ICO becomes Information Commission
What the ICO's transformation means for your business
On 30 September 2026, the Information Commissioner's Office changed its legal structure and became the Information Commission. The organisation will still be known as the ICO, which now stands for the Information Commission's Office.
What has changed
The change is part of the Data (Use and Access) Act 2025. Previously, the regulator was led by the Information Commissioner as a single officeholder. It is now overseen by an Information Commission Board.
The ICO says its main responsibilities have not changed. It will continue to regulate data protection law, provide guidance, advice and services to organisations, and deal with complaints.
Businesses do not need to take immediate action because of this change alone. However, those that use personal information should:
- continue to follow UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018
- use ICO guidance when reviewing policies, privacy information and data-handling procedures
- update references to the 'Information Commissioner' in any internal documents
- keep up to date with ICO guidance on changes introduced by the Data (Use and Access) Act 2025
Existing references to the Information Commissioner in legislation and ongoing regulatory work continue to apply to the new Information Commission.
New powers under data law
The Data (Use and Access) Act 2025 also gives the ICO additional powers to support its investigations. These include powers to require witnesses to attend interviews and to ask an organisation to obtain a report from an approved person on a specified issue. The Act also increases the maximum fines for certain serious breaches of the Privacy and Electronic Communications Regulations (PECR), bringing them into line with UK GDPR-level penalties.
The ICO has confirmed that all data protection provisions in the Act are now in force. Businesses should ensure they have clear processes for handling personal data, responding to complaints and cooperating with the regulator where required.
Find out more about the ICO's transition to the Information Commission.
First published 2 October 2026