News, blogs and speeches

Data protection is not an excuse when tackling scams and fraud

22 November 2024, News

We are calling on organisations to share personal information responsibly to protect their customers from scams and fraud.

Our lives, our privacy: the 40 items that shaped 40 years of privacy rights

19 November 2024, News

We are marking our 40th anniversary by launching a digital exhibition telling the story of the most important moments in privacy and information rights over the past four decades.

Using Privacy Enhancing Technologies (PETs) to unlock value from data responsibly

15 November 2024, Blog

On Thursday 7 November, DSIT’s Responsible Technology Adoption (RTA) Unit and the Information Commissioner’s Office (ICO) published the Privacy Enhancing Technologies (PETs) Cost-Benefit Awareness Tool.

Joint statement from the FCA, ICO and TPR for retail investment firms and pension providers

15 November 2024, Statement

Data protection and effective communications to consumers in relation to retail investments and pensions.

NEW data protection code of conduct launched for UK private investigators

13 November 2024, News

We have approved and published the first sector-owned code of conduct - The Association of British Investigators Ltd (ABI) UK GDPR code of conduct for Investigative and Litigation Support Services.

“Privacy must still come first.” – we're calling for collaboration with developers as report reveals future innovations and data protection concerns in genomics

07 November 2024, News

New report highlights how genomics could one day determine insurance quotes, solve crimes, tailor support in schools and create fitness plans

Thinking of using AI to assist recruitment? Our key data protection considerations

06 November 2024, News

The Information Commissioner’s Office (ICO) has shared key questions organisations should ask when procuring AI tools to help with their employee recruitment.

ICO intervention into AI recruitment tools leads to better data protection for job seekers

06 November 2024, News

We have today issued a series of recommendations [LINK] to AI developers and providers to ensure they are better protecting job seekers’ information rights.

Empowering young people to learn more about their local environment

05 November 2024, Blog

Did you know that no matter how old you are, you can ask public authorities about a wide range of topics that affect your day-to-day life and where you live?

Information Commissioner seeks permission to appeal DSG Retail Ltd ruling

04 November 2024, Statement

We are seeking permission to appeal the judgment of the Upper Tribunal (Tribunal) on DSG Retail Limited (DSG) to the Court of Appeal.

Statement on ICO’s work to protect children online

29 October 2024, Statement

Children see sharing their personal information online as necessary to avoid social exclusion, our new research has found.

Global privacy authorities issue follow-up joint statement on data scraping after industry engagement

28 October 2024, News

We and several global counterparts are highlighting how social media companies can better protect personal information, as concerns grow about mass scraping of personal information within social media platforms, including to support artificial intelligence systems.

Ripple effect: the devastating impact of data breaches

28 October 2024, Blog

A blog by John Edwards, Information Commissioner.

Information Commissioner: Organisations need to do more to help people affected by data breaches

28 October 2024, News

Information Commissioner John Edwards has today urged organisations across the country to recognise the real-world impact of data breaches - and the devastating effects they can have on people’s lives.

Statement in response to the introduction of the Data Use and Access Bill in the House of Lords

24 October 2024, Statement

We welcome the introduction of the Data Use and Access Bill in the House of Lords and look forward to seeing it progress through parliament to Royal Assent.

Our statement in response to Government plans for NHS digital transformation

21 October 2024, Statement

An ICO spokesperson: "We stand ready to support the Government's ambition to make the NHS fit for the future, including the move to a more digital approach. Data protection law can help…

Action taken against United Utilities over transparency failings

16 October 2024, News

We have issued a practice recommendation to United Utilities for failing to properly handle requests for important environmental information from the public.

Two companies fined a total of £150k after bombarding people with spam texts offering financial, debt services

15 October 2024, News

The Information Commissioner’s Office (ICO) has fined two Manchester based financial and debt management companies a total of £150,000 for sending in excess of 7.5million spam text messages to people.

£120k issued in fines to two companies for predatory marketing campaigns

10 October 2024, News

We have fined two companies for making unlawful marketing calls to individuals registered with the Telephone Preference Service (TPS).

Criminal record and suspended prison sentence handed to former RAC employees for stealing personal information

09 October 2024, News

Two former RAC employees have been handed a suspended prison sentence and ordered to complete 150 hours of unpaid work, for unlawfully copying and selling over 29,500 lines of personal information.

