ICO and stakeholder consultations

Children’s code strategy call for evidence

18 October 2024, ICO consultation, Closed

Our Children's code is a statutory code of practice that explains how the UK General Data Protection Regulation (UK GDPR) applies in the context of children using digital services and how organisations can make sure their digital services safeguard children’s personal information. The code sets out 15 standards of age-appropriate design, reflecting a risk-based approach.

ICO consultation series on generative AI and data protection

18 September 2024, ICO consultation, Closed

We are launching a consultation series on how aspects of data protection law should apply to the development and use of generative AI models.

Call for views on “consent or pay” business models

17 April 2024, ICO consultation, Closed

This call for views sets out the ICO’s emerging thinking on “consent or pay” business models. It should not be interpreted as confirmation that such an approach is legally compliant.

ICO consultation on the Enterprise Data Strategy

12 March 2024, ICO consultation, Closed

The Information Commissioner's Office (ICO) has created a new Enterprise Data Strategy (EDS) that outlines how we will use data to inform and direct our corporate, regulatory and strategic priorities. The draft of this strategy is now published for public consultation.

ICO consultation on draft employment practices – keeping employment records

05 March 2024, ICO consultation, Closed

The Information Commissioner’s Office (ICO) is producing an online resource with topic-specific guidance on employment practices and data protection. We are releasing our drafts of the different topic areas in stages and adding to the resource over time. A draft of the guidance on keeping employment records is now out for public consultation.

ICO consultation on draft employment practices – recruitment and selection

05 March 2024, ICO consultation, Closed

The Information Commissioner’s Office (ICO) is producing an online resource with topic-specific guidance on employment practices and data protection. We are releasing our drafts of the different topic areas in stages and adding to the resource over time. A draft of the guidance on recruitment and selection is now out for public consultation.

ICO consultation on the guidance and toolkits available to organisations on the topic of AI

10 January 2024, ICO consultation, Closed

The Information Commissioner’s Office (ICO) is consulting on the guidance and toolkits available to organisations on the topic of AI.

Responses to the first consultation on the draft Data protection and journalism code of practice

07 December 2023, ICO consultation, Closed

As required by section 124 of the Data Protection Act 2018, we are developing a code of practice about using personal data for journalism.

ICO consultation on the draft transparency in health and social care guidance

13 November 2023, ICO consultation, Closed

The Information Commissioner’s Office (ICO) is producing guidance on transparency in the health and social care sector. The draft of this guidance is now published for public consultation.

ICO consultation on the draft biometric data guidance

20 October 2023, ICO consultation, Closed

The Information Commissioner’s Office (ICO) is producing guidance on biometric data and biometric technologies. Following consultation, our biometric recognition guidance has been published.…

Period tracking apps and fertility tracking apps – your views

05 October 2023, ICO consultation, Closed

The ICO is reviewing how period tracking apps and fertility tracking apps available to UK users, process their users’ personal information.

ICO consultation on draft Data Protection Fining Guidance

02 October 2023, ICO consultation, Closed

Read the summary of responses to the new draft Data Protection Fining Guidance consultation. The Information Commissioner’s Office (ICO) is consulting on new draft guidance about how we decide…

ICO call for views: Data protection and content moderation

09 June 2023, ICO consultation, Closed

In February 2024, we published guidance on content moderation and data protection , which is the first piece in our planned series of guidance products on online safety technologies. Our…

ICO consultation on the draft guidance for ‘Likely to be accessed’ in the context of the Children’s code

19 May 2023, ICO consultation, Closed

In September 2022, we clarified our position that adult-only services are in scope of the Children’s code if they are likely to be accessed by children. To support Information Society Service…

ICO consultation on the draft Impact Assessment Framework

30 April 2023, ICO consultation, Closed

Read our Impact Assessment Framework consultation summary The ICO is consulting on our draft Impact Assessment Framework , which sets out our approach to impact assessments (IAs), when we will…

Responses to the consultation on a prioritisation framework for handling FOI/EIR complaints

28 March 2023, ICO consultation, Closed

In November 2022, we consulted on our proposed prioritisation framework for handling Freedom of Information (FOI) and Environmental Information Regulations (EIR) complaints. We asked for feedback…

ICO consultation on draft employment practices guidance – information about workers’ health

26 January 2023, ICO consultation, Closed

The Information Commissioner’s Office (ICO) is producing an online resource with topic-specific guidance on employment practices and data protection. We are releasing our drafts of the different topic areas in stages and adding to the resource over time. A draft of the guidance on handling information about workers’ health is now out for public consultation.

ICO call for views: Anonymisation, pseudonymisation and privacy enhancing technologies guidance

31 December 2022, ICO consultation, Closed

The ICO is calling for views on its updated draft guidance on anonymisation, pseudonymisation and privacy enhancing technologies. We are sharing our thinking in stages to ensure we gather as much feedback as possible to help refine and improve the final guidance, on which we will carry out a formal consultation.

ICO consultation on prioritising access to information complaints

20 December 2022, ICO consultation, Closed

We are consulting on how we prioritise the complaints we receive about public bodies’ handling of information requests.

ICO statutory review on how personal data is processed for the purposes of journalism – phase two

02 December 2022, ICO consultation, Closed

We have started a review on how personal data is being processed for the purposes of journalism. This is a statutory review under Section 178 of the Data Protection Act 2018, and it will help us…

ICO consultation: Children's code evaluation

18 November 2022, ICO consultation, Closed

Following the first anniversary of the Children’s code’s implementation, the ICO is evaluating the code’s impact. We are gathering information from sources including market research, ongoing stakeholder engagement and our experience of supervising the code over the past year.

