United Kingdom: Information Commissioner’s Office closes consultation on draft guidance for consumer Internet of Things products and services

On 7 September 2025, the Information Commissioner’s Office (ICO) closes its consultation on draft guidance for consumer Internet of Things (IoT) products and services, including an associated impact assessment. The consultation seeks stakeholder feedback to refine the final guidance, ensuring clarity on the application of data protection law and the Privacy and Electronic Communications Regulations 2003 (PECR) to IoT-related personal data processing. The guidance targets manufacturers, software developers, cloud providers, and other entities involved in IoT data processing, emphasising compliance roles for data protection officers and technology specialists.