Key facts
- Former UK Information Commissioner John Edwards is reportedly preparing legal action against a woman who raised concerns about his behavior.
- Tech Secretary Liz Kendall announced an independent review into the Information Commissioner's Office (ICO) culture and governance.
- The ICO issued only two GDPR fines in the 2023-24 fiscal year.
- The ICO opted against a formal investigation into the Ministry of Defence's Afghan data breach.
- The ICO is undergoing a governance overhaul, transitioning to a board-led structure.
Former UK Information Commissioner John Edwards is reportedly preparing to sue a woman who raised concerns about his conduct, a move that has drawn criticism from Tech Secretary Liz Kendall. Kendall announced an independent review into the Information Commissioner's Office's (ICO) culture and governance, alongside plans to appoint a majority-female board of non-executive directors.
Experts suggest that the problems at the ICO predate Edwards' tenure, with concerns raised about under-enforcement of data protection laws. Professor David Erdos noted that the regulator has become increasingly selective in its actions, even in serious cases, and that tens of thousands of complaints often go unresolved.
During Edwards' time as commissioner, the ICO faced scrutiny over its willingness to use its enforcement powers. In one notable instance, the ICO decided against a formal investigation into the Ministry of Defence's mass Afghan data breach, which exposed the personal details of over 18,000 Afghans. This decision was criticized by former policing minister Kit Malthouse.
The ICO is also undergoing a significant governance overhaul, transitioning from a single Information Commissioner model to a board-led structure. This transition presents an opportunity to rebuild credibility, according to legal experts, provided appointments bring genuine regulatory and technological expertise.
An ICO spokesperson stated that an independent investigation found Edwards' conduct to be unacceptable and below expected standards.