We have fined genetic testing company 23andMe £2.31 million for failing to implement appropriate security measures to protect the personal information of UK users, following a large-scale cyber attack in 2023.| ico.org.uk
Who we are, what we do, news and events, our job vacancies, consultations, and much more.| ico.org.uk
Keep up to date with our views, news and events, and find out how to contact the ICO press office.| ico.org.uk
The UK Information Commissioner is seeking permission to appeal the judgment of the First Tier Tribunal (Information Rights) (Tribunal) on Clearview AI Inc (Clearview). In its judgment the Tribunal supported the ICO's view that US-based Clearview was processing personal information, which related to the monitoring of individual’s behaviour through the collection of billions of face images, which were then offered for access and analysis using AI, to foreign subscribers.| ico.org.uk
The Tribunal found, in support of the ICO, that Experian had not processed the personal data of over 5 million individuals transparently, fairly or lawfully because it failed to notify them that it was processing their data for direct marketing purposes. However, it rejected the ICO’s view that Experian’s privacy notice was not transparent, that using credit reference data for direct marketing purposes was unfair, or that Experian did not properly assess its lawful basis.| ico.org.uk
Right to be informed| ico.org.uk
The ICO will relocate its head office to Manchester in autumn 2026.| ico.org.uk
For the public| ico.org.uk
For the public| ico.org.uk
The UK eIDAS Regulation provides the legal framework for the use of electronic trust services within the UK.| ico.org.uk
We are reviewing our approach to enforcement of the Privacy and Electronic Communications Regulations (PECR) regulation 6 consent requirements. We see this as an opportunity for new commercially viable advertising models that can support innovations to improve consumer privacy and boost economic growth.| ico.org.uk
The Information Commissioner’s Office is the regulator of data protection and other information rights legislation, we are sponsored by the Department for Science, Innovation and Technology. Information Commissioner's Office - GOV.UK (opens in new tab).| ico.org.uk
8 July 2025 - ICO welcomes Tribunal ruling on preliminary issue raised by TikTok in its appeal of 2023 penalty| ico.org.uk
We have been carefully considering the circumstances of the breach throughout, supporting the MoD's own investigation.| ico.org.uk
The Information Commissioner’s Office (ICO) has fined the Ministry of Defence (MoD) £350,000 for disclosing personal information of people seeking relocation to the UK shortly after the Taliban took control of Afghanistan in 2021.| ico.org.uk
The Information Commissioners’ Office (ICO) has issued fines totalling £180,000 for two companies that made more than 480,000 unlawful marketing calls to businesses signed up with the UK’s “Do not call” register.| ico.org.uk
What about unstructured paper records?| ico.org.uk
In brief…| ico.org.uk
This guidance was updated on 15 March 2023.| ico.org.uk
This consultation sets out the ICO’s emerging thinking on generative AI development and use. It should not be interpreted as confirmation that this data processing is legally compliant.| ico.org.uk
At a glance| ico.org.uk
What to provide| ico.org.uk
In brief…| ico.org.uk
For the public| ico.org.uk
Stephen Almond is the ICO's executive director of regulatory risk.| ico.org.uk
At a glance| ico.org.uk
What can I do if I’ve received a nuisance call?| ico.org.uk
In brief…| ico.org.uk
In brief…| ico.org.uk
Are we making a restricted transfer of personal data?| ico.org.uk
The steady growth of the use of video surveillance systems across public and private sectors, has led to both fixed and mobile cameras becoming more accepted in society. As video surveillance technology becomes more mainstream and affordable, it is now more common to see technologies such as smart doorbells and wireless cameras. Traditional closed circuit television (CCTV) also continues to evolve into more complex artificial intelligence (AI) based surveillance systems. These can process mor...| ico.org.uk
At a glance | ico.org.uk
The ICO exists to empower you through information. Find out more about our work and the legislation we cover.| ico.org.uk
ICO25 strategic plan| ico.org.uk
Age assurance plays an important role in keeping children, and their personal information, safe online. It describes tools or approaches that help estimate or assess a child’s age and therefore allows services to be tailored to their needs or access to be restricted, where required.| ico.org.uk
Click to toggle details| ico.org.uk
For the public| ico.org.uk
The Information Commissioner’s Office (ICO) has fined food delivery company HelloFresh £140,000 for a campaign of 79 million spam emails and 1 million spam texts over a seven-month period.| ico.org.uk
For the public| ico.org.uk
View the recent data security incidents that have been reported or notified to the ICO, or that we have identified proactively.| ico.org.uk