An ICO spokesperson said:
“We are aware of an incident involving a Conservative Party conference app and we will be making enquiries with the Conservative Party.
“Organisations have a legal duty to keep personal data safe and secure. Under the GDPR they must notify the ICO within 72 hours of…
Link: ICO statement in response to Conservative Party conference app incident
Source: ICO .org.uk