That's not necessarily a position you have to fight. You can also take the standpoint that if the UK government can't protect your private data, then how can a data provider. There are many such cases:

[1] https://www.bloomberg.com/news/newsletters/2025-08-06/hacker...

[2] https://www.theguardian.com/politics/2007/nov/21/immigration...

[3] https://www.reuters.com/technology/cybersecurity/britains-nh...