In this section you will find all the ICO's statutory codes of practice.
The ICO is required under the Data Protection Act 2018 (DPA 2018) to produce four codes of practice about Age appropriate design, Data sharing, Direct marketing and Journalism. The DPA 2018 also allows the Secretary of State to require the ICO to prepare other codes of practice that give guidance on good practice in the processing of personal data.
Two of the statutory codes have been produced and are available below. The Direct marketing code and the Journalism code are currently under production.
Age appropriate design code (Children's code)
The Children’s code (or Age appropriate design code) is a data protection code of practice for online services, such as apps, online games, and web and social media sites, likely to be accessed by children.