Gulraze Akhtar v The Information Commissioner

Facts

The applicant, Gulraze Akhtar, complained to the Information Commissioner on 14 April 2026 about Marsh Wall Limited, alleging personal data breaches, failures in identity verification procedures, missing KYC documentation, and concerns about the accuracy, lawfulness and processing of his personal data, together with financial harm said to have resulted. The complaint was handled under reference IC-502636-T8X7. On 3 June 2026 the Commissioner wrote to say that, applying his Data Protection Framework, he would not undertake a more detailed investigation: he had not identified significant harm, wider impact or a broader data protection concern, though the complaint would be kept on record to support his regulatory work. The applicant was told he could seek a review or take proceedings in court. He did not seek a review but applied to the First-tier Tribunal on form GRC3 dated 19 June 2026 under section 166(2) of the Data Protection Act 2018, seeking an order requiring the Commissioner to consider the substance of his complaint properly and to provide a reasoned further response within a specified period. A further response from the Commissioner's Public Advice Data Protection Complaints Services Team followed on 29 June 2026. The Commissioner applied on form GRC5 dated 22 July 2026 to strike the application out for want of jurisdiction and as having no reasonable prospect of success.