Supermarkets: Data Protection
The question
To ask the Secretary of State for Science, Innovation and Technology, what assessment she has made of the adequacy of data privacy regulations governing supermarket loyalty schemes.
Answered by Ian Murray
All organisations in the UK that process personal data, including supermarkets operating loyalty schemes, must comply with the UK General Data Protection Regulation and the Data Protection Act 2018. This legislation requires personal data to be processed lawfully, fairly and transparently, and secured by appropriate technical and organisational measures. The Information Commissioner’s Office (ICO) is the UK’s independent regulator for data protection and is responsible for monitoring and enforcing this legislation. We recently strengthened their powers in the Data (Use and Access) Act 2025 to help them investigate suspected breaches of the legislation.
Verbatim has judged this answer against the question that was actually asked — answered, partly answered, or evaded. Sign in to see the verdict →