Calls for probe into eVisa failings that saw applicants’ data wrongly shared with others

Human rights campaigners have called for an investigation into the Home Office’s failure to investigate digital visa issues, which have seen people’s data wrongly shared with others, a watchdog has said.

Millions of people have registered to access e-Visas after physical documents are phased out for foreign nationals by the end of 2024.

However, some have reported problems proving they have the right to work, study, rent or travel in the UK due to errors and misunderstandings regarding electronic visas.

In some cases, when identities were merged, foreign nationals’ personal information and immigration history were inadvertently shared with foreigners.

Civil rights organizations want the government to publish figures on the number of data security incidents and complaints linked to the service. They are also calling for an investigation into the failure of the data regulator, the Information Commissioners Office (ICO), to act on the issues.

In a letter to the chair of the science, innovation and technology select committee, the 20 organizations told MP Dame Chi Onwurah: “eVisa failures prevent individuals from proving their status when they need it to enter the country, applying for jobs or receiving a pay rise, enrolling in training, claiming benefits. [data] The non-compliance is high and cannot be justified.”

The letter, coordinated by the Open Rights Group and shared with officials, stated that the problems are “systemic and rooted in design and architectural choices.” Independentcontinues.

Campaigners, including rights group The3million and the Immigrant Rights Network, said the ICO “avoided holding the government to account, intervening when it got it wrong and avoiding protecting the public from harm”.

The ICO said it assessed complaints on a case-by-case basis and decided to take further action based on the damage caused and whether the organization had taken steps to resolve the issues.

The regulator revealed in response to a request for data that it had received 851 complaints about the entire Home Office between December 2023 and December 2025.

The ICO currently does not have a commissioner after John Edwards resigned in June following a workplace investigation into his conduct. Liz Kendall, the secretary of state for science, said the investigation found he used “vulgar and highly sexualised language” in his interactions with staff.

In a post on LinkedIn announcing the resignation, Ms. Kendall added: “This type of behavior does not belong in the workplace, especially by the leader of an organization. Multiple women shared testimony with the investigator that they felt offended, confused and uncomfortable following their interactions with Mr. Edwards.”

The regulator has also faced criticism for its lenient approach to the government during Mr Edwards’ tenure. Mr Edwards told MPs he preferred to “work collaboratively with the government to identify errors and raise standards” rather than carry out formal investigations or impose fines.

This came to a head when it was revealed that the ICO was one of the few institutions allowed to know about a catastrophic data breach involving applicants for Afghan resettlement programmes, while the public and MPs were kept in the dark for nearly two years. The ICO chose not to launch a formal investigation into what went wrong, and the authorities did not receive any contemporaneous notice of the decision not to launch a formal investigation into the data loss.

Information Commissioner John Edwards told MPs on the science, innovation and technology committee that the ICO was not formally investigating but had confidence in the “integrity” of MoD officials.

He said the ICO held occasional meetings with MoD officials and “will convey its observations on lines of inquiry”, adding: “I understand these are gratefully received”. The ICO ruled in June 2024 that the Ministry of Defense had done enough to ensure bad data practices did not happen again.

Conservative MP Kit Malthouse said he was surprised there had been no official investigation given the seriousness of the breach. He told Mr Edwards: “You told us broadly that it was about a few off-the-record meetings and a handshake. Bye, nothing to see here.”

“It seems to me extraordinary given its seriousness and impact… The picture you paint of the way the ICO has handled this looks worrying”.

A spokesperson for the Information Commissioner’s Office said: “We are actively liaising with government departments in line with the Memorandum of Understanding between the ICO and HM Government.

“The MoU provides a framework for ongoing collaboration and information sharing, whilst maintaining the ICO’s independent regulatory role and ability to hold government to account. This includes the Home Office on matters relating to immigration activities.”

The Ministry of Internal Affairs was contacted for comment.