD on section 23(5) of FOIA, particularly in light of FOIA releases published prior to the original information request and subsequent admissions by the MOD. a. The IC did not adequately assess or give appropriate weight to the Appellant’s rights under Article 19 of UNUDHR and subsequent legislation and the presumption that all information is accessible subject only to a narrow system of exceptions. b. The IC did not investigate the MOD’s refusal of the request under sections 24, 26 and 27 of FOIA and so has produced an incomplete analysis, which is unbalanced and unfair. c. The IC did not appropriately sanction the MOD for the significant delays in handling the Appellant’s complaint. d. The outcome sought was that the Second Decision Notice should be struck out and replaced with an order for the MOD to provide the information requested to the Appellant, consistent with Article 19 of UNUDHR. The IC’s response to the Second Appeal

33. The IC filed a Response dated 24 April 2025. He submitted that none of the Appellant’s arguments are sufficient to alter his findings, as they do not identify any error of law in the Decision Notice or incorrect exercise of the IC’s discretion. He made the following observations about Mr Curtin’s grounds of appeal:

34. Section 23(5) FOIA is a class based absolute exemption and information in the public domain is not relevant to the assessment of whether or not it is engaged. The exemption is clearly engaged because if information within the scope of the request was held it is possible that it could have been supplied by or relate to a security body given the close working relationship between the MOD and security bodies. The Appellant’s arguments about conflict with UK government policy and information in the public domain are irrelevant. a. The Appellant’s ground concerning the UNUDHR is unparticularised. The Tribunal only has jurisdiction under FOIA. This is supported by the UT’s decision in Moss v Information Commissioner & Cabinet Office [2020] UKUT 242 (AAC) which held that Article 10 ECHR does not create a right in domestic law to request information from a public authority and has no bearing on FOIA. b. Once the IC was satisfied that section 23(5) was engaged, the IC was not required to consider the other exemptions relied upon as he had concluded that the MOD had complied with part I of FOIA for the purposes of the complaint under s.50 of FOIA. He relied on the UT’s finding in Information Commissioner v Malnick & ACOBA [2018]UKUT 72 (AAC) that once the authority has lawfully relied on one exemption and notified its decision it has complied with its obligation and the applicability of other exemptions is irrelevant to the IC’s functions. c. Internal reviews are not required by FOIA and cannot be the subject of a Decision Notice issued by the IC, so the Tribunal has no jurisdiction to consider the allegations of delay. The MOD’s response to the Second Appeal

35. The MOD filed a consolidated response to both Appeals dated 6 May 2025. In relation to the Appellant’s Second Appeal, it made the following points: a. In light of Baroness Goldie’s statement, it does not follow that reliance on section 23(5) would be invalid because it would contradict government policy. Section 23(5) does not depend on government policy, but on the fact that the subject matter, were it to exist, being information more likely than not to be information supplied to the public bodies by the security bodies listed in section 23(3). b. The Tribunal does not have jurisdiction over complaints about the extent of the IC’s investigation. This is a procedural matter. c. The UNUDHR is unincorporated international law and the argument here is weaker than the argument about ECHR in Moss . d. Section 23(5) was legally sufficient for the IC to reach the Second Decision. There was no obligation on the IC to determine the correctness of all the exemptions relied upon. e. The allegations of delay are not justiciable grounds of appeal. Mr Curtin’s reply to the IC’s response to the Second Appeal

36. Mr Curtin filed a consolidated Rule 24 Reply dated 3 June 2025. In relation to the Second Appeal he made the following points: a. Information of material import came into the public domain before the initial information request submitted on 21 August 2024, so there is no justification for the MOD to use an NCND response concerning this meeting, as some or all of this information existed. b. The information request as submitted before the release of information under the US FOI legislation. The IC did not investigate this appropriately. c. FOIA should be proportionate and fair in terms of the principles in Article 19 of UNUDHR. d. The IC has taken an inconsistent approach to investigating other exemptions between the two Appeals. The Appellant submits that this appeal is predicated on whether the IC undertook the appropriate level of investigation of all the exemptions prior to making a decision on their application. e. The time delays for the internal reviews on both cases were significant. The clarification of section 12

37. The MOD made an application by way of form GRC5 dated 9 January 2026 for permission to submit a further statement in evidence. It explained that it has become apparent that if the August and November requests made by the Appellant within the context of the First Appeal were to be treated as one whole and complete request, the MOD should have specified the appropriate response to this request which would have been reliance on section 12 of FOIA. The application was accompanied by a witness statement from an individual whose name could not be disclosed in OPEN material for security reasons.

