John Edwards is still, on paper, the UK Information Commissioner but he is in regulatory limbo, off the pitch on full pay after an HR probe found “a case to answer” and stripped him of his day‑to‑day powers.
The formere New Zealand Privacy Commissioner before his UK appointment, he has returned home while his deputy runs the ICO, leaving ministers and MPs to decide whether he comes back, resigns or is replaced.
Edwards voluntarily stepped back from his functions on 26 February 2026 during an independent investigation into workplace HR matters, ceasing contact with ICO staff and public‑facing duties.
The investigation has now concluded there is “a case to answer”, and the ICO has formally treated him as “temporarily unable to act”, transferring his statutory powers to Deputy Commissioner and Chief Executive Paul Arnold.
Politico reported Edwards is in New Zealand but continues to draw his £200,000‑a‑year package – set at that level by government on appointment and higher than the UK prime minister’s salary. Staff were initially told only that the Commissioner was on “extended leave of absence”, prompting criticism of how transparent the watchdog has been about the investigation into its own leader.
Because the role is held under letters patent and accountable to Parliament, any decision on his future now sits with the Department for Science, Innovation and Technology and, ultimately, ministers and MPs.
The NZ lawyer who took on Platforms
A public‑law specialist, Edwards made his name in Wellington as an information‑law lawyer before serving as New Zealand Privacy Commissioner from 2014 to 2021. He led New Zealand’s 2020 privacy reforms and built a reputation as an outspoken regulator on Big Tech and children’s privacy, which helped propel him into the UK role in 2022 as successor to Elizabeth Denham.
In the UK he has repeatedly framed privacy as “a right not a privilege” and promised “fair and impartial” treatment even for the largest platforms.
Fines, Big Tech and Children’s Data
Edwards has tried to dial down routine fines against UK public bodies while taking a harder line with major platforms, especially where children’s data is involved. Early speeches signalled a more pragmatic approach to public‑sector enforcement and a focus on cases where sanctions clearly protect people, rather than “regulation for regulation’s sake”.
That posture has been most visible in social‑media enforcement. In 2023, the ICO under Edwards fined TikTok £12.7 million for misusing children’s data, finding that up to 1.4 million under‑13s used the platform in 2020 in breach of its rules and that their data was processed unlawfully and without proper safeguards.
The penalty was reduced from a proposed £27 million after TikTok’s representations and the ICO’s decision to drop a provisional finding on special‑category data, highlighting his willingness to recalibrate fines when the legal and evidential picture changes.
TikTok has appealed, but in late 2025 the First‑tier Tribunal rejected a key preliminary challenge to the Commissioner’s power to issue the monetary penalty, a ruling the ICO welcomed as an important confirmation of its authority.
In early 2026, it also announced a fine of more than £14 million against Reddit over failures to apply robust age‑assurance measures, again emphasising the risks to children and teenagers on social media. The through‑line in Edwards’ public messaging has been clear: innovation is welcome, but when children’s data is involved, Big Tech can expect close scrutiny and serious sanctions.
A Watchdog in Limbo
Arnold keeps enforcement moving, but the strategic tone‑setting from the top is on hold while Whitehall decides whether Edwards returns, exits, or is quietly replaced.
