Paul Arnold appointed as CEO of the future Information Commission

Paul Arnold MBE is the first CEO of the future Information Commission which is created under the Data (Use and Access) Act 2025 (DUAA).

“The new structure will have a Board which will be the highest level of leadership and will be made up of the Chair (John Edwards, the Information Commissioner), a Chief Executive Officer (CEO) and non-executive directors (NEDs). The new board will then be the Information Commission. This new structure will make us more resilient as a regulator, increasing the diversity of our strategic leadership,” the ICO says.

Arnold will now oversee the transition to the new Information Commission.

The ICO says: “Recognising that a permanent Chief Executive cannot be appointed until the Information Commission board is in place, Paul's appointment is for a maximum 2- year interim period until a permanent recruitment process is then undertaken.”

Arnold said:

“I am extremely proud to be appointed as the first Chief Executive for the new Information Commission and have every confidence that we will make a successful transition to our new governance structure. I'm also excited to develop and lead the organisation to deliver the first strategy for the Information Commission. I believe we have a fantastic opportunity to demonstrate how effectively protecting and safeguarding people also enables responsible businesses and organisations to innovate and grow.”

The Department for Science, Innovation and Technology (DSIT) is currently recruiting non-executive directors for the Information Commission Board.

DUAA received Royal Assent on 19 June. The ICO and DSIT are speaking about DUAA at the Privacy Laws & Business 38th International Conference in Cambridge on 9 July.