ICO Guidance on Data Protection and Information Rights

The Information Commissioner's Office (ICO) provides guidance for the public on data protection and information rights on its website.

Guidance is available on the following topics:

  • making a Subject Access Request to find out if an organisation is using or storing your personal data, and to get a copy of it;
  • making a data protection complaint;
  • accessing information from a public body by making a Freedom of Information request;
  • asking an organisation that holds data about you to correct or delete it;
  • your right to object to an organisation using your personal data;
  • your right to be informed if an organisation is using your personal data;
  • limiting how an organisation uses your personal data;
  • obtaining your personal data in a way that is accessible;
  • your rights in respect of automated processing of your personal data.

The ICO also provides advice on other issues, such as what to do if you are worried about how an organisation has handled your information, dealing with nuisance calls and spam texts and emails, home CCTV systems, and identity theft.

The guidance is currently under review as a result of the Data (Use and Access) Act 2025 coming into force.

The contents of this article are intended for general information purposes only and shall not be deemed to be, or constitute legal advice. We cannot accept responsibility for any loss as a result of acts or omissions taken in respect of this article.