Changes to our services for businesses

09 October 2024, Statement

We are committed to modernising our service and investing in tools that enable us to give time-pressed businesses access to our advice and expertise 24/7.

Preparing for the quantum-enabled future

09 October 2024, Blog

Quantum technologies are advancing at pace, offering huge potential to improve our lives. For example, researchers are already using the next generation of certain quantum sensors to collect highly granular information about people’s brain patterns to improve medical research and diagnostics, while there are ongoing efforts to test real world applications for early stage quantum computers.

New data protection audit framework launched to help organisations improve compliance

07 October 2024, News

We have today launched a new audit framework designed to help organisations assess their own compliance with key requirements under data protection law. The framework empowers…

What price privacy? Poor PSNI procedures culminate in £750k fine

03 October 2024, News

We have fined Police Service of Northern Ireland (PSNI) £750,000 for exposing the personal information of its entire workforce, leaving many fearing for their safety.

Our statement on changes to LinkedIn AI data policy

20 September 2024, Statement

"We are pleased that LinkedIn has reflected on the concerns we raised about its approach to training generative AI models with information relating to its UK users.

Our statement in response to Meta's announcement to introduce teen accounts

17 September 2024, Statement

Stephen Almond, Executive Director Regulatory Risk said: “We welcome Instagram’s new protections for its younger users following our engagement with them. Our Children's code is clear…

Guilty car salesman fined for retaining and selling data to competitors

17 September 2024, News

A man has pleaded guilty and been fined for unlawfully retaining and selling thousands of pieces of customer records from the car leasing company he worked for in Hertfordshire.

Action taken against Sky Betting and Gaming for using cookies without consent

17 September 2024, News

We have issued a reprimand to Bonne Terre Limited, trading as Sky Betting and Gaming, for unlawfully processing people’s data through advertising cookies without their consent.

ICO statement in response to Meta's announcement on user data to train AI

13 September 2024, Statement

Statement from Stephen Almond, Executive Director Regulatory Risk at the ICO.

Surrey Police show a “lack of seriousness about their obligations” as ICO issues enforcement notice over FOI failures

12 September 2024, News

Enforcement notice issued to Surrey Police over Freedom of Information backlog

ICO and NCA sign memorandum of understanding for further collaboration on cyber security

10 September 2024, News

We have signed a Memorandum of Understanding (MoU) with the National Crime Agency (NCA) that sets out how both organisations will cooperate to improve the UK’s cyber resilience.

Action taken against Labour Party for failing to respond to requests for personal information on time

28 August 2024, News

We have issued a reprimand to the Labour Party for repeatedly failing to respond to people who asked it what personal information the party held on them – known as a subject access request (SAR).

New tool helps small businesses create privacy notices

20 August 2024, News

We have launched a new, quick and easy-to-use tool to help small organisations and sole traders create a bespoke privacy notice and protect people’s information rights.

ICO statement on Meta's ad-free subscription service

15 August 2024, Statement

“One of our key priorities is to ensure that people’s information rights are upheld by the online advertising industry.

Porthcawl man sentenced after “brazen” car scam worth hundreds of thousands of pounds

13 August 2024, News

A man who unlawfully accessed personal data has been sentenced after our investigation.

Provisional decision to impose £6m fine on software provider following 2022 ransomware attack that disrupted NHS and social care services

07 August 2024, Statement, Online technology and telecoms

We have provisionally decided to fine Advanced Computer Software Group Ltd (Advanced) £6.09m, following an initial finding that the provider failed to implement measures to protect the personal…

Social media and video sharing platforms put on notice over poor children’s privacy practices

02 August 2024, News

We are calling on 11 social media and video sharing platforms to improve their children’s privacy practices.

Supporting public authorities to be open and transparent

31 July 2024, Blog

Around this time last year, I wrote about our new Upstream Regulation team and our focus on supporting public authorities to be open and accountable with the public they serve.

ICO reprimands the Electoral Commission after cyber attack compromises servers

30 July 2024, News

We have issued a reprimand to the Electoral Commission after hackers gained access to servers that contained the personal information of approximately 40 million people.

