Dozens of civil liberties campaigners and legal professionals are calling for an inquiry into the UK's data protection watchdog, citing a 'collapse in enforcement activity' following the Afghan data breach. The group, including Statewatch and the Good Law Project, has written to Chi Onwurah, chair of the Commons science, innovation and technology committee, coordinated by Open Rights Group, urging an investigation into the Information Commissioner's Office (ICO) led by John Edwards.
The signatories express concern over the ICO's decision not to formally investigate the Ministry of Defence (MoD) after the Afghan data breach, a serious leak of information about Afghans who worked with British forces before the Taliban takeover in August 2021. Those affected say their lives are at risk. The letter warns of 'deeper structural failures' beyond this incident, citing other breaches such as those affecting Windrush victims, where the ICO issued reprimands or lowered penalties.
The letter argues that the ICO's 'public sector approach' lacks deterrence and fails to drive good data management across government. It notes that private sector enforcement is also declining, as organisations divert resources from compliance, knowing the ICO is unlikely to act. The signatories call on the committee to use its oversight powers, stating that change appears unlikely without intervention.
An ICO spokesperson defended their approach, stating they have a range of regulatory powers and respect civil society's role in scrutiny, welcoming opportunities to account for their work before the DSIT select committee.
