ICO action against the Metropolitan Police: why training and assurance must be demonstrable
An ICO enforcement notice and reprimand issued to the Metropolitan Police Service (MPS) offer a practical reminder for any organisation…
Data Protection Authorities
Understand how the ICO and other data protection authorities interpret, investigate and enforce privacy law. These articles translate regulatory decisions, guidance and policy changes into practical implications for organisations, compliance teams and senior leaders. Begin with our guide to the UK Data (Use and Access) Act 2025, then explore recent ICO actions and regulatory developments below. For European cases, visit EU data protection enforcement.
ICO investigation leads to sentence for unlawful council-record access: what employers should do
A new ICO case is a useful reminder that personal-data risk is not limited to phishing, lost devices or external…
London Clinic ICO caution: what staff medical-record misuse teaches employers
The ICO has issued a formal caution to a former healthcare professional after concluding a criminal investigation linked to medical…
UK Government Advances Facial Recognition Rollout — What This Means for Privacy Compliance
UK live facial recognition expansion raises data protection concerns. What managers should watch as police biometrics use widens in 2026.
Reddit Fined £14.47m by ICO for Children’s Privacy Failures — 2026
Reddit fined £14.47m by ICO for children's privacy failures under GDPR and DPA 2018. What this means for your organisation.
EDPB Launches 2026 Coordinated GDPR Enforcement on Transparency – What Teams Need to Prepare
The EDPB's 2026 coordinated enforcement action targets GDPR transparency. Learn what HR, marketing, and compliance teams should check now.
EU AI Act Prohibited Systems Ban Takes Effect — What HR and Compliance Teams Need to Know
The EU AI Act's prohibited systems ban is now in force. Here's what HR and compliance teams need to know…
UK Data Use and Access Act: What Changes on 5 February 2026 and How to Prepare
The UK’s Data (Use and Access) Act 2025 (DUAA) comes into force on 5 February 2026. Before you worry about…
ICO’s Public Sector Approach: Why the Post Office Received a Reprimand Instead of a £1m Fine
In December 2025, the ICO concluded its investigation into a data breach that exposed personal information belonging to 502 victims…
ICO fines Care Home Director for Deleting Data: The Warning Every Manager Should Read
On 3 September 2025, Jason Blake, 56, director of Bridlington Lodge Care Home in Yorkshire, was ordered to pay £1,100…
How the Data Protection and Digital Information Bill could change marketing in the UK
The UK government recently published the outcome of their consultation on the Data Reform Bill (now known as the Data…