ICO takes action against two organisations for "risking public trust" by failing to respond to public requests for information

29 July 2024, News

We have taken action against two trusted public services after investigations found they’d failed to meet basic information request requirements, as set out under the Freedom of Information Act 2000 (FOIA).

Essex school reprimanded after using facial recognition technology for canteen payments

23 July 2024, News

We have issued a reprimand to a school that broke the law when it introduced facial recognition technology (FRT).

ICO statement in response to Google announcing it will no longer block third party cookies in Chrome

23 July 2024, Statement

"We are disappointed that Google has changed its plans and no longer intends to deprecate third party cookies from the Chrome Browser.

London Borough of Hackney reprimanded following cyber-attack

17 July 2024, Statement, Local government

We have issued the London Borough of Hackney with a reprimand following a cyber-attack in 2020 that led to hackers gaining access to and encrypting 440,000 files, affecting at least 280,000 residents and other individuals including staff.

Information Commissioner calls for water companies to be crystal clear with public over sewage pollution

15 July 2024, News

Water companies must put transparency first if they want to rebuild public trust, we have warned.

Sut rydyn ni’n helpu’r lluoedd heddlu i gydymffurfio gyda FOIA – a beth ni’n gwneud os nad ydyn nhw.

10 July 2024, Blog

Mae’r hawl sylfaenol i holi awdurdodau cyhoeddus a’u dwyn i gyfrif yn un o gonglfeini’n democratiaeth.

How we help police forces comply with FOIA - and what we do if they don't

10 July 2024, Blog

The fundamental right to ask questions of and hold public authorities to account is a cornerstone of our democracy.

Do I really need to read the privacy notice?

09 July 2024, News

At the Information Commissioner’s Office (ICO), we are encouraging people to check how an app plans to use their personal information before they sign up.

ICO statement on its public sector approach trial

26 June 2024, Statement

In June 2022 we revised our approach to working with public sector organisations and started a two-year trial, as set out in our open letter at the time.

Statement in response to Synnovis cyber attack

21 June 2024, Statement

An ICO spokesperson said: "While we are continuing to make enquiries into this matter, we recognise the sensitivity of some of the information in question and the worry this may have caused.…

Statement in response to Meta's plans to train generative AI with user data

14 June 2024, Statement

Stephen Almond, Executive Director, Regulatory Risk at the ICO, said: “We are pleased that Meta has reflected on the concerns we shared from users of their service in the UK, and responded to…

ICO to investigate 23andMe data breach with Canadian counterpart

10 June 2024, Statement

The Information Commissioner’s Office (ICO) and the Office of the Privacy Commissioner of Canada (OPC) have launched a joint investigation into the data breach that happened in October 2023 at the global direct-to-consumer genetic testing company 23andMe.

Understanding what information people commonly request from public authorities

03 June 2024, Blog

Aiden Clarkson Senior Upstream Regulation Officer - FOI and Transparency People can use the WhatDoTheyKnow (WDTK) website to submit Freedom of Information (FOI)…

The General Election and my personal data - what should I expect?

30 May 2024, Blog

We have been working with fellow regulators, and with those organisations and individuals who will be handling your personal information during the upcoming election campaign, to ensure expectations around compliance with the law are clear.

PSNI facing a £750k fine following spreadsheet error that exposed the personal information of its entire workforce

23 May 2024, News

Data breach brought tangible fear of threat to life

Statement in response to Microsoft Recall feature

22 May 2024, Statement

“We expect organisations to be transparent with users about how their data is being used and only process personal data to the extent that it is necessary to achieve a specific purpose.

We warn organisations must not ignore data protection risks as we conclude Snap ‘My AI’ chatbot investigation

21 May 2024, News

ICO concludes investigation into Snap’s approach to assessing the data protection risks of its ‘My AI’ chatbot

Car rental manager fined after unlawfully obtaining customer data

16 May 2024, News

A former Management Trainee at Enterprise Rent-A-Car UK Limited ("Enterprise Rent-A-Car") has been ordered to pay a fine after admitting he illegally obtained customer data between 18 March 2019 and 1 April 2019.

No regulatory wild west: how the ICO applies the law to emerging tech

15 May 2024, Speech

John Edwards, Information Commissioner, delivers speech at the New Scientist Emerging Technogies summit, 15 May 2024.

