The UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.


Data protection fee letters 
October 2019 

If you are in the care home or the finance sector you may have received a letter from the us about your obligation to pay a data protection fee. If you have already paid your fee you do not need to take any action. If you need to pay or unsure if you do you can find further information here.


'Soft opt in'
August 2019

You must not send marketing emails or texts to individuals without specific consent. There is a limited exception for your own previous customers, often called the ‘soft opt-in’.

This term is sometimes used to describe the rule about existing customers. If an individual bought something from you recently, gave you their details, and did not opt out of marketing messages, they are probably happy to receive marketing from you about similar products or services even if they haven’t specifically consented. However, you must have given them a clear chance to opt out – both when you first collected their details, and in every message you send.

Further guidance on electronic mail marketing and the ‘soft opt-in’ can be found on our website


Cookies and similar technologies
July 2019

You must tell people if you set cookies, and clearly explain what the cookies do and why. You must also get the user’s consent. Consent must be actively and clearly given.There is an exception for cookies that are essential to provide an online service at someone’s request (eg to remember what’s in their online basket, or to ensure security in online banking).The same rules also apply if you use any other type of technology to store or gain access to information on someone’s device.

Further guidance can be found on our cookies and similar technologies page


The end of the transition period and data protection
September 2019 

If you are concerned about how the end of the transition period will impact you organisations data, we have a range of guidance and resources to help you prepare.  


Parish councils data protection compliance 
August 2019, Local government 

Following our work with over 50 town and parish councils across the UK, we’ve developed a suite of resources to help local councils with some of their key data protection issues.


Business-to-business marketing
May 2018, Marketing 

Does the GDPR apply to business-to-business marketing? What counts as consent? These are just a couple of questions we get about business to business marketing under the new law. Our document about the rules around B2B marketing, the GDPR and PECR answer these and many more.