ICO statutory review on how personal data is processed for the purposes of journalism

14 October 2022, ICO consultation, Closed

We have started a review to understand how personal data is being processed for the purposes of journalism. This is a statutory review under Section 178 of the Data Protection Act 2018, and it…

ICO consultation on the draft employment practices: monitoring at work guidance and draft impact assessment

12 October 2022, ICO consultation, Closed

The Information Commissioner’s Office (ICO) is producing topic-specific guidance on employment practices and data protection. We are releasing our drafts of the different topic areas in stages and adding to the resource over time. A draft of the guidance on monitoring at work is now out for public consultation.

Using AI/ML recommendation systems to protect people from content related harm

30 September 2022, ICO consultation, Closed

We are researching how product and developer teams working with AI/ML driven recommendation systems apply technical and organisational measures to protect people from content related harm.

Call for views: ICO25 plan

22 September 2022, ICO consultation, Closed

Our draft ICO25 plan was launched on 14 July 2022.

ICO second consultation on the draft Data protection and journalism code of practice

21 September 2022, ICO consultation, Closed

We would like further feedback on the draft Data protection and journalism code of practice about using personal data for journalism. This is a statutory code under section 124 of the Data Protection Act 2018 (DPA 2018).

Call for views: Privacy in product design

31 August 2022, ICO consultation, Closed

We are researching how digital product teams apply privacy by design in practice so that we can create more practical support.

Your views matter: ICO listening exercise

01 May 2022, ICO consultation, Closed

We are running a major listening exercise to hear direct from businesses, organisations and people about their experiences of working with the ICO. The exercise includes this survey, as well as a…

ICO consultation on draft guidance for the research provisions within the UK GDPR and the DPA 2018

22 April 2022, ICO consultation, Closed

We are seeking feedback on the draft guidance on the research provisions in the UK GDPR and the DPA 2018 . Data protection law contains a number of provisions for processing personal data for…

Call for views: data security incident trends

31 March 2022, ICO consultation, Closed

The ICO is committed to the principles of open data, and recognises the value of making data that we collect and create available to the public where possible. This also helps us to comply with our obligations under the Freedom of Information Act (FOIA), and deliver wider benefits to society as envisaged in the National Data Strategy .

ICO consultation on the draft Regulatory Action Policy; statutory guidance on our regulatory action; and statutory guidance on our PECR powers

24 March 2022, ICO consultation, Closed

The Information Commissioner is seeking feedback on their: Regulatory Action Policy Statutory Guidance on our Regulatory Action ; and Statutory Guidance on our PECR Powers . …

ICO consultation on the draft journalism code of practice

24 January 2022, ICO consultation, Closed

We are seeking feedback on the draft journalism code of practice about processing personal data for the purposes of journalism. This is a statutory code under section 124 of the Data Protection Act 2018.

Call for evidence on the use of age assurance

04 January 2022, ICO consultation, Closed

The Commissioner’s Opinion on Age Assurance for the Children’s code provides the ICO’s view on how the law applies and facilitates consistent, clear, predictable regulation to those who might seek…

ICO consultation on the draft right of access for competent authorities guidance

15 December 2021, ICO consultation, Closed

This consultation ran from 14 December 2021 to 11 March 2022. We have published a summary of responses and our comments below. Original consultation introduction Summary of responses and…

Consultation on the ICO’s AI and data protection risk toolkit

01 December 2021, ICO consultation, Closed

The ICO is consulting on a beta version of its AI and data protection risk toolkit. This toolkit is designed to assist risk practitioners identify and mitigate risks to data protection that AI systems that process personal information create or exacerbate.

ICO call for views on employment practices

28 October 2021, ICO consultation, Closed

We previously published detailed employment practices guidance, including the employment practices code, supplementary guidance and the quick guide.

ICO call for views on incident reporting thresholds under NIS Regulations 2018

14 October 2021, ICO consultation, Closed

Currently, incident reporting thresholds for digital services providers are set out in the NIS Regulations 2018 and the European Commission Implementing Regulation 151/2018. The thresholds were…

ICO consults on how organisations can continue to protect people’s personal data when it’s transferred outside of the UK

11 October 2021, ICO consultation, Closed

We are seeking responses on our draft international data transfer agreement (IDTA) and guidance, which replace Standard Contractual Clauses (SCCs). We recognise the importance of international…

Children’s Code: Transparency champions open call

30 April 2021, ICO consultation, Closed

The ICO Children’s Code team are launching an open call for transparency champions. We’d like to hear from online services, children’s rights advocates, designers, academics and anyone else working to deliver our vision to place the best interests of children at the heart of the online world.

ICO call for views: AI and data protection risk mitigation and management toolkit

19 April 2021, ICO consultation, Closed

The ICO is seeking views to help shape and improve our AI and data protection risk mitigation and management toolkit.

ICO consultation on the role of data ethics in complying with the GDPR

08 January 2021, ICO consultation, Closed

This consultation is part of a suite of resources where we are looking for a wide range of views from organisations and individuals, across all sectors and organisational sizes. We want to hear from…

ICO consultation on the draft Statutory guidance

12 November 2020, ICO consultation, Closed

We are running a consultation about an updated version of the Statutory guidance on how the ICO will exercise its data protection regulatory functions of information notices, assessment notices, enforcement notices and penalty notices.

ICO consultation on a package of support for the providers of online services likely to be accessed by children

27 March 2020, ICO consultation, Closed

The ICO has recently published the final version of its Age Appropriate Design Code – a code of practice for online services

ICO call for views on the processing of personal data relating to criminal convictions

13 March 2020, ICO consultation, Closed

Organisations may process personal data relating to criminal convictions and offences, or related security measures (Article 10 data), for many reasons. For example, to safeguard vulnerable individuals or children, assess people’s suitability for employment, or assess whether a person can access services such as housing or insurance. The processing of Article 10 data is governed by a complex legislative framework.