Children’s services in Birmingham reprimanded after inappropriately disclosing a child’s personal information

13 May 2024, News

We have issued a reprimand to Birmingham Children's Trust Community Interest Company after the personal information of a child was inappropriately disclosed to another family.

Organisations must do more to combat the growing threat of cyber attacks

10 May 2024, News

We are calling for all organisations to boost their cyber security and protect the personal information they hold, amid the growing threat of cyber attacks. Our own trend data reveals…

Statement in response to reports of a cyber breach at the Ministry of Defence

08 May 2024, Statement

Our spokesperson said: “The Ministry of Defence has made us aware of this incident and we are assessing the information provided”. Q&A from the Information Commissioner’s Office …

First-tier Tribunal ruling on Join the Triboo appeal

07 May 2024, Statement

We welcome the ruling from the First-tier Tribunal (General Regulatory Chamber) on an appeal from Join the Triboo Limited . The online recruitment firm appealed a fine of £130,000 and an…

A joint statement by Ofcom and the Information Commissioner’s Office on collaboration on the regulation of online services

01 May 2024, Statement

We have published a joint statement with Ofcom about collaboration on the regulation of online services where online safety and data protection intersect.

Information Commissioner: Persistent sensitive information breaches failing people living with HIV

30 April 2024, News

People living with HIV denied “basic dignity and privacy” by repeated data breaches that disclose their HIV status

Director’s update: the FOI year in review

24 April 2024, Blog

It’s fair to say that it’s been a heck of a year for the FOI team.

ICO statement on Upper Tribunal ruling

24 April 2024, Statement

The Upper Tribunal has ruled on the ICO’s action to require Experian Limited to change how it handles people’s personal data, dismissing the ICO’s appeal of the First-tier Tribunal’s ruling of 20 February 2023.

ICO yn dirwyo dau gwmni cyfanswm o £340,000 am wneud galwadau marchnata ymosodol a digroeso

24 April 2024, News

Bron 1.43 miliwn o alwadau wedi’u gwneud dros gyfnod o 13 mis

ICO fines two companies a total of £340,000 for making aggressive and unwanted marketing calls

24 April 2024, News

Almost 1.43 million calls made over a 13-month period.

Housing association reprimanded for exposing personal information on online portal

17 April 2024, News

We have issued a reprimand to Clyde Valley Housing Association in Lanarkshire after personal information was accessible to other residents on an online customer portal.

ICO publishes guidance to improve transparency in health and social care

15 April 2024, News

The Information Commissioner’s Office (ICO) is supporting health and social care organisations to ensure they are being transparent with people about how their personal information is being used.

Information Commissioner’s Office seeks views on accuracy of generative AI models

12 April 2024, News

The Information Commissioner’s Office (ICO) has launched the latest instalment in its consultation series examining how data protection law applies to the development and use of generative AI.

ICO joins global data protection and privacy enforcement programme

04 April 2024, News

The Information Commissioner’s Office (ICO) has signed onto a new international multilateral agreement with the Global Cooperation Arrangement for Privacy Enforcement (Global CAPE) to cooperate in cross-border data protection and privacy enforcement.

ICO sets out priorities to protect children's privacy online

03 April 2024, News

The Information Commissioner’s Office (ICO) is calling on social media and video-sharing platforms to improve their data protection practices so children are safer when using their services. This comes as the regulator sets out its 2024-2025 priorities for protecting children's personal information online.

ICO statement in response to reports of data breach at The London Clinic

20 March 2024, Statement

An ICO spokesperson said: “We can confirm that we have received a breach report and are assessing the information provided.”

ICO publishes new fining guidance

18 March 2024, News

The Information Commissioner’s Office has published new data protection fining guidance setting out how it decides to issue penalties and calculate fines.

ICO reprimands Dover Harbour Board and Kent Police over information sharing

15 March 2024, News

The Information Commissioner’s Office (ICO) has issued reprimands to Dover Harbour Board and Kent Police after they breached data protection law.

ICO reprimands London Mayor's Office for Policing and Crime for complaint web form error

14 March 2024, News

Web form to complain about the Metropolitan Police Service accidentally revealed victims' data

ICO fines Wigan-based Pinnacle Life £80,000 for “predatory” spam call campaign

07 March 2024, News

Wigan-based company Pinnacle Life has been fined £80,000 by the Information Commissioner’s Office (ICO) for a year-long unlawful spam phone call campaign.

