Technology
Guidance stages explained
Drafting – During this stage we pull together all relevant information and create a structured draft.
Public consultation/call for views (optional) – Usually we carry out a public consultation or call for views before we complete the guidance. To understand more about how and when we do this, you can read our consultation policy.
Redrafting (following consultation) – We make changes to the draft guidance to clarify issues and meet the needs of our audience.
Withdrawn – Occasionally we decide to not proceed with a guidance project. If so, we’ll mark it as withdrawn and remove it when we next update this page. If we decide to revisit an issue, we add a new entry to this page.
Published – Guidance is final and available on the website
List of guidance in development
Guidance on the use of anonymisation and pseudonymisation for research purposes
Automated Decision Making (ADM) and Profiling Guidance update
Consumer Internet of Things products and services
Data protection by design and by default
Distributed Ledger Technologies (DLT) guidance
DUA updates to draft guidance on storage and access technologies Part 1
Guidance on the use of anonymisation and pseudonymisation for research purposes
Stage: Drafting
Public consultation: Yes (due to launch May 2026)
Final version of guidance due for publication: Winter 2025/2026
Automated Decision Making (ADM) and Profiling Guidance update
Guidance on automated decision-making and profiling including amendments in the Data (Use and Access) Act
Stage: Drafting
Public consultation: Yes (due to launch November 2025)
Final version of guidance due for publication: Spring 2026
Consumer Internet of Things products and services
Stage: Public Consultation/Call for Views
Public consultation: Yes (due to launch June 2025)
Final version of guidance due for publication: Winter 2025/2026
Data protection by design and by default
Update of existing guidance to cover Data (Use and Access) Act changes, including the new “children’s higher protection matters” duty.
Stage: Drafting
Public consultation: No
Final version of guidance due for publication: Winter 2025/2026
Distributed Ledger Technologies (DLT) guidance
Stage: Final draft
Public consultation: Yes (due to launch August 2025)
Final version of guidance due for publication: Winter 2025/2026
DUA updates to draft guidance on storage and access technologies Part 1
Part 2 to be published in Winter 2025/2026.
Stage: Public Consultation/Call for Views
Public consultation: Yes (ongoing)
Final version of guidance due for publication: Spring 2026
eIDAS - Revisions to ICO eIDAS Guide
Stage: Final draft
Public consultation: No
Final version of guidance due for publication: Summer 2025
Encryption guidance
Stage: Redrafting (after public consultation)
Public consultation: Yes (closed)
Final version of guidance due for publication: Autumn 2025
Profiling for Online Safety
Stage: Final draft
Public consultation: No
Final version of guidance due for publication: Summer 2025