Refusal under s40(2) Although the council is not obliged to process this request because it is vexatious, if it were to process it then much of the information would be exempt under the exemption in section 40(2) FOIA. This exemption applies where disclosure of third-party personal data would be likely to breach one or more of the data protection principles contained in the Data Protection Act 199