Written questions

Data Protection: Enforcement

Commons · Question 23555 · Tabled 28 Aug 2026 · Department for Digital, Culture, Media and Sport · Official record

Answered 8 Sep 2026

Question

Asked by Martin Wrigley

To ask the Secretary of State for Digital, Culture, Media and Sport, what enforcement action has been taken against organisations with inadequate data security since July 2024.

Answer

Answered by Stephanie Peacock, 8 Sep 2026

The Information Commissioner’s Office (ICO) is responsible for monitoring and enforcing the UK's data protection legislation independently of Government. The ICO has a range of powers to address organisations’ failures to comply with their data protection...