ICO guidance on GDPR by the end of the year



The ICO says that in the next six months, it will issue guidance on:

  • An overview of the GDPR
  • Individuals’ rights
  • Contracts
  • Consent
  • Privacy notices code of practice.

The ICO also continues to be active at the European level contributing to the work of the EU Article 29 DP Working Party, which plans to issue guidance by the end of 2016 on the following topics:

  • Identifying an organisation’s main establishment and lead supervisory authority
  • Data portability
  • Data Protection Officers
  • Risky processing and Data Protection Impact Assessments
  • Certification.


France’s DPA is currently consulting on the last four topics in this list.

The ICO guidance will be published on its DP reform website

Iain Bourne, ICO’s Data Protection Policy Delivery Group Manager will speak at Privacy Laws & Business 29th Annual International Conference 4-6 July 2016 on ‘How Data Protection Authorities will interpret recitals and articles in the EU Data Protection Regulation’.

On Tuesday 5 July at the conference, Hannah McCausland, Senior International Policy Officer, Information Commissioner’s Office, will speak in a session titled ‘Expectations of stronger international enforcement via the Global Privacy Enforcement Network’.