38. In response, the Appellant submitted his own form GRC5 dated 11 January 2026, requesting that the MOD’s application be refused as irrelevant and hypothetical. In his reasons he stated the following: “ There is significant potential confusion, which could mislead the Tribunal, as a result of the [MOD’s application]. For clarity, the “two requests” referred to by the Second Respondent relate only to their own internal administrative definitions for the initial information request and refinement…That GRC5 form and associate evidence has no relationship or relevant for [the Second Appeal] which is unfortunately referred to in their documents by the Second Respondent and may mislead the Tribunal. For clarity, the initial information request for [the First Appeal] was made by me on 31 st August 2023. Following the second Respondent’s 26 th September 2023 initial refusal under section 12, on 5 th October 2023 I requested clarification consistent with the ICO policy “Where a public authority claims that section 12 is engaged it should, where reasonable, provide advice and assistance to help the requestor to refine the request so that it can be dealt with under the appropriate limit. I received this clarification from the second respondent on 2 nd November 2023 and on the same day submitted a refined request to comply with section 12. The 4 th December 2023 refusal to comply with my refined request made no reference to section 12. It is therefore irrelevant for the Second Respondent to try and retrospectively apply this exemption over 2 years later. Clearly if the second respondent had been minded to again refuse under section 12 on 4 th December 2023- which they did not – I had already pre-empted this in my email to the second respondent of 3 rd November 2023 stating “if this still turns up too many responses to investigate within the cost guidelines, then I would recommend the following alternatives…”. All correspondence on these matters has been available to all parties for a very significant time prior to the original 11 th July 2025 adjourned hearing. Furthermore the complaint investigated by the first respondent for [the First Appeal] was based on an information request which the second respondent considered compliant with section 12 when the complaint was accepted. The Second respondent is attempting to place a hypothetical scenario before the tribunal over 2 years after they had already considered the refined requests as compliant with section 12. This is confusing and in my view threatens to unnecessarily distract and obfuscate the purpose of the Tribunal from valid material matters .”

39. In its skeleton argument, the MOD argued that section 12 should have been maintained throughout and that it was through its oversight that it was not done. It should be noted that section 12 was raised in response to the first request within the first appeal and on a realistic analysis has remained relevant throughout the appeal. The application should be viewed in light of the breadth of the Appellant’s requests.

40. After hearing submissions from both parties at the hearing, the Tribunal decided that it was in the interests of justice to admit the late evidence explaining the MOD’s position, as it was potentially relevant to the matters the Tribunal needed to consider the appeal, although it would be a matter for the Tribunal as to the weight which should be placed on this Legal framework

41. Section 1 FOIA creates a duty to disclose information held by public authorities. That duty exists whether that information is accurate or not; if it is held it is subject to the regime in FOIA albeit the accuracy of the information may be relevant to any balance of the public interests.

42. The duty to disclose information held by public authorities is subject to exemptions. There are broadly two types of exemption set out in Part II of FOIA: absolute and qualified. An exemption will be “qualified” where, if the exemption is engaged, the relevant public interests must be balanced to determine whether the public interest in maintaining the exemption outweighs the public interest in disclosure pursuant to section 2 FOIA. Section 23 is an absolute exemption so will not require the balancing of the public interests. Sections 27, 24 and 26 are qualified exemptions so we must balance the public interest in considering them.

43. Section 12 is not subject to this, because it is an exemption under Part I rather than Part II of FOIA.

44. Following the cases of R (Evans) v Attorney General [2015]UKSC 21 and Montague v The Information Commissioner and Department for International Trade [2022] UKUT 104 (AAC) and [2023]EWCA Civ 1278 it is clear that the Tribunal should apply the public interest balance at the date of refusal, not at the date of an internal review, and thus not at any later date such as where there is a later reliance on additional or different exemptions. Section 12

45. Section 12(1) provides that: “(1) Section 1(1) does not oblige a public authority to comply with a request for information if the authority estimates that the cost of complying with the request would exceed the appropriate limit.”

