Excerpt from SC Media Article,  Published on December 16, 2025

Civil society groups and digital rights advocates have called for regulatory action as the UK Home Office’s new digital – only eVisa system comes under scrutiny for possible General Data Protection Regulation (GDPR) violations. The digital transformation aimed to modernize immigration status proof is now facing questions about privacy, data accuracy, and user safeguards.

A joint letter coordinated by the Open Rights Group urged the UK’s Information Commissioner’s Office (ICO) to investigate the digital eVisa process amid multiple reports of data errors, system design issues, and flawed fallback provisions. Critics argue that when the technology fails, migrants are shut out of essential services — including housing, employment, travel, and education — because they have no physical documentation to rely on.

Users of the digital system have reported cases where highly sensitive personal data was incorrectly displayed or shared, including individuals seeing another person’s name, passport details, or immigration status in their own account. These types of systemic errors raise significant questions about whether the UK government has sufficiently tested and safeguarded personal information under GDPR requirements, which mandate accurate and secure processing of personal data.

The complaint also criticizes the Home Office’s Data Protection Impact Assessment (DPIA), claiming it did not adequately assess risks to vulnerable users. Groups suggest the assessment omitted key concerns about how a digital – first process could leave users exposed to privacy risks without proper opt – out or fallback systems. This issue is part of a broader debate on digital exclusion and fairness for individuals who may lack reliable access or who are less digitally literate.

The ICO now faces the task of determining if the Home Office’s digital eVisa strategy complies with GDPR standards or if regulatory enforcement actions are necessary. How this decision unfolds could influence future digital identity frameworks and the government’s approach to modernizing public services.

To delve deeper into this topic, Visit SC Media.