🆕 Changes to data protection laws will make it easier for UK businesses to protect people’s personal information while growing and innovating their products and services.
Find out more 👇
NEW: We've concluded our criminal investigation into the unlawful obtaining and disclosure of medical information to a third party without the consent of the data controller, related to a breach reported by the London Clinic in March 2024: ico.org.uk/about-the-ico/….
🆕The UK government has announced plans to protect children online by restricting access to social media.
Working to keep children safe online is a priority for the ICO. We'll continue to work with government and other regulators to ensure any changes deliver robust protection
During elections, if a political party offers to help you register for a postal vote, it should be clear if they want to use your information.
It should not come as a surprise to you if your data is used for their election campaign.
You have rights: ico.org.uk/for-the-public…
🆕 Smart products slide seamlessly into our everyday lives and collect vast amounts of personal information.
We’re calling on developers and manufacturers to prioritise people’s privacy in our final Internet of Things guidance.
More below 👇
Our final guidance reflects feedback we received on our consultation last year.
If you’re a developer or manufacturer of smart products, read the final guidance on our website: ico.org.uk/about-the-ico/…
We welcome this disqualification.
Leanne Richardson was director of a company that knew the law but deliberately chose to ignore it for financial gain.
We fined ESL Consultancy Service Ltd £200,000 for instigating unlawful loan promotion nuisance texts:
The boss of a West Sussex consultancy firm, which triggered almost 38,000 complaints for unlawful nuisance texts, has been banned as a company director until 2032.
Find out more ⤵️
gov.uk/government/new…
🆕 Two former RAC employees have been handed a suspended prison sentence and ordered to complete 150 hours of unpaid work, for unlawfully copying and selling over 29,500 lines of personal information.
Find out more about the case: ico.org.uk/about-the-ico/…
Following a Proceeds of Crime Act hearing, confiscation orders were handed to Greater Manchester based former RAC employees Debbie Okparavero and Maliha Islam.
This is in addition to their to six-month suspended prison sentences and an order to complete 150 hours of unpaid work.
Your child is building a detailed digital profile from as young as four. Do you know what data they're sharing?
Katie Searle of the @ICOnews joins Tech Shock to discuss Switched on to privacy and what parents can do.
buzzsprout.com/1739115/episod…
🆕 £355,880 confiscation order against former Manchester motor insurance worker, Rizwan Manjra, who illegally accessed personal information on work systems for his own gain.
Read the story in full:
🆕 A motor insurance worker who unlawfully accessed personal information has been handed a suspended prison sentence after our investigation.
Rizwan Manjra led a team dealing with accident claims for Markerstudy Insurance Services Limited in Manchester:ico.org.uk/about-the-ico/…
🆕 We’ve fined Energy Prices Direct Limited (EPDL) £160,000 for making illegal marketing calls to people.
EPDL made over 700,000 calls to numbers registered to the Telephone Preference Service and Corporate Telephone Preference Service.
IMPORTANT: From 19 June 2026, handling data protection complaints becomes a legal requirement for all organisations, whatever their size.
This is a new Data (Use and Access) Act (DUAA) requirement for all organisations, regardless of size.
More help 👇
In four weeks, the law says you’ll need a clear process to acknowledge data protection complaints, investigate promptly, keep people informed and explain outcomes.
We have already published our guidance to help your business get ready: ico.org.uk/for-organisati…
NEW: We’ve fined South Staffordshire Plc and South Staffordshire Water Plc (South Staffordshire) after a serious cyber attack resulted in personal information of 633,887 people being extracted.
This led to 4.1 terabytes of data being shared on the dark web.