46. (2) Subsection (1) does not exempt the public authority from its obligation to comply with paragraph (a) of section 1 (1) unless the estimated cost of complying with that paragraph alone would exceed the appropriate limit”

47. By regulation 3 of the Freedom of Information and Data Protection (Appropriate Limit and Fees) Regulations 2004 (the Fees Regulations), the 'appropriate limit' for the MOD, as a government department specified in Part 1 of Schedule 1 of FOIA is £600. The cost of staff time is estimated at £25 per hour meaning a request would exceed the appropriate limit if complying would take more than 24 hours . Regulation 4 provides that the public authority may take into account in its estimate the time which would be taken in determining whether it holds the information, locating the information, or a document which may contain the information, retrieving the information, or a document which may contain the information, and extracting the information from a document containing it. Section 23

48. Section 23, in Part II of FOIA, provides that a public authority is entitled to withhold the information requested where to do so would involve disclosure of information supplied by a body dealing with security matter, as follows: “23 Information supplied by, or relating to, bodies dealing with security matters. (1) Information held by a public authority is exempt information if it was directly or indirectly supplied to the public authority by, or relates to, any of the bodies specified in subsection (3). (2) A certificate signed by a Minister of the Crown certifying that the information to which it applies was directly or indirectly supplied by, or relates to, any of the bodies specified in subsection (3) shall, subject to section 60, be conclusive evidence of that fact. (3)The bodies referred to in subsections (1) and (2) are— a. the Security Service, b. the Secret Intelligence Service, c. the Government Communications Headquarters, d. the special forces, e. the Tribunal established under section 65 of the Regulation of Investigatory Powers Act 2000 ,

49. the Tribunal established under section 7 of the Interception of Communications Act 1985 , a. the Tribunal established under section 5 of the Security Service Act 1989 ”

50. Section 23(5) provides that:- “The duty to confirm or deny does not arise if, or to the extent that, compliance with section 1(1)(a) would involve the disclosure of any information (whether or not already recorded) which was directly or indirectly supplied to the public authority by, or relates to any of the bodies specified in subsection (3)”.

51. In determining whether information ‘relates to’ a section 23 body, ‘relates to’ is used in a wide sense, although it is not to be stretched too far; a mere incidental connection between the information and the body is not enough – see the decisions of the Upper Tribunal in APPGER v IC & FCO [2015] UKUT 0377 (AAC) (‘APPGER’) and Corderoy v IC & Attorney General [2017] UKUT 0495 (AAC) (‘Corderoy’) and the Court of Appeal in Department of Health v IC & Lewis [2017] EWCA Civ 374 .

52. FOIA should not be used in a way which reveals the activities of the section 23 bodies – see APPGER paras 16, 21 and 33.

53. The Upper Tribunal in Commissioner of the Police of the Metropolis v Information Commissioner & Rosenbaum [2021] UKUT 5 (AAC) endorsed as being correct as a matter of law the following principles put forward by the IC in that case:- “1. Section 23 affords the “widest protection” of any of the exemptions: Cobain at [19(b)] and [29].

2. The purpose of section 23 is to preserve the operational secrecy necessary for section 23(3) bodies to function: Lownie at [50].

3. It is “Parliament’s clear intention that, because of what they do, there should be no question of using FOIA to obtain information from or about the activities of section 23 bodies at all”. The exclusion of the section 23(3) bodies from the scope of FOIA was shutting the front door, and section 23 was “a means of shutting the back door to ensure that this exclusion was not circumvented”: APPGER at [16].

4. The legislative choice of Parliament was that “the exclusionary principle was so fundamental when considering information touching the specified bodies, that even perfectly harmless disclosure would only be made on the initiative or with the consent of the body concerned”: Cobain at [28]; Lownie at [53].

5. Asking whether the information requested is anodyne or revelatory fails to respect the difficulty of identifying what the revelatory nature of the information might be without a detailed understanding of the security context: Lownie at [42]; Corderoy at [59].

6. When applying the ‘relates to’ limb of sections 23(1) and (5), that language is used in “a wide sense”: APPGER at [25]; Corderoy at [59]; Savic at [40].

7. The first port of call should always be the statutory language without any judicial gloss: APPGER at [23]; Corderoy at [51]; Savic at [40].

8. With that warning in mind, in the context of ‘relates to’ in section 23, it may sometimes be helpful to consider the synonyms of “some connection”, or “that it touches or stands in some relation to” (APPGER at [13], [25]) or to consider whether the request is for “information, in a record supplied to one or more of the section 23 bodies, which was for the purpose of the discharge of their statutory functions” ( APPGER at [21], [26]; Lownie at [57]). But the ‘relates to’ limb must not be read as subject to a test of focus ( APPGER at [14]) or directness ( Lownie at [59] – [60]).

9. The scope of the ‘relates to’ limb is not unlimited and there will come a point when any connection between the information and the section 23(3) body is too remote. Assessing this is a question of judgement on the evidence: Lownie at [62].

