The missing courage of the ICO

The missing courage of the ICO

I note from Jim Killock’s pinned repost of a post by David Erdos on X, that the media and the ICO have issued a report, dated March 2024, on journalistic practices and the Data Protection Act 2018. This was produced as part of response to the Leveson Report, itself, spawned by the Millie Dowler & celebrity phone hacking scandal. Erdos makes the point that the ICO did not make use of its investigatory powers, which he refers to as §17 powers nor that the story was followed by … err! … the Press.

Additionally, over the last week, the ICO announced its report into its investigations into the Labour Party and its compliance with GDPR/DPA. Again, they weren’t asking the big questions and say more about the mitigation actions than the compliance failures. This allows the Guardian to run a headline focusing on the failure to respond to DSARs, in fact the Guardian focuses only on late response, and not on failure and everyone is silent on the refusals.

I would like to know what measures the Party took to ensure that their IT sub-contractors met their obligations as data processors, what measures the Party took to ensure their DPO was qualified[1] according to Article 37 of the GDPR, why no compensation has been offered/mandated to victims of the breach, what measures Labour took to ensure the completeness of any DSARs, what measures the Labour Party took to ensure that only appropriate staff had access to personal data and what measures the Party took to ensure that democratic rights of members weren’t adversely effected by the breach? It would seem the ICO have not asked these questions; this is exceedingly disappointing.

Regulatory capture is a well-studied phenomenon. However, it’s simpler if one is the government rather than a private business or an NGO. It seems pretty clear that the ICO is frightened of the major political parties which since human rights law is designed to protect citizens from governments, rather spoils the point of having one. NB the GDPR has a lot to say about the importance of the independence of both Data Protection Officers and also the national data protection supervisory authority.


[1] The data protection officer shall be designated on the basis of professional qualities and, in particular, expert knowledge of data protection law and practices … n.b. Data Protection practices require an expertise in cyber security. …

Starmer, Berlin, rejoineu and delay

Starmer, Berlin, rejoineu and delay

Even the press and some commentators noticed that Kier Starmer visited Berlin and repeated his Brexit red-lines and yet claimed to want to reduce trade frictions between the two countries.

Germany is not in a position to negotiate this. Trade with 3rd countries is an EU competency. Starmer’s growth mission will be easier if the UK were to rejoin the single market [and customs union]. This involves him changing his mind, and talking to the Commission [FT] to the Commission in Brussels.

The British people would seem to want to rejoin the EU but the Labour Government and too many experts would seem to be still pursuing the chimera of a mercantilist patchwork trade deal which  must be called “Cakeism” in the UK and  will be called cherry-picking  or extrawurst in the EU. This is not available, neither is a swiss style multi-treaty deal.

Starmer’s government seems to think that revamped Anglo-German military treaty will help the cause of reduced friction trade. There are three problems with this. Just as one shouldn’t start trade negotiations in Berlin but in Brussels, military co-operation needs to involve Poland which now has one of the largest armies in the EU. Since the British ambitions are broader i.e. beyond military co-operation  and to include intelligence sharing and cybersecurity but since the UK was kicked out of Europol as part of Brexit because it no longer recognised the EU’s Charter of Fundamental rights, intelligence sharing will need a common recognition of privacy and judicial rights of citizens. The children and grandchildren of fascist and Stalinist societies will not permit their governments to outsource surveillance to an unrestricted and and unaccountable body. The third problem is that suspicious member states will characterise the UK position as wanting freedom of movement for weapons and ammunition, but not of people, and a single market for guns but not for anything else.

As a counterpoint, Richard Bentall writes  in a thread where he states that “the only way to slow it [rejoining the EU] is by saying it’s too difficult”, to which I add that holding out for better opt-outs is merely delaying rejoining. As a reinforcement, Blade of  the Sun argues that rejoining is simple,

  1. You apply to rejoin.
  2. They tell us what you need to do.
  3. You do it.
  4. Rejoin

And it is that simple, no opt-outs, no special deals but I fear that this Government are not yet ready to drop their dreams of a swiss-style/cakeist deal supported by too-clever academics and journalists, who are looking to ‘hack the treaties’. They need to make their mind up, do they want to be seen to be clever, or change the world; too often this is a choice and one that many academics and journalists fail to address or get wrong. …

Austerity is a choice

Austerity is a choice

You don’t have to be a modern monetarist to believe that the UK has a debt crisis. There are a number of well evidenced and widely believed economic theories that support the use of a Government deficit to induce growth which is the surest way to reduce national debt. Those that argue austerity is a choice are bang on the money.

Debt fetishists need to get this, but so do those who argue that we should fund some desirable programme, be it pensioners winter fuel allowances, doctor’s recruitment or student debt forgiveness because we can fund a defence budget. How we use and deploy our military is of course a matter of other priorities but arguing we need to accept austerity but applying the cuts elsewhere is ignorant. …