The ICO exists to empower you through information.

The Data protection and journalism code of practice (the code) is a statutory code of practice produced under section 124 of the Data Protection Act 2018 (DPA). It came into force on 22 February 2024.

The Reference notes support the code, but they are not part of the statutory code itself. They will help anyone who would like background information or more detail than is in the code.

The notes refer to our wider guidance to help you to comply with the UK General Data Protection Regulation (UK GDPR) and the DPA 2018.

If you are new to data protection or are a small organisation, you’ll find basic guidance and resources to support you on our dedicated SME web hub.

Code of practice

Data protection and journalism code of practice

Practical guidance about what the legislation says and how to comply with it when using personal information for journalism.

Reference notes

Guidance to support the code, containing more information about the legislation, good practice, case law examples, and further reading.

Additional guidance

UK GDPR guidance and resources

A collection of our main guidance and resources about complying with the UK GDPR and DPA 2018.

SME web hub – advice for all small organisations

Basic guidance and resources, including a quick run-through of the data protection basics and bite-sized advice for smaller organisations.

Data protection and journalism: how to complain about media organisations

This is statutory guidance to help the public understand how to complain about the media under section 177 of the DPA 2018.

Further reading