Government faces legal challenge over immigrant data rights
Activist groups accuse the government of creating a ‘two-tier system’ of data rights to the detriment of immigrants


The Open Rights Group (ORG) has launched a legal challenge against the UK government over a clause in the Data Protection Act (DPA) 2018, which they say will deprive immigrants of equitable data rights.
Launched with campaign group the3million, a judicial review will argue that an exemption inserted into the DPA undermines the European Union's General Data Protection Regulation (GDPR) by creating a 'two-tier system' to the detriment of foreign nationals.
The groups argue this exemption will remove the right for people going through the UK immigration process to access their own personal data - and effectively use this information to themselves challenge any errors the Home Office makes.
Privacy group issues legal challenge to facial recognition General Data Protection Regulation (GDPR) GDPR news: GDPR turns six months old
The new exemption, according to ORG, applies to a wide range of public and non-governmental bodies including the NHS, employers, banks and landlords - effectively creating a two-tier system of data rights for UK nationals, and immigrants.
"The Government's 'hostile environment' may have been renamed, but its policies are clearly still here," said ORG's executive director Jim Killock. "Restricting the rights of millions to their personal data in immigration processes risks inaccurate data being used to make life altering decisions. ORG can't allow that to pass without challenge."
The judicial review follows a crowdfunding effort set up by the3million co-founder Nicholas Hatton earlier this year - in which the organisations raised 40,000, surpassing their target by more than 10,000 - to support their potential legal costs.
After failing to persuade the government to remove the clause, the campaigners have now resorted to the courts to remove a feature they argue "would unnecessarily restrict the rights of millions of people across the country for the purpose of 'effective immigration control'."
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
The judicial review will be supported by law firm Leigh Day.
"the3million and ORG''s legal challenge matters to all 3.6 million EU citizens - who will have to apply for settled status to stay in their own homes after Brexit," Hatton said, adding: "No applicant should be prevented from accessing the data the Home Office holds about them."
ORG has played an active part in campaigning for changes to how digital and privacy rights are managed and enforced across the UK - with its role over the last few years increasing in prominence. Last week, the group challenged the UK government to follow Scotland's footsteps in promising to immediately delete mugshots by the end of the legal retention period.
Fellow civil rights groups have been working parallel to ORG to influence and change government policy, including Big Brother Watch, which last month issued legal proceedings against the Met police's use of facial recognition technology. The Investigatory Powers Act has also been the subject of anger from such groups, with Liberty last year raising more than 50,000 towards fighting the intrusion of privacy the law's "bulk surveillance" facilitates.
IT Pro approached the Home Office for comment, but yet to get a response.

Keumars Afifi-Sabet is a writer and editor that specialises in public sector, cyber security, and cloud computing. He first joined ITPro as a staff writer in April 2018 and eventually became its Features Editor. Although a regular contributor to other tech sites in the past, these days you will find Keumars on LiveScience, where he runs its Technology section.
-
CISA issues warning in wake of Oracle cloud credentials leak
News The security agency has published guidance for enterprises at risk
By Ross Kelly
-
Reports: White House mulling DeepSeek ban amid investigation
News Nvidia is caught up in US-China AI battle, but Huang still visits DeepSeek in Beijing
By Nicole Kobie
-
Tech leaders worry AI innovation is outpacing governance
News Business execs have warned the current rate of AI innovation is outpacing governance practices.
By Emma Woollacott
-
Top data security trends
Whitepaper Must-have tools for your data security toolkit
By ITPro
-
SEC data breach rules branded “worryingly vague” by industry body
News The new rules announced last week leave many questions unanswered, according to security industry experts
By Ross Kelly
-
The gratitude gap
Whitepaper 2023 State of Recognition
By ITPro
-
Meta sues ‘data scraping for hire’ service that collected info on 600k users
News Meta says tackling data scraping will require a “collective effort” from platforms and policymakers
By Ross Kelly
-
Building a data governance strategy in 2023
In-depth Data governance will continue to expand as attitudes change and businesses look to optimise the value of their data
By Keri Allan
-
FCC plans strict overhaul of 15-year-old US data breach regulations
News Telcos could no longer be able to use negligence as a defence for data breaches as the FCC also seeks to hasten public notification of breaches
By Rory Bathgate
-
UK follows EU in securing data deal with South Korea
News The deal will foster cross-border collaboration between businesses by reducing administrative and financial frictions
By Zach Marzouk