ICO Guidance on Data Protection and Information Rights

The Information Commissioner's Office (ICO) provides guidance for the public on data protection and information rights on its website.

Guidance is available on the following topics:

• making a Subject Access Request to find out if an organisation is using or storing your personal data, and to get a copy of it;
• making a data protection complaint;
• accessing information from a public body by making a Freedom of Information request;
• asking an organisation that holds data about you to correct or delete it;
• your right to object to an organisation using your personal data;
• your right to be informed if an organisation is using your personal data;
• limiting how an organisation uses your personal data;
• obtaining your personal data in a way that is accessible;
• your rights in respect of automated processing of your personal data.

The ICO also provides advice on other issues, such as what to do if you are worried about how an organisation has handled your information, dealing with nuisance calls and spam texts and emails, home CCTV systems, and identity theft.

The guidance is currently under review as a result of the Data (Use and Access) Act 2025 coming into force.