ICO Enforcement & Investigatory Powers for Businesses

Introduction

The Data (Use and Access) Act 2025 makes a series of important changes to the role of the ICO including an update to and expansion of their investigatory and enforcement powers. Also, with effect from 19th June 2026, all controllers are required to have in place a data protection complaints procedure which data subjects need to use before they can complain to the ICO.

This webinar summarises all the relevant changes and also looks at recent examples of enforcement action.

What You Will Learn

This webinar will cover the following:

• Changes to the role of the ICO
  • Reformed governance structure
  • Change of name to ‘Information Commission’
  • Updated and expanded investigatory powers
  • Equalisation of fining powers
  • Greater emphasis on proactive compliance and early engagement
• Examples of enforcement action
  • Personal data breaches
  • Lack of consent
  • Failure to carry out data protection impact assessments
  • Direct marketing breaches
• New complaints procedure for controllers
  • Ways in which complaints can be made
  • Content of complaints procedure
  • Acknowledgement of complaints
  • Investigation of complaints
  • Provision of outcomes to the data subject
  • Records to be kept