10. The assessment of the degree of relationship may be informed by the context of the information: Lownie at [4] and [67].

11. The scope of the section 23 exemption is not to be construed or applied by reference to other exemptions, including section 24: APPGER at [17]; Lownie at [45] and [52].

12. In a section 23(1) case, regard should be had as to whether or not information can be disaggregated from the exempt information so as to render it nonexempt and still be provided in intelligible form: Corderoy at [43].

13. Section 23(5) requires consideration of whether answering ‘yes’ or ‘no’ to whether the information requested is held engages any of the limbs of section 23: Savic at [43], [82] and [92].

14. The purpose of section 23(5) is a protective concept, to stop inferences being drawn on the existence or types of information and enables an equivalent position to be taken on other occasions: Savic at [60].”

54. Section 23 is an absolute exemption; if it is engaged, no public interest balancing is required: section 2(3)(b) FOIA Section 27

55. Section 27 provides an exception to the duty to make disclosure of the information for international relations as follows: (1) Information is exempt information if its disclosure under this Act would, or would be likely to, prejudice— (a) relations between the United Kingdom and any other State, (b) relations between the United Kingdom and any international organisation or international court, (c) the interests of the United Kingdom abroad, or (d) the promotion or protection by the United Kingdom of its interests abroad. (2) Information is also exempt information if it is confidential information obtained from a State other than the United Kingdom or from an international organisation or international court. Section 24

56. Section 24 provides: “(1) Information which does not fall within section 23(1) is exempt information if exemption from section 1(1)(b) is required for the purpose of safeguarding national security. (2) The duty to confirm or deny does not arise if, or to the extent that, exemption from section 1(1)(a) is required for the purpose of safeguarding national security.”

57. The principles regarding national security are also well-established and were set out by the three-judge panel of the Upper Tribunal in FCDO v Information Commissioner, Williams and Others [2021] UKUT 248 (AAC) at [31]: Section 26

58. Section 26 provides: “(1) Information is exempt information if its disclosure under this Act would, or would be likely to, prejudice— (a) the defence of the British Islands or of any colony, or (b) the capability, effectiveness or security of any relevant forces. … (3) The duty to confirm or deny does not arise if, or to the extent that, compliance with section 1(1)(a) would, or would be likely to, prejudice any of the matters mentioned in subsection (1).” The Role of the Tribunal

59. The Tribunal’s remit is governed by section 58 FOIA. This requires the Tribunal to consider whether the decision made by the IC is in accordance with the law or, where the IC’s decision involved exercising discretion, he should have exercised it differently. If we are satisfied that the IC’s decision notice is in error of law or involves an inappropriate exercise of discretion then we will allow the appeal and may substitute a decision notice for that of the IC. The Tribunal may receive evidence that was not before the IC and may make different findings of fact from the IC. The hearing

60. In his skeleton argument and at the hearing, in summary the Appellant made the following points relating to the First Appeal: a. The government policy has confirmed there is no recognised threat from UAP, no classified material held on UAP and no dedicated UK team investigating such sightings. This policy is of “material and fundamental relevance to the significant public interest and scientific good engaged in this case”. b. The IC’s position in relation to the application of section 27(4) is “incorrectly formed” because: i. Only unsupported opinion has been provided that either such information exists or that the release of such information would have a negative impact on international relations or disturb Five Eyes relationships ii. The US government is going through a planned and detailed programme of disclosure relating to UAP, so there is no justification that the UK releasing this information would harm international relations iii. The IC did not demonstrate it has investigated why this exemption was applied across the 14 years and 10 months of information requested. c. Neither respondent has addressed why a blanket NCND exemption was applied to the information sought. d. The reliance of the Respondents on Montague to argue that only information at the time of the refusal of the initial request should be admissible is wrong; any information published up to the time of the First Decision Notice on 28 October 2024 should be considered because this information was provided by the Appellant, it was in the public domain by the latter date and throws light on the grounds now given for refusal (see R (Evans) v AG [2015] UK SC 21). the MoD held the information relating to this UAP Inaugural Caucus at the time the information request was received as the general public had been made aware of the existence of this meeting on 31st May 2023 by the lead party in Five Eyes on this issue, the US government.

