The Information Commissioner’s Office says it believes the purchase broke its rules.