ICO Must Investigate Reform ‘Competition’ for Data Protection Breaches

Key Takeaways

• Reform asks for voting data to enter prize draw.
• No specific privacy policy explains data usage.
• Lacks legal basis for processing special category data.
• Transparency and consent obligations appear breached.
• ICO urged to investigate potential data protection violations.

Summary

Reform UK launched a competition offering a year’s energy bills to participants who disclose their past and intended voting preferences. The Open Rights Group argues the scheme breaches UK data protection law by collecting special category data without a clear privacy policy, legal basis, or genuine consent. The ICO has been called to investigate the transparency and lawful processing failures. If upheld, the case could set a precedent for political campaigning and data privacy.

Pulse Analysis

The intersection of political campaigning and data protection has become a flashpoint in the UK, especially after the GDPR classified political opinions as special category data. Regulators require explicit, informed consent and transparent processing notices for such information, and any deviation can trigger significant penalties. As public awareness of data harvesting grows, voters expect their political choices to remain confidential unless they voluntarily share them under clear terms.

Reform UK’s recent competition, promising a year’s worth of energy bills, asks entrants to reveal how they voted in past elections and how they intend to vote in the future. The Open Rights Group highlights several compliance gaps: the absence of a dedicated privacy notice, no identified legal basis for handling special category data, and a consent mechanism that is effectively coercive. Moreover, the competition’s terms allow Reform to unilaterally decide prize adjudication and data use, further eroding the principle of genuine consent. These factors collectively breach transparency obligations under the UK Data Protection Act, prompting calls for the ICO to intervene.

If the ICO proceeds with an investigation, the outcome could reshape how political parties and advocacy groups design data-driven outreach. A decisive ruling would reinforce the need for granular privacy policies, lawful bases for processing, and truly optional participation in data collection. For marketers, the case serves as a cautionary tale: leveraging incentives to obtain political data without robust safeguards risks regulatory action and reputational damage, underscoring the importance of aligning campaign tactics with evolving privacy expectations.