Skip to main content

Technology

Guidance stages explained

Drafting – During this stage we pull together all relevant information and create a structured draft.

Public consultation/call for views (optional) – Usually we carry out a public consultation or call for views before we complete the guidance. To understand more about how and when we do this, you can read our consultation policy.

Redrafting (following consultation) – We make changes to the draft guidance to clarify issues and meet the needs of our audience.

Withdrawn – Occasionally we decide to not proceed with a guidance project. If so, we’ll mark it as withdrawn and remove it when we next update this page. If we decide to revisit an issue, we add a new entry to this page.

Published – Guidance is final and available on the website

Guidance on the use of anonymisation and pseudonymisation for research purposes

Stage: Drafting
Public consultation: Yes (due to launch May 2026)
Final version of guidance due for publication: Winter 2025/2026

Automated Decision Making (ADM) and Profiling Guidance update

Guidance on automated decision-making and profiling including amendments in the Data (Use and Access) Act 
Stage:
Drafting
Public consultation: Yes (due to launch November 2025)
Final version of guidance due for publication: Spring 2026

Consumer Internet of Things products and services

Stage: Public Consultation/Call for Views
Public consultation: Yes (due to launch June 2025)
Final version of guidance due for publication: Winter 2025/2026

Data protection by design and by default 

Update of existing guidance to cover Data (Use and Access) Act changes, including the new “children’s higher protection matters” duty. 
Stage:  Drafting  
Public consultation: No  
Final version of guidance due for publication:  Winter 2025/2026  

Distributed Ledger Technologies (DLT) guidance

Stage: Final draft
Public consultation: Yes (due to launch August 2025)
Final version of guidance due for publication: Winter 2025/2026

DUA updates to draft guidance on storage and access technologies Part 1

Part 2 to be published in Winter 2025/2026.
Stage:
Public Consultation/Call for Views
Public consultation: Yes (ongoing)
Final version of guidance due for publication: Spring 2026

 eIDAS -   Revisions to ICO eIDAS Guide

Stage: Final draft
Public consultation: No
Final version of guidance due for publication: Summer 2025

Encryption guidance

Stage: Redrafting (after public consultation) 
Public consultation: Yes (closed)
Final version of guidance due for publication: Autumn 2025

Profiling for Online Safety

Stage: Final draft
Public consultation: No
Final version of guidance due for publication: Summer 2025