The ICO exists to empower you through information.

The Information Commissioner’s Office (ICO) has launched a consultation series on generative Artificial Intelligence (AI), examining how aspects of data protection law should apply to the development and use of the technology. 

Generative AI models are being used across the economy to create new content, from music to computer code. The first consultation examines when it is lawful to train generative AI models on personal data scraped from the web.

“The impact of generative AI can be transformative for society if it’s developed and deployed responsibly.


“This call for views will help the ICO provide industry with certainty regarding its obligations and safeguard people’s information rights and freedoms.”

- Stephen Almond, Executive Director for Regulatory Risk

The ICO is seeking views from a range of stakeholders, including developers and users of generative AI, legal advisors and consultants working in this area, civil society groups and other public bodies with an interest in generative AI.

The first consultation is open until 1 March 2024. Future consultations will examine issues such as the accuracy of generative AI outputs and will be launched throughout the first half of 2024.

Notes to editors
  1. The ICO is the UK’s independent regulator for data protection and information rights law, upholding information rights in the public interest, promoting openness by public bodies and data privacy for individuals.
  2. The ICO has specific responsibilities set out in the Data Protection Act 2018 (DPA2018), the United Kingdom General Data Protection Regulation (UK GDPR), the Freedom of Information Act 2000 (FOIA), Environmental Information Regulations 2004 (EIR), Privacy and Electronic Communications Regulations 2003 (PECR) and a further five acts and regulations.
  3. The ICO can take action to address and change the behaviour of organisations and individuals that collect, use, and keep personal information. This includes criminal prosecution, non-criminal enforcement and audit.
  4. To aid industry improve compliance, it continues to add to its suite of AI resources.
  5. To report a concern to the ICO telephone call our helpline on 0303 123 1113, or go to ico.org.uk/concerns.