The approach would inevitably lead to many noncompliant controllers, especially SMEs, not being subject to any form of @iconews investigation which would exacerbate the lack of respect for legal rights and duties which data subjects now experience. The plans should be opposed.

ICO now propose to reject investigation of many complaints unless there is a considerable number or increase concerning the same controller. With no investigation, the ICO would be unable to discharge its obligation to inform the complainant of the investigation outcome.

In reality, almost no complaints are being progressed within maximum period, it is far from clear that these are subject to appropriate investigation & ICO makes almost no use of its formal corrective powers (there were just 2 #dataprotection fines in 2024-25). Complaints have 📈

Under law ⚖️ ICO must investigate all #dataprotection complaints to the extent appropriate, respond consistently with need for strong enforcement and inform the data subject of the outcome of both the investigation and the complaint (providing a progress update within 3 months).

The UK Information Commissioner's Office is currently consulting (until this Friday) on its plans to change its response to #dataprotection including UK #GDPR complaints. Please do respond via ico.org.uk/about-the-ic...

Not least given British mandate origins of today’s conflict, the #Commonwealth has a special responsibility. There’s more background, including the Commonwealth’s advocacy between 1967 and 1997 for a just resolution in Palestine in my open-access article: www.tandfonline.com/doi/full/10....

Instead, these omissions relate to ICO’s extreme reluctance to exercise its formal #dataprotection powers and functions, a reality which led to no UK #GDPR enforcement notices and just 2 fines (compared to >250 in eg Germany) in 2024/25. An in-depth & independent investigation would add value.