Guido can shed more light on the Information Commissioner’s Office investigation into the use of data by campaigns during the EU referendum.

The report reveals that the ICO is “still looking” into breaches of data by BSE that may require further action. After the referendum, BSE became Open Britain, and this summer re-branded again as the ironically named People’s Vote campaign. All while the investigation was ongoing…

The campaign’s re-branding leads to priceless tweets, but it doesn’t get them out of the serious ICO investigation.

The People’s Vote campaign is still under investigation by the ICO for potential serious breaches of data privacy.

“‘During the course of our investigation, we obtained information that the Liberal Democrats had sold the personal data of its party members to BSiE for approximately £100,000.”

“In June and July 2018, we served information notices on Open Britain, the successor organisation to BSiE, and the Liberal Democrats, under the DPA1998, to investigate these issues.”

“We are still looking at how the Remain side of the referendum campaign handled personal data, including the electoral roll, and will be considering whether there are any breaches of data protection or electoral law requiring further action.”

The ICO has placed an enforcement notice against AIQ handling any UK data in the course of its investigation. Shouldn’t the ICO – in the same way – suspend the People’s Vote campaign from using any UK data while they investigate and determine the source of the data?

UPDATE: BSE responds: “This assertion is entirely untrue. Britain Stronger in Europe did not receive, or pay for, Liberal Democrat members’ personal data at any point.”