61. The lack of appropriate investigation of this case by the IC was a determining factor in the Appellant's original complaint being dismissed by the IC. a. The IC did not investigate the complaint in full because it did not investigate the exemptions under section 24(2) or 26(3). The lack of investigation makes the IC’s decision invalid. b. The time taken by the IC and MOD to review this case has material impact on the outcome of the investigation because of the information that has been released into the public domain during the process, which gives further weight to the lack of relevance of a section 27 exemption. For FOIA to be sufficiently robust, operationally fit for purpose and responsive to the general public's rights as enshrined within the act, that there should appropriate mechanisms in place to ensure timescales are adhered to by the public bodies involved.

62. He made the following points in relation to the Second Appeal: a. Information of material import to the case came into the public domain [A96-A100], some published by the MOD themselves [A100], prior to the initial information request being submitted on 21 August 2024. The IC did not investigate this appropriately. b. The MOD is effectively admitting that the NCND principles were not applied appropriately for this case. c. Based on his own public release of information (on 2nd August 2024, prior to 21 August 2024 information request) regarding two officials attending the Inaugural UAP Caucus, which by corollary therefore took place, it is not tenable for the MOD to continue to use a NCND response. d. The use of section 23 exemptions is heavy-handed and inappropriate. To be 'fit for purpose' the FOIA should be proportionate and fair in terms of the principles enshrined within Article 19 of the UN Universal Declaration of Human Rights and other appropriate subsidiary international law. e. The IC took an inconsistent and incomplete investigation approach to its investigations in relation to the first and second document requests. f. Mr Curtin commented on the IC’s reliance on Information Commissioner v Malnick & ACOBA [2018] UKUT 72 (AAC) , whereby the Upper Tribunal rejected the submission that the IC had not fully discharged his functions unless and until he had made a decision on every exemption relied upon. He submitted that this appeal is predicated on whether the IC undertook the appropriate level of investigation of all the exemptions prior to making a judgement decision on one or all of the exemptions. g. The time delays for the internal reviews for both cases were significant (57 working days and 76 working days respectively), both in excess of the maximum guidelines (40 days) and not an isolated occurrence. Furthermore, he considers the communication with him regarding these delays was poor or absent, which is inconsistent with the PR guidelines issued by the IC. Discussion and conclusions The First Appeal

63. The first question we considered was whether, as a matter of fact, Mr Curtin’s November Request was made as a refinement of the previous August Request which had been considered under section 12 or whether both the MOD and IC were correct to treat it as a stand-alone request. We were persuaded by Mr Curtin’s clear evidence and find that that he intended that the November Request should be a refinement of the August Request. We considered that this was supported by the text of the November Request reproduced by the IC at paragraph 6 of the First Decision Notice which expressly offered some options for refining the request and reducing the number of responses caught by it so as to bring it under the cost threshold for section 12. We also note that Mr Curtin did not seek an internal review of the August Request, which suggested that he did not consider the MOD had made a final decision on his request at the point of making the November Request.

64. The MOD in its response dated 4 December 2023 stated that it was treating the correspondence as a request for information under FOIA. It did not mention section 12. We accepted the MOD’s submission that it had made an error in its handling of the November Request, in that it had treated this as an entirely new request rather than as a refinement of the previous August Request. As the MOD had treated it in this way, it flowed from that that the IC would consider the response actually given by the MOD rather than looking at the November Request as part of the conversation between the MOD and Mr Curtin about refining the August Request.

65. Having found as a matter of fact that the November Request was a refinement of the August request, we consider that the MOD, and thus the IC, ought properly to have considered it against the background of the August Request and considered whether section 12 was engaged. We consider that not to have done so and to have moved straight to consideration of section 23 and 27 was an error which means that the First Decision Notice was not issued in accordance with the law.

66. As to whether it was fair to allow the MOD to change its position to plead section 12 rather than section 23(5) and 27(2) at a late stage in the proceedings, we took account of the UT decision in DEFRA v Information Commissioner and Simon Birkett [2011] UKUT 39 (AAC) (26 January 2011) which is binding authority for the proposition that a public authority which has initially relied upon a particular exemption under FOIA may, as of right, later rely on additional or different exemptions without the permission of the IC or Tribunal. Paragraph 60 of that decision states “ the nature of the appeal before the First-tier Tribunal requires it to consider the response that the public authority should have made afresh. It must apply the law afresh to the request taking account of the issues presented at the hearing or identified by the First-tier Tribunal.”

