The Information Commissioner’s Office (ICO) has completed the first statutory review of the processing of personal data for the purposes of journalism as outlined under Section 178 of the Data Protection Act 2018 (DPA 2018). This review summarises the findings, conclusions and next steps.
The next review will look at the period from 24 May 2022 until 25 May 2027. In the period leading up to that review, the ICO will continue to grow the evidence base and analyse any post implementation work from the embedding of the Data protection and journalism code of practice, including assessing awareness, understanding, and application of data protection requirements.