Disclosure Log

Planned ICT and digital projects 2026/27 and 2027/28 (FOI/8653)

Message from Nottinghamshire County Council - 29 September 2026

Dear **********,

 

 

FREEDOM OF INFORMATION ACT 2000 – REQUEST FOR INFORMATION REFERENCE FOI/8653

Thank you for your request for information relating to Planned ICT and digital projects 2026/27 and 2027/28.

We are now able to provide the following information:

1. A list of ICT, digital, network, telephonybusiness-systems projects and programmes that are planned, approvedin progress for the financial years 2026/27 and 2027/28. For each, please give the project name, a one-line description, the approvedestimated budget, the planned start and end dates, and the job title of the officer responsible for delivering it. Exempt (see below)


2. Where a project in that list will be delivered with the help of an external suppliercontractor, the name of that supplier if one has already been appointed. Exempt (see below)


If a published document already contains this information (for example a capital programme, an ICTdigital strategy,a forward plan), a link to it and the page reference is a complete answer and I would be grateful for it. Exempt (see below)

For this FOI, we are not supplying anyinformationon digital, network or telephony projects, programmes or contracts, Suppliers or Systems and no information on our ICT Digital Strategy. This is exemption informationunder section 31 of Freedom of Information Act. The public interest in disclosure for transparency, scrutiny and accountability of public bodies is outweighed by the public interest in ensuring the risks to operations and assets of public authorities are not exposed to malicious actors. 
This is due to the following: 

  1. Any information that could be used by hackers, scammers, and other malicious actors to compromise the Council’s ICT systems and cyber security should not bedisclosedto external organisations,partnersor members of the public. 
2. Examples of information which could be used by malicious actors, particularly ifcomprisedof details relating toshort timeperiods of less than a year, include: 
  • Use of external cyber/online security contractors, firms; and 

Details of ICT and cyber security systems, procedures,policiesand contracts particular to the Council 

Section 31(1)(a) of the Freedom of Information Act 2000 is a qualified exemption and therefore requires consideration of the public interest test.
Factors favouring disclosure

  • Disclosure would promote openness and transparency regarding the Council"s planned expenditure and priorities for ICT, digital, network, telephony and business systems projects.
  • Disclosure would enable greater public scrutiny and accountability for the management of public funds and decision-making relating to technology programmes and contracts.
  • Disclosure would assist public understanding of the Council"s future digital transformation plans and procurement activities.
Factors favouring withholding the information
  • Disclosure would reveal detailed information about the Council"s current and planned ICT infrastructure, systems, projects, suppliers and implementation timescales.
  • This information could be used by malicious actors to identify potential vulnerabilities, target specific technologies, suppliers or projects, and develop attacks against Council systems and services.
  • Providing details of planned projects, responsible officers, system changes and external suppliers would contribute to a wider picture of the Council"s technology estate and security arrangements, increasing the risk of cybercrime and unauthorised access.
  • Cyber threats to public authorities are significant and ongoing. Disclosure under FOIA is effectively disclosure to the world at large, and any information released cannot be restricted to the requester alone.
  • A successful cyber attack could disrupt the delivery of vital public services, compromise sensitive information and result in financial and operational harm to the Council and the public it serves.

Conclusion
Whilst the Council recognises the public interest in transparency and accountability regarding the use of public funds, it considers that the public interest in maintaining the exemption outweighs the public interest in disclosure. Releasing information about current and planned ICT, digital, network, telephony and business systems projects, associated suppliers and strategic technology initiatives would be likely to assist those seeking to exploit vulnerabilities within the Council"s systems. The Council therefore considers that Section 31(1)(a) of the Freedom of Information Act 2000 is engaged and that the information should be withheld in the interests of preventing crime and protecting the security and resilience of its services

 

We trust this now satisfies your request and that you find this information to be helpful, however if you are unhappy with the way in which your request has been handled, then please email us at [email protected] quoting the reference FOI/8653 and we will be happy to review your request

For future reference, Nottinghamshire County Council regularly publishes previous FOI requests and answers on its website, under Disclosure logs, that may provide details relating to your query. (see link) Your privacy: we use your personal information such as name and address so that we can comply with our legal obligations to respond to FOI requests.  For further details about the use of information about you, please see the information handling privacy notice on our website at https://www.nottinghamshire.gov.uk/media/4323566/informationgovernanceandinformationrightsprivacynotice.pdf

If you are dissatisfied with the handling of your request, you have the right to ask for an internal review.   Requests should be submitted within 40 working days of the date of receipt of the response to your original request and should be addressed to: Complaints and Information Team, Nottinghamshire County Council, County Hall, Loughborough Road, West Bridgford, NOTTINGHAM, NG2 7QP or [email protected].

Please remember to quote the reference number above in any future communications.

If you are not content with the outcome of the internal review, you have the right to apply directly to the Information Commissioner for a decision.  The Information Commissioner can be contacted at: Information Commissioner’s Office, Wycliffe House, Water Lane, WILMSLOW, SK9 5AF or https://www.nottinghamshire.gov.uk/global-content/privacy