‘2024 was billed to be the year of the first ‘robust and comprehensive’ UK statutory review of the extent of journalism’s compliance with data protection law and good practice, a formal appraisal which was (and is) meant to become a clear ‘part of the media landscape’ as reformed by the Data Protection Act (DPA) 2018 in the wake of the general/first part of the Leveson Inquiry. In sum, the Information Commissioner’s Office (ICO) was obliged to assess and report on the extent of journalistic compliance with data protection law and good practice during the first four years of the new regime (as well as over subsequent five year periods). Reflecting the admittedly very challenging nature of this task, the ICO also gained unprecedented and far-reaching powers (Sch. 17) which enabled it to compel the provision of relevant information with only 24 hours’ notice (para. 2) and even to assess activity on site through assessment notices (para. 3). Unfortunately, as this blog will explicate, the ICO did not use any of these powers or undertake a Review which can be seen as either robust or comprehensive, produced an Outcomes Report which failed to come to any definitive view as to the extent of journalistic compliance and also elected not to proactively publicise its Review Report in any way at the time of its release.’

Full Story

UK Constitutional Law Association, 17th December 2024

Source: ukconstitutionallaw.org