Freedom of Information and Data Protection Statute, 2026

ENACTED by the Koru of the Hokorian State under the authority of the Council of Advisors Charter.

Part I- Preliminary

Section 1- Short Title

1. This Statute may be cited as the Freedom of Information and Data Protection Statute, 2026.

Section 2- Commencement

1. This Statute shall come into force on a date appointed by the Koru of the Hokorian State.

Section 3- Interpretation

1. “State” means the Hokorian State.
2. “Public body” means any office, authority, council, force or body exercising public functions under authority of the State.
3. “Information” means recorded information in any form.
4. “Personal data” means information relating to an identifiable natural person.
5. “Request” means a request for information made under this Statute.
6. “Authority” means the Information and Data Protection Office recognised under this Statute.

Part II- Freedom of Information

Section 4- Right to Request Information

1. A legal person may request access to information held by a public body.
2. The right under subsection (1) exists only to the extent provided by this Statute.
3. No entitlement to information exists outside this Statute.

Section 5- Scope of Access

1. A public body shall provide requested information unless refusal is authorised under this Statute.
2. Access may be partial, conditional or deferred.

Section 6- Grounds for Refusal

1. A request may be refused where disclosure would:
2. prejudice national security;
3. undermine public order or safety;
4. impair the effective functioning of government;
5. compromise the dignity, authority or continuity of the State;
6. disclose confidential deliberation;
7. disclose personal data contrary to Part III; or
8. otherwise be contrary to law.
9. No public interest override exists unless expressly provided.

Section 7- Form and Procedure

1. Requests shall be made in such form as prescribed by regulation.
2. A public body may require clarification of a request.
3. Failure to comply with procedural requirements may justify refusal.

Part III- Personal Data Protection

Section 8- Lawful Processing of Personal Data

1. Personal data shall be processed only where:
2. authorised by law;
3. necessary for a public function; or
4. consent has been given where required.
5. No general right to data protection exists outside this Statute.

Section 9- Limits on Disclosure

1. Personal data shall not be disclosed where disclosure would:
2. cause unjustified harm to a person;
3. interfere with privacy without lawful basis; or
4. undermine trust in public administration.
5. Disclosure may occur where authorised by law or Constitutional Order.

Section 10- Retention and Accuracy

1. Public bodies shall retain personal data only for as long as necessary.
2. Reasonable steps shall be taken to ensure data accuracy.

Part IV- Oversight and Regulation

Section 11- Information and Data Protection Office

1. An Information and Data Protection Office is recognised for the purposes of this Statute.
2. The Authority shall be appointed by the Koru.
3. The Authority shall act independently within the scope of its mandate.

Section 12- Functions of the Authority

1. The Authority may:
2. issue guidance;
3. review refusals of requests;
4. monitor compliance with this Statute; and
5. make recommendations to public bodies.
6. Decisions of the Authority are advisory unless otherwise provided by law.

Part V- Review and Enforcement

Section 13- Review of Decisions

1. A person may request review of a refusal by the Authority.
2. No right of appeal exists beyond what is expressly provided.

Section 14- Enforcement

1. Non-compliance with this Statute may be addressed by:
2. administrative direction;
3. disciplinary measures; or
4. other lawful action.
5. No criminal liability arises unless created by statute.

Part VI- Limitations and Exceptional Circumstances

Section 15- Limitation and Suspension

1. The operation of this Statute may be limited or suspended by:
2. statute; or
3. Constitutional Order.
4. Any limitation or suspension shall have effect according to its terms.

Part VII- Miscellaneous and Final Provisions

Section 16- Relationship to Other Law

1. This Statute shall be interpreted consistently with the Fundamental Rights Charter and the Civil Status and Protections Charter.
2. Where inconsistency arises, higher constitutional instruments prevail.

Section 17- Regulations

1. Regulations may be made for the purposes of this Statute.
2. Regulations may prescribe procedures, forms, time limits and exemptions.

Section 18- Repeals and Continuity

1. Any prior law relating to freedom of information or data protection ceases to have effect to the extent of inconsistency.
2. Actions taken under prior law remain valid unless revoked.