UK's top data and AI regulator quits after 'inappropriate' humour

John Edwards, the UK's information commissioner, has resigned following a workplace investigation.

"I have accepted that there have been occasions where I exercised poor judgement and made attempts at humour that were inappropriate and caused offence," he said in a statement on Friday.

The Information Commissioner's Office (ICO) is responsible for regulating AI in the UK and also oversees data protection regulation and the freedom of information law.

Edwards' resignation was confirmed by the government, which said it had come after an independent probe "that took place regarding allegations made against him".

"The government expects the highest standards of conduct from all senior leaders in public life," said a spokesperson for the Department for Science, Innovation and Technology (DSIT).

"Mr Edwards has acknowledged that his conduct fell below these standards."

The ICO later confirmed Edwards had resigned as information commissioner - a post he has held since early 2022.

"As a Crown appointee and accountable to Parliament, Mr Edwards submitted his resignation to the DSIT," it said in a statement.

"Mr Edwards had voluntarily stepped back from his duties at the end of February to enable an independent workplace investigation," it added - saying since then, the organisation's board and executive team has led its work.

"The investigation concluded that there was a case to answer and made clear that his behaviour fell short of the conduct expected from a public official," it added.

When asked by the BBC, the organisation would not elaborate on the findings, or if they concerned what Edwards described as "poor judgement" or "inappropriate" humour in his resignation statement.

In his statement, shared on his LinkedIn page, Edwards said while he disagreed with how the investigation had been carried out, "I accept that my position has become untenable".

He said he did not want to become "a distraction" from the ICO's work and had notified the government of his resignation as both commissioner and chair of the ICO "effective immediately".

The ICO said in a statement on 10 June the independent investigation had been completed and, finding "there is a case to answer", said the commissioner would be "temporarily unable to act in fulfilling his responsibilities for the remainder of the process".

It said on Friday its board and executive team would continue to lead the ICO "to ensure continuity in our leadership and regulatory work".

Edwards' resignation comes amid increased scrutiny over the ICO's work, particularly in dealing with data protection complaints from the public.

Campaign groups the Good Law Project and the Open Rights Group (ORG) recently launched action to challenge the watchdog - accusing it of "brushing aside thousands of public data complaints".

"John Edwards' departure is a chance for the Government to appoint a regulator with teeth, and reset the regulators' approach of providing data protection in name only," ORG executive director Jim Killock said on Friday.

"Parliament must ensure that the future Commission is run by professionals who want the law enforced, including against government data failures."

Edwards said in his statement on Friday he was "proud" of his own contributions and that of ICO staff, more broadly.

"While I will no longer be able to continue this work in my current role, my commitment to the principles, values, and objectives that have guided my professional life remains unchanged," he added.

Jon Baines, senior data protection specialist at law firm Mishcon de Reya, said the commissioner's resignation was "unprecedented".

"We have had Information Commissioners (initially called Data Protection Registrars) since 1984, and all have served their full term," he told the BBC.

"This is the first ever resignation, and it is in extraordinary circumstances."

The role of Information Commissioner was also "imminently" expected to be abolished and replaced by an Information Commission, he said - adding "the Government will need to recruit a new chair".

The ICO is tasked with ensuring data and information rights are upheld in the UK.

This includes making sure organisations are correctly handling people's data, and investigating potential breaches of the law.

It has the power to take enforcement action against firms which do not comply.

In serious cases, it can fine firms up to £17.5m, or 4% of their worldwide turnover in the previous financial year - whichever is higher.

The ICO recently dished out a £14m fine to online platform Reddit, finding it had unlawfully used children's personal information and failed to adequately check the age of its users.

Sign up for our Tech Decoded newsletter to follow the world's top tech stories and trends. Outside the UK? Sign up here.