Blog Details

Mobile forensics Despite longstanding records protection points with the Home Office’s digital visa machine being flagged five months in the past, the UK’s records regulator is yet to rob any action

The UK records regulator has been pondering whether or now to no longer formally review the Home Office’s digital visa (eVisa) machine for five months, resulting in accusations from digital rights teams that it is dragging its toes.

In a joint letter sent to the Files Commissioner’s Office (ICO) in slack November 2025, the Start Rights Neighborhood and 18 other civil society organisations urged the regulator to formally review whether or no longer the Home Office’s eVisa machine is breaking UK records protection guidelines.

The teams – at the side of the3million and Migrants Rights Network – highlighted the “high quantity” of recordsdata quality and integrity errors linked to the blueprint, which personal avoided of us from having the ability to reliably point out their immigration danger.

Besides they highlighted the “digital-by-default” nature of the machine, and the Home Office’s refusal to danger alternative proof of immigration danger in the face of continual records points.

In one case completely reported on by Computer Weekly, the technical errors with records held by the Home Office were so extreme that the regulator beforehand found there had been a breach of UK records protection law.

Speaking with Computer Weekly, the person affected stated that ongoing technical errors with the eVisa machine meant his memoir persisted to sigh an expired student visa, as a substitute of his original companion visa, and imperfect passport records for nearly half of a yr.

The ICO confirmed in early December 2025 that it had received the letter from civil society teams outlining their concerns, it stated that this would per chance “fastidiously assess the points raised sooner than responding”.

Computer Weekly can verify that whereas an investigation became as soon as opened by the ICO in early December – with a case reference quantity formally allocated – the regulator is detached pondering the matters raised in the letter at the time of e-newsletter.

Mobile forensics A matter of urgency

Whereas the Excessive Court docket heard – and in a roundabout arrangement disregarded – a judicial overview case introduced against the Home Office in early March 2026, that case turned on whether or no longer Home Office protection to never points alternative immigration danger despite continual records points became as soon as precise, in danger of any records protection points.

The case became as soon as introduced by two claimants who were left unable to level their immigration danger for six and nine months respectively, which befell on account of the machine either locking them out of their eVisa accounts or showing unsuitable records on their profiles.

Speaking with Computer Weekly, Sara Alsherif, the migrant digital justice programme manager at ORG, stated that migrants are being “failed” by each and each the Home Office and the ICO.

“We raised extreme concerns with the ICO about the Home Office’s handling of personal records underneath the eVisa blueprint,” she stated, at the side of the blueprint has been plagued by in trend records errors, an inaccessible form, and continual technical screw ups that personal left of us unable to level their precise to work, rent, thought, lag or access crucial services.

“Migrants are being failed by the Home Office, which didn’t properly assess the dangers of a digital-completely roll-out, and by those who personal no longer investigated despite being alerted to these points final December – epecially after the court and the Home Office admitted that those stricken by records quality and integrity points are going through ‘precise difficulties’ in their day-to-day lives. We lunge the ICO to originate a proper investigation into records protection breaches and accessibility points with the blueprint.”

For Fizza Quershi, director of Migrants Rights Network, the ICO ought to act straight to score to the backside of eVisa records protection points: “These eVisas are harming precise of us, precise now. Migrants can’t be expected to navigate a digital machine that is each and each mandatory and unreliable. Of us are being left in positions where they are unable to level their rights, access services, or opinion their lives.

“The dangers were already certain as a ways abet as November. The regulatory physique has since confirmed at the least one breach of Records Safety law, yet there’s been no meaningful development. Day after day without action leaves of us in danger of shedding their jobs, their properties or their ability to lag. The ICO ought to act with urgency to be sure that the Home Office is held to the factors required by law.”

Computer Weekly contacted the ICO about why it is yet to start a proper investigation, or publicly answer to the letter, despite in trend records protection points being reported with the machine.

“We assuredly have interaction with authorities departments, at the side of the Home Office, to be sure that that records protection duties are met and seemingly dangers are mitigated,” stated an ICO spokesperson. “We are able to substantiate that we’ve received the letter outlining these concerns, and are persevering with to fastidiously assess the points raised sooner than responding.”

In December 2025, Computer Weekly received a Freedom of Files (FoI) Act response from the ICO about the amount of eVisa complaints it had received since paper paperwork were phased out at the discontinue of December 2024.

Alternatively, the regulator stated at the time that it became as soon as unable to divulge what number of eVisa connected cases there are, because it will require a manual search of hundreds of complaints raised against the Home Office.

“The cause being that we offer out no longer characterize the requested records in a trend that is easily reportable and would require a manual search of hundreds of records to get the records that you simply’re soliciting for,” it stated.

“We withhold 851 cases about the Home Office in the old two years, assuming that one yr is roughly half of that, then there would detached be 425 cases to manually search. Each and each search would possibly per chance rob roughly 3-4 minutes to whole, which would detached rob it over the price restrict. It is going to detached also be infamous that a couple of of the searches would rob considerably longer.”

Computer Weekly requested the ICO whether or no longer it now has a clear thought of what number of eVisa-connected records protection complaints were raised against the Home Office, nonetheless it surely did no longer answer to this level.