MPs turn on the ICO over contact-tracing fiasco
Open Rights Group says there is "something rotten at the heart of the ICO" for not acting on the government's "unlawful behaviour"
More than 20 MPs across four political parties have accused the UK's data regulator of failing to hold the government to account over privacy failures in the NHS Test and Trace system.
The politicians want the Information Commissioner Elizabeth Denham to consider fining the government after it admitted that it failed to conduct a legally required impact assessment on privacy, according to The Guardian.
A letter signed by 22 MPs suggests the government should receive a penalty "if it fails to adhere to the standards which the ICO is responsible for upholding".
Liberal Democrat MP Daisy Cooper, one of the letter's signatories, said the government had "seemingly played fast and loose with data protection measures" during the pandemic.
"The public needs a data regulator with teeth: the ICO must stop sitting on its hands and start using its powers - to assess what needs to change and enforce those changes - to ensure that the government is using people's data safely and legally," she said.
The letter was arranged by the Open Rights Group, which successfully forced the government to admit its failure to perform a data protection impact assessment. It features signatures from the Labour, the Lib Dems, Green and Scottish National Parties.
"There is something rotten at the heart of the ICO that makes them tolerate government's unlawful behaviour," said Jim Killock, executive director of the Open Rights Group.
Sign up today and you will receive a free copy of our Future Focus 2026 report - the leading resource for IT decision-maker insight on priorities and investment areas in AI, security and more.
"The ICO is a public body, funded by the taxpayers, and accountable to parliament. They must now sit up, listen and act. As a regulator, ICO must ensure that the government upholds the law."
In July, the government conceded that its contract-tracing programme had been operating unlawfully since it launched on 28 May. In a letter to campaigners, a government solicitor stated that NHS Track and Trace was developed at such pace and scale that it wasn't anywhere close to a primary focus.
"The Johnson government brought this programme forward more quickly than was practical, and we are all paying the consequences. Privacy is fundamental to trust," said Clive Lewis, the Labour MP for Norwich South.
Bobby Hellard is ITPro's Reviews Editor and has worked on CloudPro and ChannelPro since 2018. In his time at ITPro, Bobby has covered stories for all the major technology companies, such as Apple, Microsoft, Amazon and Facebook, and regularly attends industry-leading events such as AWS Re:Invent and Google Cloud Next.
Bobby mainly covers hardware reviews, but you will also recognize him as the face of many of our video reviews of laptops and smartphones.
-
A spate of cyber attacks has rocked JapanNews With over 100 cyber attacks impacting major sectors this year, Japan’s ruling party is calling for an emergency taskforce to strengthen AI defenses
-
Top takeaways: The AI tokenomics challengeFeature Why invisible metering, compounding agentic workflows, and production scale turn enterprise AI into an open tab – and how leaders can govern for measurable value
-
ICO reprimands Metropolitan Police over use of shadow ITOfficers and other staff were using an unapproved third-party platform to share data on suspected shoplifters
-
LastPass hit with ICO fine after 2022 data breach exposed 1.6 million users – here’s how the incident unfoldedNews The impact of the LastPass breach was felt by customers as late as December 2024
-
23andMe 'failed to take basic steps' to safeguard customer dataNews The ICO has strong criticism for the way the genetic testing company responded to a 2023 breach.
-
Cyber attacks have rocked UK retailers – here's how you can stay safeNews Following recent attacks on retailers, the NCSC urges other firms to make sure they don't fall victim too
-
ICO admits it's too slow dealing with complaints – so it's eying up automation to cut staff workloadsNews The UK's data protection authority has apologized for being slow to respond to data protection complaints, saying it's been overwhelmed by increased workloads.
-
AI recruitment tools are still a privacy nightmare – here's how the ICO plans to crack down on misuseNews The ICO has issued guidance for recruiters and AI developers after finding that many are mishandling data
-
“You must do better”: Information Commissioner John Edwards calls on firms to beef up support for data breach victimsNews Companies need to treat victims with swift, practical action, according to the ICO
-
LinkedIn backtracks on AI training rules after user backlashNews UK-based LinkedIn users will now get the same protections as those elsewhere in Europe