Reform UK Party Limited – Court Ruling (United Kingdom, 2026)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Reform UK Party Limited was taken to court for not responding to over 1,700 requests from people wanting to stop their personal data from being used. The court found that the party did not follow the rules for responding to these requests. This case serves as a reminder for organizations to handle personal data requests promptly and correctly, especially during important events like elections.
What happened
Reform UK Party Limited failed to respond to numerous requests from individuals asking to stop their personal data processing.
Who was affected
Over 1,700 individuals who sent requests to Reform UK Party Limited regarding their personal data were affected.
What the authority found
The court ruled that Reform UK Party Limited did not comply with GDPR requirements for responding to personal data requests in a timely manner.
Why this matters
This ruling highlights the need for political parties and other organizations to be diligent in managing personal data requests. It sets a precedent that failure to respond can lead to legal challenges.
GDPR Articles Cited
National Law Articles
Good Law Project Limited, a representative body, was mandated by 51 individuals to bring proceedings on their behalf under Article 80 UK GDPR. Reform UK Party Limited, the controller, is a registered political party and processed personal data in the context of its political activities. In the month before the UK general election of 4 July 2024, the representative body provided an online tool through which members of the public could send notices to major political parties. These notices included a request to stop processing personal data, an objection to processing under Articles 18 and 21 UK GDPR, a written notice under Schedule 1 DPA 2018 requiring the recipient not to process the sender’s personal data and a DSAR under Article 15 UK GDPR. More than 11,600 individuals used the tool. Of these, 1,746 individuals, including the data subjects represented in the claim, sent a notice to the controller between 5 June and 4 July 2024. The controller did not respond within one month. It neither provided a substantive response nor explained that it required additional time to respond. On 8 October 2024, the representative body sent a pre-action letter to the controller. Between 11 and 14 October 2024, the controller sent response emails stating that it had found no record of the recipients in its systems, except for the DSAR and cease-and-desist notice. The controller also stated that any election mailing may have been based on electoral roll data, which it claimed it was entitled to use and which was exempt from subject access. The representative body considered these responses insufficient. It wrote again to the controller on 24 October and 3 December 2024, but the controller did not reply. On 28 March 2025, the representative body issued a claim seeking compliance with the DSARs and compensation for non-material damage under Article 82 UK GDPR and Section 168 DPA 2018. The controller applied to strike out the claim or, alternatively, for summary judgement. The controlle
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for Reform UK Party Limited in UK
This is the only recorded case for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. Reform UK Party Limited - United Kingdom (2026). Retrieved from cookiefines.eu
Last updated: