The UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.

This consultation has closed

The new code of practice on conducting privacy impact assessments (PIAs) is intended to replace the current PIA Handbook. The aim of the new code is to produce a practical guide which will help organisations conduct assessments of new projects that involve the use of personal information. The code explains the key principles behind a PIA and suggests how a PIA can be integrated with an organisation’s project and risk management processes.

We consulted to gather the views of stakeholders and the public about the new draft code. These views will inform the final version.

For information we also provided the Trilateral Research & Consulting report on Privacy impact assessment and risk management (commissioned by the ICO) and our response to its recommendations.