Saturday, March 29, 2025
Reform UK being sued for data breach
The website says that the Good Law Project is bringing a case on behalf of the claimants after it created a tool in the lead up to the general election that allowed voters to ask political parties what information they had on them through a Data Subject Access Request (DSAR) and to demand the party stop using that information:
Around 1,800 people used the tool to contact Nigel Farage’s party and, of those surveyed, 96% said that Reform had failed to respond to their data requests, thereby breaching its legal obligations. Reform was the worst performer of all the major political parties, according to GLP.
Between June-July 2024, voters submitted requests to Reform UK for their personal info and for the party to cease processing their data.
Reform UK was required to respond to these requests within one month, but failed to meet this deadline, according to the legal submission to the High Court.
Only after receiving a formal letter before action in October 2024 did Reform UK respond, claiming they had “no record” of the individuals in their systems, except for the original requests.
But GLP believes Reform UK’s identical responses to all the individuals were inadequate and likely false – since Reform UK’s own privacy policy states they “maintain a profile for each registered voter” by “merging” the Electoral Register with other data from third-party sources.
The claimant suspects Reform UK may be processing so-called special category data (including political opinions) about the individuals without proper legal basis.
The voters – ‘data subjects’ in the eyes of the law – have allegedly suffered “concern, worry, uncertainty and distress” due to Reform UK’s handling of their data and ignoring their requests.
GLP wants the court to order Reform UK to comply with the data requests, pay compensation for non-material damage, and cover legal costs.
Good Law Project through its lawyers, Pallas Partners LLP (Pallas), wrote formally to Reform UK to challenge its refusal to meet its obligations under the law. Reform failed to respond to the legal letter, but sent out “identical emails”, claiming to hold no data on any of them. It never responded to the demand to stop targeting those voters who requested it, the lawyers state.
Reform has reportedly ignored further legal letters from Pallas which sought more information about its process for handling DSARs and challenged Reform’s contention that it held no data on any of the individuals.
Now 51 people have opted to take further action collectively and challenge Reform in the High Court, under a novel legal mechanism embedded in the UK’s GDPR data protection law.
If Farage's party is going to engage with the electoral process then it needs to play by the rules and keep to the law of the land.
Comments:
Post a Comment
<< Home
<< Home
