ICO approves first UK GDPR code of conduct for private investigators

Article summary

The Information Commissioner's Office (ICO) has approved and published the first sector-owned code of conduct under the United Kingdom General Data Protection Regulation, Assimilated Regulation (EU) 2016/679 (UK GDPR), developed by the Association of British Investigators Limited for the private investigations sector. This UK GDPR Code of Conduct for Investigative and Litigation Support Services (the Code) addresses key data protection challenges faced by private investigators, including guidance on roles and responsibilities when acting as data controllers, joint controllers or processors, lawful bases for invisible processing such as covert surveillance, and examples of lawful tracing methods. The Code aims to ensure compliance with UK GDPR requirements while balancing investigative needs with privacy rights. Security Systems and Alarms Inspection Board has been appointed as the monitoring body, pending ICO approval, to independently assess and report on member compliance with the Code.