ICO launches “consent or pay” call for views and updates on cookie compliance work

06 March 2024, Blog

A blog by Stephen Almond, Executive Director, Regulatory Risk.

ICO warns charities about direct marketing rules as it orders Penny Appeal to stop sending spam texts

05 March 2024, News

The Information Commissioner’s Office (ICO) has ordered a charity to stop sending unsolicited marketing texts to people without their consent, as it reminds all charities of their legal obligations.

ICO takes regulatory action against five public authorities under the FOI Act

04 March 2024, News

The Information Commissioner’s Office (ICO) has taken action against five public authorities for continued failings to meet their obligations under the Freedom of Information (FOI) Act.

Information Commissioner calls for senior leaders to take transparency seriously

04 March 2024, News

Today, as my office takes further regulatory action against five public organisations for their continued failings to meet their obligations under the Freedom of Information (FOI) Act, I am writing to remind you that transparency is essential if the people and communities we serve are to have confidence in the way that public services are delivered.

Y Comisiynydd Gwybodaeth yn galw ar uwch arweinwyr i gymryd tryloywder o ddifrif

04 March 2024, News

Heddiw, wrth i'm swyddfa gymryd camau rheoleiddio pellach yn erbyn pedwar sefydliad cyhoeddus am eu methiannau parhaus i gyflawni eu rhwymedigaethau o dan y Ddeddf Rhyddid Gwybodaeth, rwy’n ysgrifennu atoch i'ch atgoffa bod tryloywder yn hanfodol os yw'r bobl a'r cymunedau rydyn ni’n eu gwasanaethu i fod yn hyderus yn y ffordd y mae gwasanaethau cyhoeddus yn cael eu darparu.

ICO reassures employers they can share staff data in a mental health emergency

01 March 2024, News

The Information Commissioner’s Office (ICO) has published new guidance to give employers more certainty about sharing their workers’ personal details in a mental health emergency.

ICO reprimands West Midlands Police for data protection failure

01 March 2024, News

The Information Commissioner’s Office (ICO) has issued a reprimand to West Midlands Police (WMP) after the force repeatedly mixed up two people’s personal information.

ICO finds the Home Office’s pilot of GPS electronic monitoring of migrants breached UK data protection law

01 March 2024, News

Home Office pilot scheme failed to assess privacy intrusion of GPS monitoring.

ICO and Federal Communications Commission sign Memorandum of Understanding

29 February 2024, News

The Information Commissioner’s Office (ICO) and the US Federal Communications Commission (FCC) have signed a Memorandum of Understanding (MoU) which formalises their commitment to work together to protect people from unwanted nuisance calls, spam messaging and the misuse of private and sensitive data.

ICO statement in response to Angiolini Inquiry

29 February 2024, Statement

The Angiolini Inquiry has published its first report, following its review of the murder of Sarah Everard.

John Edwards speaks at IAPP’s Data Protection Intensive UK

28 February 2024, Speech

Commissioner discusses three of the ICO’s key areas of focus in 2024.

Yr ICO yn galw ar bobl i rannu profiadau wrth gael mynediad at gofnodion gofal, gan addo gwella’r cymorth

28 February 2024, News

Mae Swyddfa'r Comisiynydd Gwybodaeth (ICO) yn galw ar bobl sydd â phrofiad o'r system ofal yn y Deyrnas Unedig i rannu'r heriau maen nhw wedi'u hwynebu wrth gael mynediad at eu cofnodion gofal gan sefydliadau.

Supporting the right of access for people with experience of the care system in Scotland

28 February 2024, Blog

Records of personal information are so important to people who have experience of the care system, as they are often key to understanding their personal history and identity.

ICO calls for people to share experiences accessing care records as it vows to improve support

28 February 2024, News

The Information Commissioner’s Office (ICO) is calling on people with experience of the care system in the UK to share the challenges they have faced when accessing their care records from organisations.

