Members only
The Information Commissioner’s Office is reminding SMEs that consultations on updates to ICO guidance following the introduction of the Data (Use and Access) Act 2025 (DUAA) close shortly. To have your say on draft guidance, please reply to the consultations below:
Survey: Guidance for organisations handling data protection complaints
By June 2026, organisations must have a process in place for handling data protection complaints. A complaint can come from anyone who’s unhappy with how an organisation has handled their personal information. ICO's guidance sets out the new requirements and informs organisations of what they must, should and could do to comply. It includes tips and practical advice for each stage of the process.
Please give ICO your views on draft guidance by 19 October 2025: ICO consultation on draft complaints guidance for organisations.
Survey: Recognised legitimate interest guidance consultation
Recognised legitimate interest is a new lawful basis introduced into the UK GDPR by DUAA, and is separate from the existing legitimate interests lawful basis. It can be used for purposes such as crime prevention, public security, safeguarding, emergencies, or for sharing personal information to help other organisations perform their public tasks. ICO's new guidance is designed to give organisations more confidence to use personal information for these specific purposes in the public interest.
Please give ICO your views on draft guidance by 30 October 2025: ICO consultation on draft recognised legitimate interest guidance.
