UK's top data and AI regulator quits after 'inappropriate' humour

John Edwards, the UK's information commissioner, has resigned following a workplace investigation.

"I have accepted that there have been occasions where I exercised poor judgement and made attempts at humour that were inappropriate and caused offence," he said in a statement on Friday.

The Information Commissioner's Office (ICO) is responsible for regulating AI in the UK and also oversees data protection regulation and the freedom of information law.

Edwards' resignation was confirmed by the government, which said it had come after an independent probe "that took place regarding allegations made against him".

"The government expects the highest standards of conduct from all senior leaders in public life," said a spokesperson for the Department for Science, Innovation and Technology (DSIT).

"Mr Edwards has acknowledged that his conduct fell below these standards."

They added that existing legal arrangements mean deputy commissioners must undertake the regulator's responsibilities and "ensure continuity of leadership".

The BBC has approached the ICO for comment.

Edwards, who had been at the watchdog since January 2022, had already stepped back from his post in February when the investigation started.

In his statement, shared on his LinkedIn page, he said while he disagreed with how the ICO's investigation had been carried out, "I accept that my position has become untenable".

He said he did not want to become "a distraction" from the ICO's work and had notified the government of his resignation as both commissioner and chair of the ICO "effective immediately".

The ICO said in a statement on 10 June its investigation had been completed and, finding "there is a case to answer", said the commissioner would be "temporarily unable to act in fulfilling his responsibilities for the remainder of the process".

Increased scrutiny

Edwards' resignation comes amid increased scrutiny over the ICO's work, particularly in dealing with data protection complaints from the public.

Non-profit campaign groups the Good Law Project and the Open Rights Group (ORG) recently launched action to challenge the watchdog - accusing it of "brushing aside thousands of public data complaints".

"John Edwards' departure is a chance for the Government to appoint a regulator with teeth, and reset the regulators' approach of providing data protection in name only," ORG executive director Jim Killock said on Friday.

"Parliament must ensure that the future Commission is run by professionals who want the law enforced, including against government data failures."

Edwards said in his statement on Friday he was "proud" of his own contributions and that of ICO staff, more broadly.

"While I will no longer be able to continue this work in my current role, my commitment to the principles, values, and objectives that have guided my professional life remains unchanged," he added.

'Unprecedented'

Jon Baines, senior data protection specialist at law firm Mishcon de Reya, said the Commissioner's resignation was "unprecedented".

"We have had Information Commissioners (initially called Data Protection Registrars) since 1984, and all have served their full term," he told the BBC.

"This is the first ever resignation, and it is in extraordinary circumstances."

Baines said because Commissioner is appointed by the Crown, he must ask the King to relieve him of his duties - and whether that had happened remained unclear.

The role of Information Commissioner was also "imminently" expected to be abolished and replaced by an Information Commission, he said - adding "the Government will need to recruit a new chair".

The ICO is tasked with ensuring data and information rights are upheld in the UK.

This includes making sure organisations are correctly handling people's data, and investigating potential breaches of the law.

It has the power to take enforcement action against firms which do not comply.

In serious cases, it can fine firms up to £17.5m, or 4% of their worldwide turnover in the previous financial year - whichever is higher.

The ICO recently dished out a £14m fine to online platform Reddit, finding it had unlawfully used children's personal information and failed to adequately check the age of its users.