ICO orders Serco Leisure to stop using facial recognition technology to monitor attendance of leisure centre employees

23 February 2024, News

Regulator issues enforcement notices ordering Serco Leisure and community leisure trusts to stop using FRT and fingerprint scanning to monitor workers’ attendance

Information Commissioner’s Office tells platforms to respect information rights when moderating online content

16 February 2024, News

The Information Commissioner’s Office (ICO) is working to support people's information rights online by ensuring organisations understand their data protection obligations when seeking to make…

Practical tips for small beauty and wellbeing businesses this Valentine’s Day

14 February 2024, News

Show your customers you care – about their information rights – this Valentine’s Day.

ICO approves legal services certification scheme

13 February 2024, Statement, Legal

The Information Commissioner’s Office (ICO) has approved a certification scheme aimed at legal service providers who process personal data. Certification schemes were introduced under the…

ICO responds to Home Office’s draft regulations to the immigration exemption

12 February 2024, Statement

The Information Commissioner's Office has welcomed proposed government changes to provide clearer safeguards around how people in a potentially vulnerable position within the immigration system are able to access the information held about them.

ICO urges all app developers to prioritise privacy

08 February 2024, News

The Information Commissioner’s Office is reminding all app developers to ensure they protect users’ privacy, following the regulator’s review of period and fertility apps.

ICO warns organisations to proactively make advertising cookies compliant after positive response to November call to action

31 January 2024, Blog

Last November we wrote to 53 of the UK’s top 100 websites, warning that they faced enforcement action if they did not make changes to advertising cookies to comply with data protection law.

New ICO campaign promotes sharing data to safeguard children

29 January 2024, News

The Information Commissioner’s Office is partnering with education, law enforcement and social service organisations to raise awareness about responsible data sharing to protect children from harm.

South Tees Hospitals NHS Foundation Trust reprimanded for “serious, harmful” data breach

25 January 2024, Statement, Health

Investigation found Trust staff not prepared for handling sensitive communications

ICO fines financial services company £50k for spam text messages

19 January 2024, News

Financial services company LADH Limited has been fined £50,000 by the Information Commissioner’s Office (ICO) for sending tens of thousands of spam text messages, in breach of Privacy and Electronic Communications Regulations (PECR).

ICO publishes updated Commissioner’s Opinion on age assurance for the Children’s code

18 January 2024, News

New Opinion gives clarity to organisations on how to comply with age assurance

Accelerated Access to GP Records (AAGPR) DPIA's response

17 January 2024, Statement, Health

Over recent weeks, a number of Data Protection Impact Assessments (DPIAs) have been submitted by GP Practices. The subject of the DPIAs is the implementation of the Accelerated Access to GP Records…

Two home improvement companies fined a total of £250,000 for making illegal marketing calls

16 January 2024, News

The Information Commissioner’s Office (ICO) has fined two home improvement companies a total of £250,000 for bombarding people on the UK’s ‘do not call’ register with millions of unlawful marketing calls.

Information Commissioner’s Office launches consultation series on generative AI

15 January 2024, News

The Information Commissioner’s Office (ICO) has launched a consultation series on generative Artificial Intelligence (AI), examining how aspects of data protection law should apply to the development and use of the technology.

ICO fines HelloFresh £140,000 for spam texts and emails

12 January 2024, News

The Information Commissioner’s Office (ICO) has fined food delivery company HelloFresh £140,000 for a campaign of 79 million spam emails and 1 million spam texts over a seven-month period.

Are you clear on clarifying information requests?

10 January 2024, Blog

Public organisations hold a huge amount of information across a wide range of areas.

Information Commissioner’s Office MBE awards in the King’s New Year Honours List

30 December 2023, News

ICO Deputy Chief Executive, Paul Arnold and Senior Independent Director, Nicola Wood have been awarded MBEs in the King’s New Year Honours List. Paul Arnold receives his award for services to…

ICO statement in response to parliamentarians' letter on facial recognition technology

22 December 2023, Statement

Facial recognition technology can bring benefits in helping to prevent and detect crime, but it relies on processing large amounts of sensitive personal data.

“We are not seeing the improvement both we and the public need” – ICO issues enforcement notice to GMP over transparency failures

20 December 2023, News

Enforcement notice issued to Greater Manchester Police over failure to clear Freedom of Information backlog

Bank of Ireland UK reprimanded for inaccurate data on customers’ accounts

15 December 2023, News

The Information Commissioner’s Office (ICO) has issued Bank of Ireland UK with a reprimand for mistakes made on more than 3,000 customers’ credit profiles.

