ICO launches consultation on enforcement procedural guidance
The Information Commissioner’s Office (ICO) has launched a 12-week consultation on draft enforcement procedural guidance, which aims to increase transparency arouns the ICO's investigation and enforcement processes under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, including new powers under the Data (Use and Access) Act 2025 to require answers to questions and organisational reports. The guidance specifically explains when and how the ICO opens investigations, uses its information gathering powers, how enforcement decisions are made and how settlement with reduced fines may be appropriate. The consultation closes on 23 January 2026.