TGS


Transition from the Information Commissioner’s Office (ICO) to the new Information Commission (Baroness Mackenzie of Sherwood)

I am repeating the following Written Ministerial Statement made today in the other place by my Right Honourable Friend the Parliamentary Under-Secretary of State for the Department for Digital, Culture, Media and Sport, Stephanie Peacock MP.

Today I am pleased to announce that on the 30th of September 2026, the Information Commission will take over all the functions and responsibilities of the Information Commissioner’s Office (ICO) to become the UK’s independent data protection regulator.

This marks an important milestone in the modernisation of the UK’s data protection regulator. In an increasingly data-driven economy, the regulator sits at the heart of the UK's data and digital landscape, playing a vital role in maintaining public trust, upholding high standards of data protection, and ensuring personal data is used responsibly to deliver economic and social benefits.

The transition to the Information Commission is designed to ensure that the regulator is equipped to meet future challenges and seize opportunities. The ICO currently operates as a corporation sole, with powers and responsibilities vested in one individual, the Information Commissioner. From 30 September, those functions will transfer to the Information Commission, a body corporate with non-executive and executive members, and with collective responsibility for decision making.

This change has purpose and value. The new governance model will bring together a broader range of skills, experience and perspectives at the top of the organisation, strengthening accountability, resilience and decision making, and ensuring that the regulator is well placed to navigate rapid technological change, increasingly complex data-driven services, and evolving public expectations around transparency and accountability.

The Data (Use and Access) Act 2025 (Commencement No. 9 and Transitional and Saving Provisions) Regulations 2026

To give effect to the transition, the Government has made regulations commencing, on 30th September, the sections of the Data (Use and Access) Act 2025 that abolish the Information Commissioner’s Office and transfer all its regulatory and other functions to the new Information Commission. In July, the Government announced the appointment of seven new non-executive members to the Information Commission: Laurie Benson, Maggie Carver, Stephen Cohen, Sukhvinder Kaur-Stubbs, Gary Kildare, Hilary Newiss and Scott McPherson. Together with the interim Chief Executive, Paul Arnold, they will assume their roles on 30 September and lead the organisation into its next chapter.

The new board brings expertise from across business, technology, regulation, governance and public service. It will help shape the Commission's strategic direction, support delivery of its ambitious agenda, and ensure the organisation remains focused on serving in the public interest.

Above all, this transition represents a new beginning for the regulator. The Information Commission must be an organisation that people trust, and trust starts with strong leadership, clear accountability and the right culture. The new governance structure provides strong foundations for an organisation that is open, accountable and resilient, capable of regulating with rigour and independence while building public confidence in the responsible use of data for years to come.

I congratulate all the newly appointed members on their roles. The Government has also launched a public appointments campaign to recruit a new Chair of the Information Commission, who will play a vital role in shaping its future direction and ensuring its success.

https://www.theyworkforyou.com/wms/?id=2026-09-14.hlws347.0

seen at 09:51, 15 September in Written Ministerial Statements.