The UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.

The business impact target (BIT) assesses the economic impact of regulation on businesses and aims to reduce the regulatory burden. The Small Business, Enterprise and Employment Act 2015 and Enterprise Act 2016 require regulators, including the Information Commissioner, to assess and report the economic impact of their regulatory activity on business.

The Secretary of State determines which regulatory provisions are qualifying regulatory provisions (QRPs) and require an assessment for the purposes of the BIT. Regulatory provisions which are deemed non-qualifying regulatory provisions (NQRPs) do not require an assessment. Each reporting period, the Commissioner must publish BIT assessments for QRPs and a summary of NQRPs for all regulatory provisions introduced, ceased or changed within that period. Further information about the BIT is available here.

December 2019 - December 2020

This is our NQRP summary for the period ending December 2020.

June 2017 - June 2018

This is our NQRP summary for the period June 2017 – June 2018. The Commissioner did not have any QRPs for this period.

May 2015 – June 2017

These are our assessments and summaries for the period May 2015 – June 2017, which have been verified by the Regulatory Policy Committee.


The Commissioner’s QRPs are all guidance documents issued to assist organisations in complying with the legislation that she regulates.