Abdul Rahman Gumaa v The Information Commissioner

Facts

Mr Abdul Rahman Gumaa believed that he had been under surveillance for almost 20 years, both in the UK and abroad. He alleged that his GP surgery had asked the security services to place him under covert surveillance, and that his personal data had been processed unlawfully. He complained to NHS England on 3 August 2025, to the Integrated Care Boards on 8 August 2025 and later to the Parliamentary Health Services Ombudsman. On 16 August 2025 he complained to the Information Commissioner. On 16 September 2025 he submitted a further complaint form, which also made complaints about MI5, MI6, GCHQ, the Home Secretary and the Ombudsman. On 3 October 2025 the Commissioner consolidated the two complaints as duplicates. On 8 October it told him that the matters fell outside its remit and that it could not pursue the complaint further. He said he wished to appeal. On 14 October the Commissioner replied that broad concerns about alleged surveillance by NHS or other government bodies were outside its remit, suggested that he raise any specific data-handling concerns with the organisations concerned, and said it would not enter into further correspondence. By form GRC1 dated 29 October 2025, Mr Gumaa brought what the Tribunal treated as an application under section 166 of the Data Protection Act 2018. On 2 February 2026 the judge gave notice that she was minded to strike the application out, and Mr Gumaa made representations on 3 February.