ICO investigating use of data in political campaigns
The investigation will determine if parties breached data protection laws

The Information Commissioner's Office (ICO) has said it will begin a formal investigation to assess whether political groups were using analytics in a way that breached data protection laws.
The announcement follows an initial assessment in March, which looked at the use of analytics to shape political campaigning and contact people based on individual data. It appears that the ICO has gathered enough evidence of data protection violations to merit a full-blown investigation.
"Given the big data revolution, it is understandable that political campaigns are exploring the potential of advanced data analysis tools to help win votes," wrote information commissioner Elizabeth Denham, in a blog post.
"The public have the right to expect that this takes place in accordance with the law as it relates to data protection and electronic marketing," she added.
Political parties are able to contact members of the public to promote political agendas, however to do so falls under the category of 'direct marketing', which is subject to data protection laws. The ICO has responded to complaints in the past where individuals have received direct contact from political parties without their consent.
A recently published report by the Guardian revealed how political parties were targeting messages at voters through their Facebook pages, and tailoring the content based on individual data.
The use of analytics came under the spotlight in the aftermath of the Brexit vote, when it emerged that US-based Cambridge Analytica, which claims to be the"global leader in data-driven campaigning", was involved with the Vote Leave campaign. However this association was never declared to the election watchdog.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
The ICO also said that although the use of data analytics by political parties is becoming more frequent, the level of awareness among the public about how their data is collected and shared remains low. "Having considered the evidence we have already gathered I have decided to open a formal investigation into the use of data analytics for political reasons," said Denham.
The investigation will run alongside current investigations into practices deployed during the EU referendum campaign, but could expand beyond that into similar political movements. This investigation will remain a "high priority" for the ICO, according to Denham.
"I am conscious that opening this formal investigation coincides with ongoing campaigning ahead of the General Election," said Denham. "The timing of my decision is unrelated to the current campaign, but I would nonetheless remind all relevant organisations of the need to comply with the law."
Dale Walker is a contributor specializing in cybersecurity, data protection, and IT regulations. He was the former managing editor at ITPro, as well as its sibling sites CloudPro and ChannelPro. He spent a number of years reporting for ITPro from numerous domestic and international events, including IBM, Red Hat, Google, and has been a regular reporter for Microsoft's various yearly showcases, including Ignite.
-
Bigger salaries, more burnout: Is the CISO role in crisis?
In-depth CISOs are more stressed than ever before – but why is this and what can be done?
By Kate O'Flaherty Published
-
Cheap cyber crime kits can be bought on the dark web for less than $25
News Research from NordVPN shows phishing kits are now widely available on the dark web and via messaging apps like Telegram, and are often selling for less than $25.
By Emma Woollacott Published
-
AI recruitment tools are still a privacy nightmare – here's how the ICO plans to crack down on misuse
News The ICO has issued guidance for recruiters and AI developers after finding that many are mishandling data
By Emma Woollacott Published
-
“You must do better”: Information Commissioner John Edwards calls on firms to beef up support for data breach victims
News Companies need to treat victims with swift, practical action, according to the ICO
By Emma Woollacott Published
-
LinkedIn backtracks on AI training rules after user backlash
News UK-based LinkedIn users will now get the same protections as those elsewhere in Europe
By Emma Woollacott Published
-
UK's data protection watchdog deepens cooperation with National Crime Agency
News The two bodies want to improve the support given to organizations experiencing cyber attacks and ransomware recovery
By Emma Woollacott Published
-
ICO slams Electoral Commission over security failures
News The Electoral Commission has been reprimanded for poor security practices, including a failure to install security updates and weak password policies
By Emma Woollacott Published
-
Disgruntled ex-employees are using ‘weaponized’ data subject access requests to pester firms
News Some disgruntled staff are using DSARs as a means to pressure former employers into a financial settlement
By Emma Woollacott Published
-
ICO reprimands Coventry school over repeated data protection failures
News The ICO said the academy trust failed to follow previous guidance, which caused a serious data breach
By Emma Woollacott Published
-
ICO dishes out fine to HelloFresh for marketing spam campaign
News HelloFresh failed to offer proper opt-outs, the ICO said, and customers weren’t warned their data would be used for months after they cancelled
By Emma Woollacott Published