For organisations

Find out about your obligations and how to comply, including protecting personal information and providing access to official information.

Revamped data protection self assessment toolkit

We have revamped this resource in line with the GDPR. Use the toolkit to assess your compliance with data protection law and find out what you need to do to make sure you are keeping people's data secure. 

Guides to the legislation

Find out about your obligations and how to comply under the Acts.

General Data Protection Regulation (GDPR)

Find out about your obligations under the forthcoming GDPR.

Freedom of information

If you are a public authority you have a legal obligation to make official information available under the Freedom of Information Act.

Electronic communications and marketing

Sending marketing messages by phone, fax, email or text? Using cookies? Providing electronic communications services to the public? Find out what you need to do to comply.

Guide to Law Enforcement Processing

This Guide to Law Enforcement processing highlights the key requirements of Part 3 of the Data Protection Act 2018.

Environmental information

Find out your obligations for environmental information.

Spatial information

If you are a public authority that holds spatial data, you have a legal obligation to make that information available.

Re-use of information

Find out about your obligations around the re-use of public sector information, and the ICO’s role.

eIDAS

If you provide trust services such as electronic signatures, electronic time stamps and website authentication certificates, you have obligations under eIDAS.

The Guide to NIS

Some digital service providers have obligations under the Network and Information Systems Regulations 2018.

In your sector

Find out how to comply with the obligations in your sector.