ICO fines Ministry of Defence for Afghan evacuation data breach

13 December 2023, News

The Information Commissioner’s Office (ICO) has fined the Ministry of Defence (MoD) £350,000 for disclosing personal information of people seeking relocation to the UK shortly after the Taliban took control of Afghanistan in 2021.

Two new employment guidance pieces out for consultation

12 December 2023, News

We are producing an online resource with topic-specific guidance on employment practices and data protection. We are releasing our drafts of the different topic areas in stages and adding to the resource over time, and two new pieces of guidance are now out for public consultation.

Court of Appeal ruling on immigration exemption brings ‘greater empathy’ - Commissioner

11 December 2023, News

The Court of Appeal has ruled that the government must make changes to the immigration exemption in the Data Protection Act 2018 to make it clearer.

John Edwards speaks at TechUK Digital Ethics Summit 2023

06 December 2023, Speech

Kia ora, good morning and welcome to TechUK’s annual Digital Ethics summit. I’m happy to be here talking to you all, a roomful of people who care as much as I do about protecting people’s fundamental privacy rights.

UK Information Commissioner warns against 2024 becoming the year people lose trust in AI

06 December 2023, News

UK Information Commissioner, John Edwards, will today warn that 2024 could be the year people lose trust in AI – and call on tech developers to embed privacy into their products from the very start.

How data protection law can prevent harm in the housing sector

05 December 2023, Blog

Housing organisations require personal data to provide services and support to their residents – this could be anything from contact details to medical records.

We looked into text pests and here's what we found

29 November 2023, Blog

Earlier this year, you may have seen media reports about people receiving unwanted contact from 'text pests' after using services such as booking a taxi or ordering a pizza.

ICO reprimands council for disclosing domestic abuse victim’s details to ex-partner

29 November 2023, News

The Information Commissioner’s Office (ICO) has issued a reprimand to Charnwood Borough Council after it disclosed the new address of a domestic abuse victim to her ex-partner.

Hospitals urged to improve data protection standards following incident at NHS Fife

28 November 2023, News

The Information Commissioner’s Office (ICO) has issued a reprimand to NHS Fife, after an unauthorised person was able to enter a ward and access the personal information of 14 patients.

Statement on Court of Appeal judgment on Freedom of Information Act appeal

22 November 2023, Statement

The Court of Appeal has ruled against the Information Commissioner’s Office (ICO) in a Freedom of Information Act 2000 appeal regarding the ability to aggregate public interest factors for and against disclosure when applying exemptions under the Act.

Commissioner warns UK’s top websites to make cookie changes

21 November 2023, Statement

Regulator makes clear it should be as easy to “Reject All” cookies as it is to “Accept All”

Statement regarding the outcome of the Independent External Review of Lancashire Police’s handling of the Nicola Bulley case

21 November 2023, Statement

John Edwards, Information Commissioner said: “It’s important that lessons can be learned from this tragic case, particularly around what information can be shared during a fast-paced investigation.

Former NHS secretary found guilty of illegally accessing medical records

17 November 2023, News

A former NHS employee has been found guilty and fined for illegally accessing the medical records of over 150 people.

Information Commissioner seeks permission to appeal Clearview AI Inc ruling

17 November 2023, Statement

The UK Information Commissioner is seeking permission to appeal the judgment of the First Tier Tribunal (Information Rights) (Tribunal) on Clearview AI Inc (Clearview).

What to consider when using online forms to receive information requests

15 November 2023, Blog

As freedom of information (FOI) practitioners, you have a responsibility to help requesters clarify what it is they want from you.

‘Be smarter than your smart tech’ – ICO issues top tips for consumers buying smart devices on Black Friday

15 November 2023, News

The Information Commissioner’s Office (ICO) has shared its top tips to support consumers shopping smart tech this Black Friday.

Assessing data protection practices of UK tracing agents

14 November 2023, Blog

Earlier this year a women’s charity raised concerns with us about the alleged actions of a tracing agent – an investigator using various methods to find a person’s current address details.

ICO and European Data Protection Supervisor (EDPS) sign Memorandum of Understanding

08 November 2023, News

The UK Information Commissioner’s Office (ICO) and the European Data Protection Supervisor (EDPS) have signed a Memorandum of Understanding (MoU), which reinforces their common mission to uphold individuals’ data protection and privacy rights, and cooperate internationally to achieve this goal.