67. In the course of the hearing, Mr Jolliffe drew the Tribunal’s attention to the letter which was sent by the MOD to Mr Curtin on 2 November 2023 (page B255). This letter provided a breakdown of the results of undertaking a search using key terms from the request on one of the MOD’s internal network to identify potential information in scope, which yielded 20,020 links relating to “ national security ”, “ threats ” and “ Five Eyes ”. The MOD stated that if it was to allocate an initial search time of 3 minutes per link to conduct a search of that area to identify any information within scope of the request this would take 138 days to do so, which amply exceeded the limit for section 12. It concluded “ Please note, depending on the nature of any suggested refinement, this may still exceed the appropriate cost limit. Additionally, information may also be subject to exemptions under the Ac t”. We find that it was this letter to which Mr Curtin was responding when he made the November Request, which sought ways in which the number of links could be reduced, notably by removing the search terms for “ national security ” and “ threats ”.

68. Adopting the information and methodology set out in the letter dated 2 November 2023, this suggestion would have removed the vast majority of the links, leaving 1,640 links which were related to Five Eyes. If 3 minutes was allocated to each of these links this would result in 82 hours of work, which is clearly in excess of the section 12 threshold, simply to identify whether there was any information in this sample. When taking account of the fact this sample was from only one of the MOD’s internal networks and any information identified would also need to be reviewed before considering disclosure, the potential figure rises. Had “ Five Eyes ” been also excluded as a search term, then a fresh search would need to have been undertaken in order to respond.

69. We are therefore persuaded on balance of probabilities that the work it would take to identify and consider potentially relevant information would significantly exceed the section 12 limit. For this reason, we allow the First Appeal and substitute a decision notice which reflects the section 12 position. The Second Appeal

70. The ambit of the information sought by Mr Curtin in the Second Appeal is in connection with a Five Eyes (FVEY) meeting at the Pentagon on 24 May 2023. The meeting was entitled “ FVEY Inaugural UAP Caucus Working Group ”. Mr Curtin requested details for the UAP update section for the UK only. We deal with each of the grounds of appeal raised by Mr Curtin below.

71. Mr Curtin argued that the IC did not give enough weight to the ‘non threat’ policy position which in his view meant there was significant public interest and good in releasing this information. We did not agree with Mr Curtin that this public interest and public good should prevail, because we were persuaded by the IC’s argument that section 23 of FOIA is an absolute class-based exemption, so once it is engaged the public interest in disclosure does not need to be considered. We agreed with the MOD that Section 23(5) does not depend on government policy, but on the fact that the subject matter, were it to exist, being information more likely than not to be information supplied to the public bodies, directly or indirectly by the security bodies listed in section 23(3).

72. Mr Curtin made a number of criticisms of the investigation conducted by both the IC and the MOD into his complaints, in terms of the scope of the investigation, the consistency of the investigations into the First and Second Appeals and the time it took to respond to him properly. The Tribunal explained at the hearing that it does not have any power to review the way in which an investigation is conducted, and that the IC has significant discretion as to how it goes about this. We also clarified that the Tribunal does not have the power to sanction the IC or MOD for any delays under FOIA.

73. Mr Curtin argued that the IC did not adequately assess or give appropriate weight to the Appellant’s rights under Article 19 of UNUDHR and subsequent legislation and the presumption that all information is accessible subject only to a narrow system of exceptions. We disagreed with this, because, as pointed out by the IC, the Tribunal only has jurisdiction under FOIA in this appeal and attempts to widen this have failed, as in the Moss case. We also agreed with the MOD’s argument that the position here is weaker than with Moss , because that case concerned the ECHR which does have a bearing on the interpretation of English law, whereas the UNUDHR does not create a right to information which this Tribunal can address.

74. In relation to Mr Curtin’s argument that the IC did not investigate the MOD’s refusal of the request under sections 24, 26 and 27 of FOIA and so has produced an incomplete analysis, which is unbalanced and unfair, we disagreed. The Tribunal is bound by the UT’s decision in Malnick that once the authority has lawfully relied on one exemption and notified its decision it has complied with its obligation and does not then need to consider all or any further potential exemptions which might be relied upon. In other words, if section 23 is engaged that is a complete answer and the IC does not need to go any further.

75. Mr Curtin argued that information of material import came into the public domain before the initial information request submitted on 21 August 2024, so there is no justification for the MOD to use an NCND response concerning this meeting, as some or all of this information existed. We were persuaded for the reasons set out in the gist that the MOD had not released any such information.

76. For all these reasons, we were satisfied that section 23(5) was engaged. As this is an absolute exemption we did not need to go on to consider the public interest in any potential disclosure. We therefore dismiss the Second Appeal.

Simon Curtin v Information Commissioner & Anor [2026] UKFTT GRC 227 — UK case law · My AI Tax