United Kingdom: Information Commissioner’s Office closes consultation on Data Protection Enforcement Procedural Guidance

On 23 January 2026, the Information Commissioner’s Office (ICO) closes the public consultation, which had been open since 31 October 2025, on the Draft Data Protection Enforcement Procedural Guidance under the Data Protection Act 2018 (DPA) and the UK General Data Protection Regulation (GDPR). The consultation covered the same statutory guidance on the use of investigatory and enforcement powers, including opening investigations, application of information notices, assessment notices, interview notices, and powers of entry and inspection, and the regulatory actions of warnings, reprimands, enforcement notices, and penalty notices. The draft guidance detailed factors such as harm, proportionality, prioritisation, and cooperation, and cited Articles 57–58 UK GDPR and Part 6 DPA 2018. It further addressed publication of enforcement outcomes, settlement mechanisms, and Tribunal appeal rights.