UK ICO AI and data protection guidance — snapshot 2026-05-24
What you'll find here: the snapshot text captured on 2026-05-24, plus anchored sections for every article this site cites from this source. Each anchored heading is the target of a View source → link from a stage explainer.
Change summary: Scheduled UK ICO AI-guidance capture.
Open the official source on ico.org.uk ↗
Artificial intelligence
- Due to the Data (Use and Access) Act coming into law on 19 June 2025, this guidance is under review and may be subject to change. The Plans for new and updated guidance page will tell you about which guidance will be updated and when this will happen.
Due to the Data (Use and Access) Act coming into law on 19 June 2025, this guidance is under review and may be subject to change. The Plans for new and updated guidance page will tell you about which guidance will be updated and when this will happen.
The guidance on this page is suitable for businesses in the public, private and third sectors.
Detailed guidance
Artificial intelligence (AI) and data protection
A detailed overview of how to apply the principles of the UK GDPR to the use of information in AI systems.
Explaining decisions made with AI
Practical advice to help explain the processes, services and decisions delivered or assisted by AI to the individuals affected.
Biometric data guidance: Biometric recognition
What is biometric data, what is meant by “biometric recognition”, demonstrating compliance with data protection obligations and processing biometric data fairly and lawfully.
Resources
AI and data protection risk toolkit
Practical support for organisations assessing the risks to individual rights and freedoms caused by their own AI systems.
Data analytics toolkit
Create tailored advice for your project to help you recognise some of the central risks to the rights and freedoms of individuals created by the use of data analytics.
Cited articles
These are the articles, clauses, or sections of UK ICO AI and data protection guidance that this site links to from its stage explainers. Each one has a stable anchor you can deep-link to.
- Breach-Reporting
- Tracking metadata only — the substantive text is on the official source. Open UK ICO AI and data protection guidance ↗
- DPIA-AI
- Tracking metadata only — the substantive text is on the official source. Open UK ICO AI and data protection guidance ↗
← Back to What's new · ← Back to UK ICO AI and data protection guidance