John Edwards has stepped down as UK Information Commissioner with immediate effect, admitting "poor judgement" and ill-judged humour - and leaving the country's data and AI watchdog leaderless at a pivotal moment for digital regulation.
The United Kingdom's most senior data protection and artificial intelligence regulator has resigned, drawing a line under a leadership crisis that had left the Information Commissioner's Office (ICO) effectively without a chief for nearly four months.
John Edwards confirmed on Friday that he was standing down immediately, giving up both his role as Information Commissioner and his place as incoming chair of the Information Commission, the reconstituted body due to take over the ICO's functions. In a statement published on his LinkedIn page, he conceded that an independent workplace investigation had concluded he had at times "exercised poor judgement" and made "attempts at humour that were inappropriate and caused offence."
While Edwards said he disagreed with how the investigation had been conducted, he accepted that his position had "become untenable." He added that he did not want to be "a distraction" from the office's work and had notified the government of his departure from both posts at once.
The resignation closes a turbulent chapter for a regulator whose job is to police how organisations - and the government itself - handle personal information.
From quiet absence to abrupt exit
Edwards' departure played out slowly and largely out of public view. He voluntarily stepped back from his duties on 26 February, cutting contact with ICO staff and giving up his public-facing responsibilities while an independent inquiry examined unspecified human-resources matters relating to him.
For weeks, staff were reportedly told only that the commissioner was on an extended leave of absence. The investigation surfaced publicly in late April, after the news outlet Politico began pressing the ICO over why its leader had effectively disappeared from view. Edwards, a New Zealander, had by then returned home, while his deputy ran the regulator in his absence.
Matters came to a head on 10 June, when the ICO disclosed that the investigation was complete. It found there was "a case to answer" - though, the regulator stressed, no formal finding of wrongdoing - and said Edwards would be unable to carry out his responsibilities for the rest of the process. Nine days later, he resigned outright.
A watchdog with broad powers - and growing critics
The timing is uncomfortable for an organisation already under intense scrutiny. The ICO enforces the UK's data protection regime, freedom of information law and the rules governing privacy in electronic communications. Under Britain's decentralised approach to regulating AI - which leans on existing watchdogs rather than a single dedicated body - it also shoulders much of the responsibility for overseeing how artificial intelligence systems use people's data. Its enforcement powers are considerable: it can impose fines of up to £17.5m, or 4% of a company's global annual turnover, whichever is greater.
Yet campaigners argue the regulator has been reluctant to use its teeth. The Good Law Project and the Open Rights Group recently launched a legal challenge accusing the ICO of brushing aside thousands of public complaints. The Good Law Project says the watchdog received close to 40,000 data protection complaints last year but issued only two fines, and critics have likened its new system for filtering complaints to a "digital bin."
That system, introduced in February, sorts complaints according to factors such as the severity of the potential harm, the number of people significantly affected and the wider public interest. The ICO defends it as a way of concentrating "finite resources" on the cases that matter most. Critics see it differently. Reacting to the resignation, Open Rights Group executive director Jim Killock said the exit was an opportunity for ministers to appoint "a regulator with teeth" and to make sure the law is enforced - including against the government's own data failures.
Edwards, for his part, was unrepentant about his record. He said he was "proud" of his contribution and that of ICO staff, and insisted his commitment to the principles that had guided his career remained unchanged. Supporters point to enforcement carried out on his watch, including a recent £14m penalty against Reddit over the platform's handling of children's data and inadequate age checks.
A career in information law
Edwards arrived in Britain with a strong pedigree. A lawyer who practised for two decades in Wellington, he served as New Zealand's Privacy Commissioner from 2014 to 2021 before being appointed to the UK role under then-Prime Minister Boris Johnson, taking office in January 2022 as the sixth Information Commissioner. The post carried a salary of around £200,000 - more than the prime minister earns - and made him one of the most prominent privacy enforcers in Europe.
What happens next
His exit creates a vacancy at a delicate moment. The ICO is midway through a restructuring under the Data (Use and Access) Act 2025, which converts it from a body where authority rests with a single commissioner into a board-led Information Commission modelled on regulators such as the Financial Conduct Authority. Paul Arnold has been lined up as the new body's first chief executive; Edwards was to have chaired it. By coincidence, his resignation landed on the very day a key element of that same law - a requirement for organisations to run a formal data-complaints process - came fully into force.
Responsibility for choosing a successor now sits with the Department for Science, Innovation and Technology, led by Technology Secretary Liz Kendall, and ultimately with Parliament. The formalities are unusual: under the Data Protection Act 2018, the commissioner must request that the King relieve them of office. Whoever takes over will inherit not just a regulator in the middle of reorganisation, but a live argument about how forcefully Britain should police the use of personal data and the rapid spread of artificial intelligence.
