Skip to main content
Home

Action we've taken

Part of our role is to take action to ensure organisations meet their information rights obligations.

Lessons learned from reprimands

As we look back at the reprimands issued from July to September 2023, here are three brief lessons for organisations across the public and private sectors to improve their data protection practices.
Sign up for our action we've taken e-newsletter

What we've done

Action we've taken to ensure organisations meet their information rights obligations.

Enforcement

See the latest monetary penalties, enforcement notices, undertakings, prosecutions and reprimands we have issued.

Other decisions

Decisions made by the Commissioner in relation to investigations carried out into GDPR and Data Protection Act 2018 compliance.

Decision notices

Since 2005 we've ruled on more than 13,500 freedom of information and environmental information cases.

Audits and overview reports

What we've found when visiting and working with organisations.

FOI regulatory action

FOI enforcement notices, information notices and practice recommendations.

What's happening now

Find out about our work regarding charity fundraising practices, data security incidents, nuisance messages and cookies.

Lessons learned from reprimands

Cookie trends

Nuisance calls and messages trends

Investigation into data analytics for political purposes

Timeliness of responses to information access requests by police forces

Latest cyber issues

Data security incident trends

The ICO's work to recover fines

Investigation into data protection compliance in the direct marketing data broking sector