ICO will now enforce against slow subject access requests
The ICO says it will prioritise enforcement against persistent subject access delays, after a pilot found people waiting up to 16 years for records.
The Supreme Court has overruled its own 2014 decision and scrapped the acid test, and DHSC says cases should be reviewed as soon as is practicable.
The acid test is gone. On 2 June 2026 the Supreme Court overruled its own 2014 decision in Cheshire West and held that the test was wrong in law. DHSC guidance published on 15 June 2026 says many people currently subject to DoLS authorisations may no longer meet the threshold, and that cases should be reviewed as soon as is practicable. Every authorisation you hold now needs looking at again.
The case is a Reference by the Attorney General for Northern Ireland of a devolution issue under paragraph 34 of Schedule 10 to the Northern Ireland Act 1998, UKSC 2025-0042. The judgment and a press summary are both published.
The acid test that has governed practice since 2014 — that a person lacking capacity to consent, who is under continuous supervision and control and is not free to leave, is deprived of their liberty — no longer applies.
In its place sits a multifactorial assessment. The court requires consideration of the type, duration, effects and manner of implementation of restrictions. It also requires consideration of whether the person objects, and whether they can validly consent by expressing their wishes and feelings even where they lack legal capacity.
That last point is the deepest change. Under Cheshire West, a person's contentment was irrelevant; the objective conditions decided the question. Under the new approach, whether a person objects and whether they can express valid consent through wishes and feelings are part of the assessment, even where they lack capacity in the legal sense.
The DHSC guidance, published 15 June 2026, makes three points that determine what you do next.
Many people currently under DoLS authorisations may no longer meet the threshold.
Cases should be reviewed as soon as is practicable.
Existing authorisations remaining in place in the interim do not constitute unlawful deprivation.
Read the third point carefully, because it is the one that stops a panic. You are not acting unlawfully by holding an authorisation that was validly made under the old test while you work through reviews. What you cannot do is sit on it indefinitely.
NHS England was required to publish updated e-learning by 30 July 2026.
Start with a list. Every person in your service with a standard authorisation, every urgent authorisation, and every person subject to a Court of Protection order authorising deprivation of liberty in supported living or their own home. If you cannot produce that list in an afternoon, that is your first finding.
Then triage. Three groups will emerge.
People who plainly remain deprived of their liberty under the new approach — significant restrictions, sustained duration, active objection. These stay, and your reasoning gets rewritten to the new test.
People who plainly do not — light-touch arrangements that met the acid test only because of the continuous supervision limb, where the person is content, expresses no objection and can express wishes and feelings consistent with being where they are. These are the cases DHSC has in mind.
And the middle, which will be most of them. That is where the multifactorial assessment does its work, and where you need a documented reasoning trail rather than a conclusion.
Care Shield will not tell you whether a person meets the new threshold — that is a professional judgement your team has to make — but it will tell you which authorisations you hold, when each was last reviewed, and which ones nobody has looked at yet.
The Supreme Court judgment in UKSC 2025-0042, its press summary, and DHSC guidance on the UK Supreme Court 2026 judgment on what constitutes a deprivation of liberty.
No. DHSC guidance of 15 June 2026 states explicitly that existing authorisations remaining in place in the interim do not constitute unlawful deprivation. What the guidance does require is that cases are reviewed as soon as is practicable. Holding an authorisation while you work through reviews is acceptable; ignoring the review duty is not.
A multifactorial assessment. The court requires consideration of the type, duration, effects and manner of implementation of restrictions, together with whether the person objects and whether they can validly consent by expressing wishes and feelings, even where they lack legal capacity. It is a judgement across factors rather than a three-limb checklist.
No. The care a person needs and the legal framework authorising restrictions are separate questions. If a restriction is necessary and proportionate to keep someone safe, it remains so regardless of whether it amounts to a deprivation of liberty. Change the legal analysis, not the care, unless the care itself needs changing.
Produce a complete list of everyone with a standard or urgent authorisation or a Court of Protection order, then contact your local authority DoLS team about sequencing before starting. Prioritise by review or expiry date and by cases where the person's contentment was previously treated as irrelevant, since those are most affected.
How this was written. Care Shield’s press desk drafts from primary sources — the statute book, regulator publications and government announcements — and publishes automatically once every factual claim traces to a named source. The sources are listed above so you can check them. It is not legal advice, and it is not a substitute for reading the regulation that applies to your service. If you find something wrong, tell us at hello@careshieldcompliance.co.uk and we will correct it in public, on this page.
What changed, what it means operationally, and what you have to do about it — across CQC, the Care Inspectorate, CIW and RQIA. Written by our press desk, sourced from the statute book and the regulators themselves.
One email a week. We send it from news.careshieldcompliance.co.uk, you can unsubscribe from the bottom of any issue in one click, and we will never pass your address to anyone. What we do with it is set out in our privacy policy.The ICO says it will prioritise enforcement against persistent subject access delays, after a pilot found people waiting up to 16 years for records.
Since 31 March 2026 every care home resident in Scotland can name an Essential Care Supporter, and suspending one now carries a legal presumption of serious harm.
Registration applications opened on 7 September 2026 and must reach CQC in time for assessment by 6 December 2027, under an SI built on the Manchester Arena Inquiry.