The ICO are there it enforce GDPR, and other data protections.

They are a quango, rather than policy makers

Again they are not OFCOM, and they didn't make OSA, thats very much down to the previous tory government