John Edwards

John Edwards spent close to two decades as one of the Asia-Pacific and European world's most experienced data protection regulators, culminating in his appointment as the UK's sixth Information Commissioner in January 2022. A lawyer by training from Victoria University of Wellington, Edwards built his regulatory career in New Zealand, practising information law in Wellington before serving as that country's Privacy Commissioner from 2014 to 2021, where he also chaired the Global Privacy Assembly, the main forum for the world's data protection authorities.

As UK Information Commissioner, Edwards took charge of the Information Commissioner's Office (ICO) at a pivotal moment, as generative AI, biometric surveillance and large-scale data-broking moved to the centre of public and regulatory concern. Under his leadership the ICO issued guidance and enforcement action on AI and data protection, investigated facial recognition deployments, and pressed technology companies on children's data protection under the UK's Age Appropriate Design Code, positioning the regulator as an increasingly assertive check on both government and corporate data practices.

Edwards also used the role to engage internationally, representing UK data protection interests in discussions with the EU, US and other jurisdictions over cross-border data flows and AI governance, continuing the international-coordination role he had built while chairing the Global Privacy Assembly. His tenure was shaped by the practical challenge of applying UK GDPR to fast-moving AI systems with limited additional statutory powers.

That tenure ended abruptly in June 2026, when Edwards resigned with immediate effect after an independent workplace investigation found he had a 'case to answer' over allegations of inappropriate and sexualised language towards ICO staff. He acknowledged exercising 'poor judgement' and making attempts at humour that caused offence; the UK government said the conduct had left multiple female staff members feeling offended and uncomfortable. He became the first UK Information Commissioner in the role's 42-year history to resign under such circumstances, departing seven months before his term was due to end, with the ICO moving to temporary governance arrangements in his absence.

Edwards's legacy is therefore a dual one: a regulator who pushed the ICO to grapple more assertively with AI and platform-scale data practices during a critical period, whose career ended in controversy that overshadowed that policy record and briefly left one of the world's most consequential data protection authorities without settled leadership.