On 5 June 2025, the Information Commissioner's Office (ICO) published its strategy on artificial intelligence (AI) and biometrics. The strategy outlines how organisations can use AI and biometric technologies in accordance with data protection law. It sets out the ICO’s expectations, clarifies the application of data protection requirements, and aims to support effective governance and the responsible use of personal data. The strategy states that the ICO plans to introduce a statutory code of practice for AI, address data protection issues in generative AI foundation models, promote fair governance of automated decision-making systems, and ensure that the use of facial recognition technology is fair and proportionate.
Original source