Question to the Department for Science, Innovation & Technology:

To ask the Secretary of State for Science, Innovation and Technology, whether her Department is monitoring the number of ID-linked data breaches following the implementation of the Online Safety Act 2023.

The Information Commissioner’s Office (ICO) is responsible for monitoring and enforcing the application of data protection legislation in the UK. As the independent regulator of the Online Safety Act (OSA), Ofcom may refer matters to the ICO if it has concerns that a provider has not complied with its obligations under data protection law.

The ICO has several powers under the data protection legislation to tackle the unlawful processing of personal data, including the power to serve substantial civil monetary penalties for serious breaches of the legislation. Details of the ICO’s enforcement activity can be found on its website.