Data (Use and Access) Act 2025 (DUAA) Moving the ICO from a corporation sole to a board-run government agency. for Fully materialized within the next few weeks.
Public Sector Action
Summary
Hide ▲
Show ▼
The UK Information Commissioner's Office (ICO) is moving from a single-leader model to a board-run government agency under the Data (Use and Access) Act 2025 (DUAA), a governance shift that will reshape how the privacy regulator manages its expanding remit. The change is intended to support the ICO’s growing workload and bring more diverse expertise into data protection oversight. It also matters because the regulator’s leadership, decision-making, and statutory structure are being updated at the same time.
Related Happenings
UK government FCA Bank of England and **CMORG** Issued a statement urging firms to actively manage frontier AI cyber risks and strengthen defenses for **May 15** and ongoing
Public Sector Action
First: 18.05.2026 12:00
Last: 18.05.2026 12:00
Sources 1
About this happening:
The **UK government**, **FCA**, and **Bank of England** issued a **May 15** statement telling **UK financial services firms** to actively manage **frontier AI** cyber risks, becau...
UK government FCA Bank of England and **CMORG** Issued a statement urging firms to actively manage frontier AI cyber risks and strengthen defenses for **May 15** and ongoing
Public Sector ActionAbout this happening: The **UK government**, **FCA**, and **Bank of England** issued a **May 15** statement telling **UK financial services firms** to actively manage **frontier AI** cyber risks, becau...
UK government Continues parliamentary passage of the Cyber Security and Resilience Bill for Following the King’s Speech on May 13
Public Sector Action
First: 13.05.2026 12:05
Last: 13.05.2026 12:05
Sources 1
About this happening:
The **UK government** is advancing the **Cyber Security and Resilience Bill** through parliament, a move that would raise resilience requirements for **critical infrastructure pro...
UK government Continues parliamentary passage of the Cyber Security and Resilience Bill for Following the King’s Speech on May 13
Public Sector ActionAbout this happening: The **UK government** is advancing the **Cyber Security and Resilience Bill** through parliament, a move that would raise resilience requirements for **critical infrastructure pro...
UK Home Office and National Crime Agency Online Crime Centre launching the Online Crime Centre to crack down on fraud and disrupt cyber-criminal operations for Set to begin work
Public Sector Action
First: 09.03.2026 16:00
Last: 09.03.2026 16:00
Sources 1
About this happening:
The **UK Home Office** and **National Crime Agency** are launching the **Online Crime Centre** to disrupt **cyber-criminal operations** and fraud at source. The unit, set to begin...
UK Home Office and National Crime Agency Online Crime Centre launching the Online Crime Centre to crack down on fraud and disrupt cyber-criminal operations for Set to begin work
Public Sector ActionAbout this happening: The **UK Home Office** and **National Crime Agency** are launching the **Online Crime Centre** to disrupt **cyber-criminal operations** and fraud at source. The unit, set to begin...
GCOT launches voluntary 6G cybersecurity principles
Public Sector Action
First: 04.03.2026 18:30
Last: 04.03.2026 18:30
Sources 1
About this happening:
**GCOT** and seven governments launched voluntary **6G Security and Resilience Principles** in **Barcelona**, giving telecom stakeholders early guidance for secure and resilient *...
GCOT launches voluntary 6G cybersecurity principles
Public Sector ActionAbout this happening: **GCOT** and seven governments launched voluntary **6G Security and Resilience Principles** in **Barcelona**, giving telecom stakeholders early guidance for secure and resilient *...
UK Cyber Profession initiative launch
Public Sector Action
First: 27.02.2026 13:45
Last: 27.02.2026 13:45
Sources 1
About this happening:
**Minister for Digital Government Ian Murray** launched the **government Cyber Profession initiative** to attract and develop cyber talent across the **UK public sector**, strengt...
UK Cyber Profession initiative launch
Public Sector ActionAbout this happening: **Minister for Digital Government Ian Murray** launched the **government Cyber Profession initiative** to attract and develop cyber talent across the **UK public sector**, strengt...
Timeline
-
26.02.2026 16:00 2 articles · 3mo ago
ICO governance shift announced under the DUAA
Legal Policy Action UpdateAt IAPP Intensive London on February 25, 2026, John Edwards announced that the Information Commissioner's Office (ICO) will move from a single-commissioner model under corporation sole to a board-run government agency, with the change to be baked into the Data (Use and Access) Act 2025 (DUAA). The new structure names Paul Arnold as the first CEO, makes Edwards the first chair while board members are appointed by the UK government, and is intended to support the ICO's growing workload, continuity, and more diverse decision-making.
Show sources
- UK's Data Watchdog Gets a Makeover to Match Growing Demands — www.infosecurity-magazine.com — 26.02.2026 16:00
- UK's Data Watchdog Gets a Makeover to Match Growing Demands — www.infosecurity-magazine.com — 26.02.2026 16:00