The ICO are there it enforce GDPR, and other data protections. They are a quango, rather than policy makers Again they are not OFCOM, and they didn't make OSA

The ICO are there it enforce GDPR, and other data protections. They are a quango, rather than policy makers Again they are not OFCOM, and they didn't make OSA, thats very much down to the previous tory government