Government launches review of non-corporate channels in public bodies

The news

The government has announced a review into the use of non-corporate communication channels. An ICO spokesperson said the office welcomes the decision and stands ready to contribute its expertise to ensure a thorough and transparent process. The ICO has advocated for such a review repeatedly, including in a report laid before Parliament. This announcement comes as the ICO also concluded a criminal investigation into the unlawful obtaining and disclosure of medical information reported by the London Clinic in March 2024.

What's at stake

Non-corporate channels such as WhatsApp and Signal are used by public bodies for official business. A US firm, LeapXpert, helps public agencies capture, retain, govern and secure communications on these platforms as well as iMessage and SMS. The company has raised $180 million to expand in the government sector, which it says is its fastest-growing segment. In the UK, broader efforts to control public spending include a November 2024 commitment to cut consultancy use and save £1.2 billion by 2026, alongside calls for better digital workforce planning to meet a 2030 target of one in 10 civil servants in technology and digital roles.

The review addresses data security and record-keeping risks when public bodies bypass official systems. Supporters argue this creates gaps in transparency and compliance with information rules. Critics view the process as added bureaucracy at a time when government must focus on core priorities and reduce external spending. The ICO’s involvement is expected to shape standards for how personal data is handled across these channels.

The case for

Reviewing non-corporate channels will improve data security and transparency in government. Official systems ensure messages are captured, retained and audited in line with legal obligations. Without review, sensitive information risks being shared informally, as seen in the ICO’s March 2024 London Clinic breach case involving unlawful disclosure of medical data. Comparable controls used by firms such as LeapXpert show that governments can secure platforms like WhatsApp while meeting retention rules. A structured review would set clear expectations and reduce exposure to breaches.

The case against

The review is unnecessary bureaucracy that distracts from other pressing priorities. Public bodies already face tight budgets and multiple compliance demands. The government pledged in November 2024 to cut consultancy spending and deliver £1.2 billion in savings by 2026, yet recent Home Office contracts reached up to £350 million. Launching another review diverts senior time and resources from urgent tasks such as building digital skills to hit the 2030 target of one in 10 civil servants in technology roles. Existing guidance and selective tools can address risks without a blanket process that slows delivery.

Why it matters now

If the review proceeds it could lead to new rules on acceptable use of messaging apps by 2027. A YES outcome would likely strengthen ICO oversight and mandate better capture of non-corporate records. A NO outcome would leave current practices largely unchanged, relying on voluntary compliance. The ICO has pledged to provide expertise, so its input will influence findings that feed into wider public sector reforms already planned for the next two years.

Further reading

wired-gov.net · govtech.com

Have your say

This is a live referendum on refnation. Cast your vote →

Want to follow more questions like this? Sign in or create an account.