Ethical Hacking News
The UK's data protection watchdog, once known as the Information Commissioner's Office (ICO), has undergone a significant overhaul, with a new board of directors and headquarters in Manchester. The Information Commission, which replaced the ICO, has retained the same regulatory powers but now has a corporate structure with executive and non-executive members. This change aims to modernize the watchdog's governance without altering its existing functions.
The Information Commission, formerly ICO, now operates under a corporate structure, marking a new era for data protection in the UK. The Data (Use and Access) Act 2025 led to the formation of the Information Commission, with Paul Arnold as interim chief executive. The regulator has undergone a rebranding, relocating its headquarters to Manchester, and appointing a new chair and deputy chair. The Information Commission retains responsibility for data protection and freedom of information regulation, along with the ICO's existing powers and services. The regulator plans to develop a new corporate strategy, focusing on areas such as AI, cyber resilience, and children's privacy. The watchdog faces criticism over its handling of certain issues, including the lack of confidence in basic cyber skills among UK businesses.
The United Kingdom's data protection landscape has undergone a significant transformation, with the Information Commission, formerly known as the Information Commissioner's Office (ICO), assuming the reins. This change marks a new era for data protection in the UK, with the watchdog now operating under a corporate structure.
The Information Commission's formation was the result of the Data (Use and Access) Act 2025, which received Royal Assent in June 2025. This legislation aimed to modernize the watchdog's governance without altering its existing regulatory functions. The new structure, which was effective as of September 30, 2026, transfers the statutory powers and responsibilities of the former Information Commissioner to a corporate body overseen by executive and non-executive board members.
Paul Arnold, who assumed the statutory responsibilities of the former Information Commissioner, John Edwards, is currently serving as interim chief executive of the Information Commission. Edwards had stepped down from his position in April 2026, following an independent workplace investigation into his conduct, which concluded that his actions had become "untenable" and that attempts at humor had been "inappropriate and caused offense."
The transition to the new structure was preceded by a period of uncertainty, with the ICO facing criticism over its handling of certain issues. However, the Information Commission's new board of directors is composed of seven non-executive members, including Maggie Carver, who has been appointed as deputy chair. The regulator has also appointed a new chair, whose identity is currently being sought by the government, which expects to be finalized by spring 2027.
The Information Commission's headquarters has also undergone a significant change, with the regulator relocating to Manchester, specifically to Oxford Road. This move is expected to provide the watchdog with access to a "diverse talent pool" and strengthen its links with businesses and communities across the UK.
Despite the changes, the Information Commission retains responsibility for data protection and freedom of information regulation, along with the ICO's existing powers, guidance, and public services. The regulator has also announced plans to develop a new corporate strategy, which will focus on areas such as AI, cyber resilience, children's privacy, and public services.
The watchdog has also faced criticism over its handling of certain issues, including the lack of confidence in basic cyber skills among UK businesses. A recent survey found that over half of UK businesses lack confidence in their cyber skills, highlighting the need for improved training and education in this area.
In addition to its regulatory duties, the Information Commission is also involved in various initiatives aimed at promoting data protection and cybersecurity awareness. These initiatives include the regulation of social media platforms, the development of AI-powered tools to detect and prevent cyber threats, and the promotion of cybersecurity education and awareness programs.
The Information Commission's new structure and leadership are expected to bring a fresh perspective to the watchdog's work, with a focus on modernizing its governance and improving its effectiveness in regulating data protection and freedom of information in the UK. As the regulator continues to navigate this new era, it remains to be seen how its new structure and leadership will impact the UK's data protection landscape.
Related Information:
https://www.ethicalhackingnews.com/articles/The-Information-Commission-Takes-the-Reins-A-New-Era-for-UK-Data-Protection-ehn.shtml
https://www.theregister.com/security/2026/10/01/uk-privacy-watchdog-starts-over-with-new-board-and-manchester-hq/5300439
Published: Thu Oct 1 07:54:39 2026 by llama3.2 3B Q4_K_M
