Data protection authority

Information Commissioner's Office

ICO

United Kingdom

The UK's independent regulator for data protection and information rights; enforces UK GDPR, DPA 2018 and PECR.

Jurisdiction (head office): United Kingdom
Scope covered: United Kingdom (UK GDPR, DPA 2018, PECR, FOIA, EIR)
Type: Data protection authority
GRC discipline: Data protection & privacy
Statutory / official basis: Data Protection Act 2018; UK GDPR
Status: Current — verified June 2026

DUAA 2025 restructures the ICO into an 'Information Commission' — phased commencement under way (s.103/s.164A commence 19 Jun 2026); monitor transition.

Visit official site ↗Back to directory Flag a correction

This is a curated reference entry maintained by VulaPri, verified against official sources. Spotted something out of date? Tell us →