Statement in response to Meta’s plans to train generative AI with user data

Stephen Almond, Executive Director, Regulatory Risk at the ICO, said:  “We are pleased that Meta has reflected on the concerns we shared from users of their service in the UK,…

Read More »

ICO to investigate 23andMe data breach with Canadian counterpart

The Information Commissioner’s Office (ICO) and the Office of the Privacy Commissioner of Canada (OPC) have launched a joint investigation into the data breach that happened in October 2023 at…

Read More »

Understanding what information people commonly request from public authorities

Aiden Clarkson Senior Upstream Regulation Officer – FOI and Transparency People can use the WhatDoTheyKnow (WDTK) website to submit Freedom of Information (FOI) and Environmental Information Regulations (EIR) requests to…

Read More »

The General Election and my personal data – what should I expect?

We have been working with fellow regulators, and with those organisations and individuals who will be handling your personal information during the upcoming election campaign, to ensure expectations around compliance…

Read More »

Statement in response to Microsoft Recall feature

“We expect organisations to be transparent with users about how their data is being used and only process personal data to the extent that it is necessary to achieve a…

Read More »

PSNI facing a £750k fine following spreadsheet error that exposed the personal information of its entire workforce

Data breach brought tangible fear of threat to life

Read More »

We warn organisations must not ignore data protection risks as we conclude Snap ‘My AI’ chatbot investigation

ICO concludes investigation into Snap’s approach to assessing the data protection risks of its ‘My AI’ chatbot

Read More »

No regulatory wild west: how the ICO applies the law to emerging tech

John Edwards, Information Commissioner, delivers speech at the New Scientist Emerging Technogies summit, 15 May 2024.

Read More »

Car rental manager fined after unlawfully obtaining customer data

A former Management Trainee at Enterprise Rent-A-Car UK Limited (“Enterprise Rent-A-Car”) has been ordered to pay a fine after admitting he illegally obtained customer data between 18 March 2019 and…

Read More »

Children’s services in Birmingham reprimanded after inappropriately disclosing a child’s personal information

We have issued a reprimand to Birmingham Children’s Trust Community Interest Company after the personal information of a child was inappropriately disclosed to another family.

Read More »