ICO and Regulatory Membership
In any reconsideration of the powers of the Information Commissioner (or replacement body), power should be given to that body to determine that membership of a satisfactory regulatory body, which required appropriate governance and transparency standards from its members in relation to compliance with data protection legislation and good practice, should be taken into account when considering whether it is necessary or proportionate to take any steps in relation to a subscriber to that body.
How was this assessed?
Response
Not Accepted
Response
Not AcceptedSection 40 of the Crime and Courts Act 2013, which would have created an incentive for publishers to join a recognised regulatory body, was enacted but never commenced. On 1 March 2018, the Secretary of State announced that Section 40 would not be commenced and would be repealed. Section 40 was repealed by Section 50 of the Media Act 2024 (Royal Assent 24 May 2024). This recommendation was contingent on a costs incentive framework that no longer exists. Source: https://www.gov.uk/government/speeches/leveson-consultation-response
Published Evidence
Published assessments of implementation progress from inspectorates, select committees, official progress reports, and other sources. Check the source type badge to see whether each assessment is independent or government self-reported.
The recommendation that the ICO should take regulatory membership into account when considering enforcement action was not implemented. The Data Protection Act 2018 does not give the ICO this power. The ICO has been notably cautious about enforcing data protection law against the press.
View detailed findings
Not implemented. The ICO has no statutory duty to take press regulatory membership into account.