VerbatimParliament, as it happens

Internet: Data Protection

Asked by Sir John HayesConservativeDepartment for Science, Innovation and TechnologyTabled Answered 2 December 2025UIN 93649

The question

To ask the Secretary of State for Science, Innovation and Technology, whether her Department is monitoring the number of ID-linked data breaches following the implementation of the Online Safety Act 2023.

Answered by Ian Murray

The Information Commissioner’s Office (ICO) is responsible for monitoring and enforcing the application of data protection legislation in the UK. As the independent regulator of the Online Safety Act (OSA), Ofcom may refer matters to the ICO if it has concerns that a provider has not complied with its obligations under data protection law.

The ICO has several powers under the data protection legislation to tackle the unlawful processing of personal data, including the power to serve substantial civil monetary penalties for serious breaches of the legislation. Details of the ICO’s enforcement activity can be found on its website.

Verbatim has judged this answer against the question that was actually asked — answered, partly answered, or evaded. Sign in to see the verdict →

Open this question in Verbatim →

Every written question, searchable

155,000 questions tabled since the election, with the answer each department gave — and the ones still unanswered, with the clock running. Free to search.

Search written questions →Read on Verbatim