ICO outlines its GDPR guidance priorities
The organisation is now entering the second phase of its GDPR implementation process


The Information Commissioner's Office (ICO) has revealed the steps it will take to roll out the EU General Data Protection Regulation (GDPR) in the UK.
Although the UK is set to leave the EU in the future, UK organisations will still need to adhere to the GDPR guidelines from 25 May 2018, or risk being heavily fined for failing to protect their customers' data.
The ICO sai it's just transitioning into phase 2 of its plan to help businesses prepare for the GDPR and will be working with the Article 29 Working Party (WP29) to provide the resources organisations need to ensure their policies are in line with legislation.
It plans to develop an overview of the GDPR as an evolving document that's constantly updated with the latest information about GDPR. Following the latest guidelines published by the WP29, it has made these available to organisations as part of its Overview of the GDPR.
In the future, the ICO plans to develop the document created by the WP29 into its own Guide to the GDPR, which will be the core document for any business. It will not only include the information provided by the WP29, but also additional resources it thinks will be essential for organisations.
"Where we decide it is appropriate to go ahead and develop ICO guidance on issues not currently being considered by the WP29 we will incorporate it into the Overview," the ICO said.
"This guidance may take some content from existing DPA guidance, where it is still relevant. In the event that the WP29 decide to consider a topic we have already worked on we will be in a position to provide input based on the products we have already developed, whether that is guidance or background policy thinking as mentioned below."
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
"The ICO remains committed to helping organisations to improve their practices and prepare for the GDPR," Jo Pedder, interim head of policy delivery at the ICO, wrote in a blog post announcing the release.
"Consistency across the EU is one of the key drivers of the GDPR, and the Article 29 Working Party the body that currently brings together the DP authorities across Europe is leading the way developing guidelines on some of the key aspects of the law," she added.
ICO revises post-Brexit GDPR timeline General Data Protection Regulation (GDPR) Brexit uncertainty hits UK IT budgets

Clare is the founder of Blue Cactus Digital, a digital marketing company that helps ethical and sustainability-focused businesses grow their customer base.
Prior to becoming a marketer, Clare was a journalist, working at a range of mobile device-focused outlets including Know Your Mobile before moving into freelance life.
As a freelance writer, she drew on her expertise in mobility to write features and guides for ITPro, as well as regularly writing news stories on a wide range of topics.
-
The Race Is On for Higher Ed to Adapt: Equity in Hyflex Learning
By ITPro
-
Google faces 'first of its kind' class action for search ads overcharging in UK
News Google faces a "first of its kind" £5 billion lawsuit in the UK over accusations it has a monopoly in digital advertising that allows it to overcharge customers.
By Nicole Kobie
-
UK financial services firms are scrambling to comply with DORA regulations
News Lack of prioritization and tight implementation schedules mean many aren’t compliant
By Emma Woollacott
-
What the US-China chip war means for the tech industry
In-depth With China and the West at loggerheads over semiconductors, how will this conflict reshape the tech supply chain?
By James O'Malley
-
Former TSB CIO fined £81,000 for botched IT migration
News It’s the first penalty imposed on an individual involved in the infamous migration project
By Ross Kelly
-
Microsoft, AWS face CMA probe amid competition concerns
News UK businesses could face higher fees and limited options due to hyperscaler dominance of the cloud market
By Ross Kelly
-
Online Safety Bill: Why is Ofcom being thrown under the bus?
Opinion The UK government has handed Ofcom an impossible mission, with the thinly spread regulator being set up to fail
By Barry Collins
-
Can regulation shape cryptocurrencies into useful business assets?
In-depth Although the likes of Bitcoin may never stabilise, legitimising the crypto market could, in turn, pave the way for more widespread blockchain adoption
By Elliot Mulley-Goodbarne
-
UK gov urged to ease "tremendous" and 'unfair' costs placed on mobile network operators
News Annual licence fees, Huawei removal costs, and social media network usage were all highlighted as detrimental to telco success
By Rory Bathgate
-
Labour plans overhaul of government's 'anti-innovation' approach to tech regulation
News Labour's shadow innovation minister blasts successive governments' "wholly inadequate" and "wrong-headed" approach to regulation
By Keumars Afifi-Sabet