An apology from the ICO to Dame Alison Rose

06 November 2023, Statement

The ICO recently investigated a complaint from Nigel Farage. The ICO's investigation was solely into NatWest's actions as a data controller.

Information Commissioner’s Office issues three fines totalling £170,000 for illegal direct marketing

02 November 2023, News

Three companies offering financial services have been fined £170,000 collectively by the Information Commissioner’s Office (ICO) for illegal direct marketing under the Privacy and Electronic Communications Regulations (PECR).

John Edwards delivers UK Finance keynote speech

31 October 2023, Speech

Kia ora. I hope you’ve had an interesting and thought-provoking conference. Thank you for sticking around until the end of the day to hear me speak – it’s a difficult gig closing a conference, so your eyes and ears are much appreciated. And thanks to David Postings, CEO of UK Finance, for inviting me here today.

ICO reprimands University Hospitals of Derby and Burton NHS Foundation Trust for lost referrals

30 October 2023, News

The Information Commissioner’s Office (ICO) has issued a reprimand to Derby and Burton NHS Foundation Trust after a computer system caused some patient referrals to be delayed or lost altogether.

How data protection law can help retailers tackle shoplifting

24 October 2023, Blog

As statistics show that shoplifting is up by 27% across ten of the largest cities in the UK*, more retailers are turning to technology to protect their business. Data protection law enables…

ICO seeks Sandbox entrants for 2024

13 October 2023, News

Organisations have until the end of this year to submit expressions of interest in entering the ICO’s Regulatory Sandbox in 2024.

Paul Arnold at PDP’s Data Protection Compliance Conference 2023

12 October 2023, Speech

Thank you for such a warm welcome. It’s great to be with you today and a privilege to be opening today’s Data Protection Compliance Conference.

Court of Appeal rules ICO acted lawfully in subject access request complaint litigation

10 October 2023, News

The UK Information Commissioner has welcomed the Court of Appeal’s ruling on a long-running court battle over a subject access request complaint.

UK Information Commissioner issues preliminary enforcement notice against Snap

06 October 2023, News

The Information Commissioner’s Office (ICO) has issued Snap, Inc and Snap Group Limited (Snap) with a preliminary enforcement notice over potential failure to properly assess the privacy risks posed by Snap’s generative AI chatbot ‘My AI’.

John Edwards' opening speech at DPPC 2023

03 October 2023, Speech

Hello and good morning everyone. I’d like to welcome you to this year’s Data Protection Practitioner’s Conference, or DPPC as we like to call it. It’s great to be here virtually, speaking to so many of you.

ICO publishes guidance to ensure lawful monitoring in the workplace

03 October 2023, News

The Information Commissioner’s Office (ICO) is calling on organisations to consider both their legal obligations and their workers’ rights before they implement any monitoring in the workplace.

Information Commissioner calls on public authorities to stop using spreadsheets in FOI responses

28 September 2023, News

Advice comes following recent high profile data breaches.

Data breaches put domestic abuse victims’ lives at risk, UK Information Commissioner warns

27 September 2023, News

Warning comes after the ICO reprimands seven organisations in the past 14 months for data breaches affecting victims of domestic abuse.

“This needs to be dealt with.” - ICO issues Enforcement Notice to City of York Council over FOI backlog

21 September 2023, News

Information Commissioner issues Enforcement Notice relating to backlog of 261 FOI requests

ICO issues half a million pounds in new fines as fight to tackle illegal nuisance calls continues

20 September 2023, News

The Information Commissioner’s Office (ICO) has issued fines totalling £590,000 to five companies for collectively making 1.9 million unwanted marketing calls which targeted the elderly and people with vulnerabilities.

ICO statement following potential police cyber breach

14 September 2023, Statement

Following media reporting of a potential cyber breach affecting Greater Manchester Police, Elizabeth Baxter, Head of Cyber Investigations at the Information Commissioner’s Office, said: “Police officers and staff expect their information to be kept secure, and are right to be concerned when that doesn’t happen. This incident has been reported to us, and we’ll now be looking into what happened, and asking questions on behalf of anyone affected."