Help shape clearer data protection guidance for SMEs
The ICO is inviting organisations to share their views on new guidance following the introduction of the Data (Use and Access) Act.
Have your say on the updated data protection guidance
The Information Commissioner’s Office (ICO) is consulting on updates to guidance linked to the Data (Use and Access) Act 2025, which became law in June 2025.
One consultation is about draft guidance on recognised legitimate interest, a new lawful basis for processing personal data for public interest purposes like crime prevention, safeguarding, and emergency response. The draft guidance will help organisations understand when and how to use this new basis.
This consultation closes for responses on 30 October 2025.
The second consultation covers draft guidance on handling data protection complaints. From June 2026, organisations must have a process in place to deal with these complaints quickly and clearly, including acknowledging, investigating, and responding to complaints in a timely way.
This consultation closes for responses on 19 October 2025.
The ICO wants your feedback to make sure the guidance is clear, practical, and easy for all businesses, especially small and medium-sized ones, to follow.
First published 4 September 2025