Policy explorer

ICO

The document marks the one-year anniversary of the Data Use and Access Act's commencement. UK organisations must comply with new operational requirements and guidance related to data protection and automated decision-making.

ICO

This statement discusses the launch of the advisory AI Growth Lab to support AI innovation in the legal sector. UK organisations must navigate data protection requirements confidently to ensure compliance while adopting AI technologies.

ICO

This document is the ICO's response to the government regarding safe AI-powered innovation. UK organisations must comply with evolving data protection laws as they develop and deploy AI technologies.

ICO

This document provides steps to protect organizations from AI-powered cyber threats. UK organizations must implement technical and organizational measures to safeguard personal data under UK GDPR.

ICO

New guidance has been published to assist public authorities in handling AI-generated Freedom of Information requests. UK organisations must apply existing FOI principles consistently to manage the complexities introduced by AI tools.

ICO

This document discusses the ICO's campaign to improve children's online privacy awareness. UK organisations must comply with regulations protecting children's personal information online.

ICO

This document provides information on automated decision making in recruitment. UK organisations must ensure compliance with data protection rights and mitigate bias in automated decisions.

ICO

This document discusses the use of automated decision-making in recruitment. UK organisations must ensure safeguards are in place to protect jobseeker data rights and ensure fairness in decisions.

ICO

This blog discusses the importance of data protection in the use of facial recognition technology by police. UK police forces must ensure compliance with data protection laws to maintain public trust and protect civil liberties.

ICO

This speech discusses the challenges and changes faced by the Information Commissioner's Office (ICO) during John Edwards' tenure. UK organisations should monitor the evolving data protection landscape and the ICO's guidance on compliance and enforcement actions.

ICO

Reddit has been fined £14.47m for failing to protect children's personal information. UK organisations must ensure robust age assurance mechanisms to comply with data protection laws.

ICO

This document is a joint statement from international data protection authorities regarding AI-generated imagery. UK organizations should monitor the implications of privacy risks associated with AI-generated content.

ICO

MediaLab was fined for unlawfully processing children's personal information on Imgur. UK organisations must implement age checks and obtain parental consent for users under 13 to comply with data protection laws.

ICO

The ICO has opened investigations into XIUC and X.AI regarding the Grok AI system's processing of personal data. UK organisations must ensure compliance with data protection laws to avoid significant penalties.

ICO

This MOU formalises the cooperation between the Information Commissioner’s Office and HM Government. UK organisations should be aware of the framework for collaboration on information protection.

ICO

The report discusses the potential of agentic AI in personal shopping. UK organisations must ensure compliance with data protection laws to build public trust in these technologies.

ICO

This is a statement regarding compliance with UK data protection law by Grok AI. UK organisations must ensure they handle personal data lawfully and respect individuals' rights.

ICO

This speech addresses the importance of data protection and the role of AI in enhancing services. UK organisations should be aware of the evolving regulatory landscape and the need for responsible innovation.

ICO

The UK Upper Tribunal has upheld the Information Commissioner's appeal against Clearview AI Inc regarding data protection violations. UK organizations must ensure compliance with UK data protection law when processing personal information of UK residents, regardless of their location.

ICO

This statement provides an update on the ongoing investigation into MediaLab AI Inc regarding their Imgur platform's handling of children's data. UK organisations must comply with data protection laws, regardless of their operational status in the UK.