Question to the Department for Science, Innovation & Technology:

To ask the Secretary of State for Science, Innovation and Technology, what assessment she has made of the adequacy of data privacy regulations governing supermarket loyalty schemes.

All organisations in the UK that process personal data, including supermarkets operating loyalty schemes, must comply with the UK General Data Protection Regulation and the Data Protection Act 2018. This legislation requires personal data to be processed lawfully, fairly and transparently, and secured by appropriate technical and organisational measures. The Information Commissioner’s Office (ICO) is the UK’s independent regulator for data protection and is responsible for monitoring and enforcing this legislation. We recently strengthened their powers in the Data (Use and Access) Act 2025 to help them investigate suspected breaches of the legislation.