ICO Guidance on Individual Rights and GDPR

The Information Commissioner's Office (ICO) has issued updated guidance concerning individual rights under the UK GDPR. This guidance is currently under review due to the upcoming Data (Use and Access) Act 2025, with potential for further revisions. The document provides detailed information on privacy notices, subject access requests (SARs), the right to be informed, automated decision-making, and profiling, alongside resources for businesses.

While this guidance is non-binding, it outlines best practices for compliance with data protection regulations. Organisations, particularly large businesses in the public, private, and third sectors, should review this guidance to ensure their data handling practices align with current and anticipated requirements. Small businesses are directed to separate resources. The ICO has indicated that this guidance may be subject to change as legislative developments occur.