Home Office use of algorithms in immigration enforcement challenged

Privacy International alleges the tools process large amounts of personal and sensitive data

Privacy International (PI) has filed a complaint with the UK’s data protection regulator over the Home Office’s deployment of automated tools in immigration enforcement, raising questions about transparency, accountability, and compliance with data protection law.

The rights group submitted its complaint to the Information Commissioner’s Office (ICO) on 18th August, following a year-long investigation into two systems: the Identify and Prioritise Immigration Cases (IPIC) tool and the Electronic Monitoring Review Tool (EMRT). Both are used to assist immigration casework and monitoring, but PI argues they may be determining outcomes that have “life-changing consequences” for migrants without sufficient human oversight.

Two systems under scrutiny

According to documents obtained through Freedom of Information requests and legal challenges, IPIC is designed to prioritise immigration cases for enforcement action. It can recommend outcomes such as detention, removal, denial of services, or referral to other government departments. PI said the tool applies filters based on up to 10 criteria, including location and nationality, raising the possibility of discriminatory impacts.

The EMRT is used in quarterly reviews of migrants subject to GPS monitoring. It generates a harm score which influences whether an individual remains tagged, is transitioned to a non-fitted tracking device, or has restrictions reduced. PI said the tool also produces recommendations that caseworkers are encouraged to accept, with little scope for deviation.

Concerns over data protection

In its complaint, PI alleges that both tools process large amounts of personal and sensitive data, including health information, vulnerabilities and associations with others, without adequate justification. It also argues that migrants affected are not properly informed about how their data is being collected or used, limiting their ability to challenge decisions.

The organisation contends that this lack of transparency may breach the principle of fairness under the GDPR and the Data Protection Act 2018. It also questions whether the Home Office carried out the necessary Data Protection Impact Assessments before introducing the tools.

“From the information available, these systems appear to be influencing decisions about people’s liberty and status in ways that fall short of legal standards,” PI said in its submission.

Wider implications for automation in government

The complaint is the latest in a series of challenges to the use of automated systems in public decision-making. Courts and regulators have already scrutinised GPS tagging of migrants, with two judgments and one regulatory ruling in recent years limiting the Home Office’s approach.

PI is asking the ICO to issue an enforcement notice requiring the Home Office to stop using the tools, or at minimum to ensure their operation is brought into compliance with UK data protection law.

Regulator response pending

The ICO confirmed receipt of the complaint and said it will review the information provided before deciding on next steps.

The Home Office has not yet issued a public response.

The case highlights the growing tension between government adoption of AI-driven decision-making and the safeguards required under UK and international law. While automation promises efficiency, critics argue that opaque systems risk undermining accountability and disproportionately impacting vulnerable groups.