Copy of invoice/receipt for claim submitted by Barry Gardiner, MP

I can confirm that we hold information relevant to your request. Please find attached to this email a copy of the document. Some information has been redacted and is subject to a Refusal Notice under section 40 of the FOIA and in accordance with Section C of IPSA’s Publication Policy.

Sections 40(2) and 40(3A)(a) – personal data

This exemption applies to information which IPSA considers to be personal data within the meaning of Article 4(1) of the UK General Data Protection Regulation 2016 (UK GDPR) which states:

"personal data" means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly.

IPSA considered that the following are personal data within this definition: email address and other personal information of MP staff. We then considered whether disclosure of this personal data would breach any of the Principles relating to the processing of personal data in the UK GDPR.

The relevant principle falls at Article 5(1)(a):

Personal data shall be:

a. Processed lawfully, fairly and in a transparent manner in relation to the data subject

As IPSA was unable to find a lawful basis on which it could rely, within Article 6 of the UK GDPR, it therefore finds that the information is exempt under section 40.