Here's a full index of our data protection and privacy and electronic communications guidance for organisations.
Anonymisation
Audits
- Assessment notices code of practice
- Guide to ICO data protection audits
- Guide to ICO PECR audits
- Guide to ICO advisory visits
Big Data
CCTV
Credit and finance
Crime mapping
Data processing
Data sharing
- Data sharing checklists
- Data sharing checklists Welsh
- Data sharing code of practice
- Disclosure of employee information under TUPE
- Using the crime and taxation exemptions
- When can I disclose information to a private investigator?
Deletion
Data protection – general
- Getting it right: small business checklist
- Guide to Data Protection
- How we deal with complaints and concerns – a guide for data controllers
- Taking a positive approach to information rights
- Training checklist for small and medium sized organisations
Education
Employment
- Employment practices code
- Employment practices code – a quick guide
- Employment practices code – supplementary guidance
- Disclosure of employee information under TUPE
- Getting it right: a brief guide to data protection for small businesses
- Monitoring under section 75 of the Northern Ireland Act 1998
Identity scanning
International transfer
Marketing
- Direct marketing
- Direct marketing checklist – ideal for small businesses
- Companies receiving unwanted marketing
- Guidance on political campaigning
The media
Monetary penalties
- Monetary penalties statutory guidance (This guidance is under review following changes to the threshold for a monetary penalty under PECR)
MPs and elected officials
- Advice for elected and prospective councillors
- Disclosure of personal information by local authorities to councillors
- Constituency casework of Members of Parliament and the processing of sensitive personal data
- Guidance on political campaigning
Notification
- Registration of barristers' chambers
- Registration of pension scheme trustees
- The exemption from notification for ‘not-for-profit’ organisations
Online and computing
- Bring your own device (BYOD) guidance
- Cloud computing
- IT asset disposal
- Personal information online code of practice
- Personal information online: small business checklist
- Privacy in mobile apps: guidance for app developers
- Social networking and online forums – when does the DPA apply?
- Wi-Fi location analytics
Personal data
- Determining what is personal data
- What is ‘data’ for the purposes of the DPA
- What is personal data? – A quick reference guide
Privacy and electronic communications – general
- The Guide to Privacy and electronic communications
- Advice on the new cookies Regulations
- Notification of privacy and electronic communications security breaches
Privacy by design
Privacy notices
Relevant filing system
RFID
Security
- A practical guide to IT security: ideal for the small business
- A practical guide to IT security: ideal for the small business (Welsh)
- Encryption
- Guidance on data security breach management
- Notification of data security breaches to the Information Commissioner’s Office
- Notification of privacy and electronic communications security breaches
Subject access
- Access to information held in complaint files
- Enforced subject access (section 56)
- How to disclose information safely – removing personal data from information requests and datasets
- Regulatory activity exemption
- Subject access: code of practice
- Subject access: code of practice (Welsh)
- Subject access: responding to a request checklist