ICO investigates data's role in political campaigns
Watchdog concerned over Cambridge Analytica's alleged use of data


The UK's data protection authority is launching an inquiry into whether voter's personal data is being misused in political campaigns.
The Information Commissioner's Office (ICO) has also approached Cambridge Analytica, a company which uses big data to "model target audience groups and predict the behaviour of like-minded people".
The company gathers personal data from various sources and builds profiles of individual and their political inclinations. The Observer last week claimed that the firm played key roles in both the US election and Britain's vote to leave the EU.
An ICO spokesperson said: "We have concerns about Cambridge Analytica's reported use of personal data and we are in contact with the organisation."
They added: "We are also conducting a wider assessment of the data protection risks arising from the use of data analytics, including for political purposes, and will be contacting a range of organisations. We intend to publicise our findings later this year."
A spokesman for Cambridge Analytica sent IT Pro a statement saying that it is in touch with the ICO and "happy to demonstrate to the ICO that we are compliant with the UK and EU data law."
He added: "Cambridge Analytica did not do any work (paid or unpaid) for the Leave.EU campaign. In 2015 the company was in discussions to potentially work with them. That work did not go ahead."
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
The Observer also claimed that US billionaire Robert Mercer, who gave funding to President Donald Trump's election campaign and who is a long time friend of Nigel Farage, part-owns Cambridge Analytica, and encouraged its use it to provide advice for the Leave campaign on how to target swing voters via Facebook.
Cambridge Analytica has denied it has played any role during the referendum campaign, which it would have had to declare to the Electoral Commission.
On the website Campaign, Cambridge Analytica explained how it had helped Ted Cruz win the Iowa Caucus in February 2016.
"CA was able to provide the campaign with predictive analytics based on more than 5,000 data points on every voter in the United States," it said. "From there, CA's team of political consultants and psychologists guided the campaign on what to say and how to say it to specific groups of voters."
In Europe, companies are not allowed to use third party data without seeking consent, whereas in the US this is the norm.
Zach Marzouk is a former ITPro, CloudPro, and ChannelPro staff writer, covering topics like security, privacy, worker rights, and startups, primarily in the Asia Pacific and the US regions. Zach joined ITPro in 2017 where he was introduced to the world of B2B technology as a junior staff writer, before he returned to Argentina in 2018, working in communications and as a copywriter. In 2021, he made his way back to ITPro as a staff writer during the pandemic, before joining the world of freelance in 2022.
-
Bigger salaries, more burnout: Is the CISO role in crisis?
In-depth CISOs are more stressed than ever before – but why is this and what can be done?
By Kate O'Flaherty Published
-
Cheap cyber crime kits can be bought on the dark web for less than $25
News Research from NordVPN shows phishing kits are now widely available on the dark web and via messaging apps like Telegram, and are often selling for less than $25.
By Emma Woollacott Published
-
Top data security trends
Whitepaper Must-have tools for your data security toolkit
By ITPro Published
-
Why bolstering your security capabilities is critical ahead of NIS2
NIS2 regulations will bolster cyber resilience in key industries as well as improving multi-agency responses to data breaches
By ITPro Published
-
SEC data breach rules branded “worryingly vague” by industry body
News The new rules announced last week leave many questions unanswered, according to security industry experts
By Ross Kelly Published
-
Crackdown on crypto needed to curb cyber crime, says expert
News Threat actors would struggle to generate money without the anonymity provided by unregulated digital tokens, but such a move would require worldwide buy-in
By Rory Bathgate Published
-
The gratitude gap
Whitepaper 2023 State of Recognition
By ITPro Published
-
UK gov invites experts to contribute to its overhauled AI regulatory approach
News The new approach will not adopt the EU's centralised model and sits alongside the National AI Strategy and Data Protection and Digital Information Bill
By Connor Jones Published
-
UK government opts against regulation for cyber security standards
News UK Cyber Security Council will move ahead with its planned chartered standards, with the government to monitor its adoption
By Daniel Todd Published
-
Encryption battle plays out in Australian Parliament
News The opposition said that the government is “addicted to secrecy”
By Zach Marzouk Published