"Follow[ing] several serious, high-profile data breaches that undermined public trust in government, some of which also placed lives at risk", the UK's independent data protection regulator, the Information Commissioner's Office, is taking enforcement action against the UK government.
Only kidding.
It has signed a Memorandum of Understanding, which imposes no legal obligations.