ico.org.uk

ico.org.uk is the official website of the Information Commissioner's Office, the UK's independent regulator for information rights. It is relevant to you if you are in the UK and want to understand your data protection or freedom of information rights as an individual, or if you run an organisation that handles personal data and need to know what the law requires of you. The site is a regulator's information hub, not a commercial service: its homepage presents two main entry points, "advice for individuals" and "guidance for organisations."

What the ICO is

The ICO is an independent UK regulator responsible for upholding information rights. Its remit covers:

• Data protection — the rules governing how personal data is collected, used, stored and shared.
• Freedom of information — the public's right to access information held by public bodies.
• Related regimes — such as privacy and electronic communications rules covering marketing calls, texts and emails.

Because it is a regulator rather than a government department or a commercial company, its website exists to explain the rules, publish guidance, and provide routes for complaints and enquiries.

What you can do on the site

The homepage splits its audience in two, which is the quickest way to decide whether the site is useful to you.

If you are an individual with a question about how your personal data is being used, or you want to know what a public authority must disclose, the individual-facing advice is the relevant section. If you handle personal data on behalf of a business, charity or public body, the organisation-facing guidance is where you should start.

How to tell whether it applies to you

The ICO's remit is UK-focused. The site is most directly relevant if:

• You are dealing with an organisation operating in the UK and want to know your rights over your personal data.
• You want to make a freedom of information request to a UK public body, or understand how such requests work.
• You are responsible for data protection compliance in a UK organisation.

If your situation falls outside UK information rights law, the site's guidance may not match the rules that apply to you, and you would need the equivalent regulator for your jurisdiction.

A practical starting point

If you have arrived at ico.org.uk without knowing which section you need, use the homepage split as your first decision: choose the individual route if you are asking about your own rights or want to complain, and the organisation route if you are asking what you must do. From there, the site's advice and guidance pages are the substantive content, with the homepage acting mainly as a directory into those two audiences.

The ICO (Information Commissioner's Office) website provides a dedicated advice section for individuals, covering personal data rights, how to raise concerns, and how to complain about organisations. If you are in the UK and have a question about how your personal information is being used, or you want to know what rights you have over your data, the ICO's individual-facing pages are the starting point.

What the individual advice section covers

The ICO's home page splits its guidance into two audiences: advice for individuals and guidance for organisations. The individual side is written for people who are not data protection professionals — it explains your rights in plain terms and points you toward the right next step.

Typical topics on the individual side include:

• Your data protection rights — what you are entitled to ask an organisation for, such as access to your data, correction of inaccurate data, and erasure in certain circumstances.
• How to make a complaint — the process for raising a concern with an organisation first, and what to do if you are not satisfied with the response.
• Reporting concerns to the ICO — when and how you can bring a matter to the ICO if you believe your data has been mishandled.
• Practical situations — guidance framed around real scenarios, such as data used for marketing, in the workplace, or by public bodies.

How to find the advice that fits your situation

The ICO structures its individual advice around the problem you are trying to solve rather than around legal terminology. A practical way to use the site:

1. Start from the individual advice hub — the home page links directly to "advice for individuals," which is the entry point for non-organisational queries.
2. Identify your situation — decide whether you want to understand a right, challenge how an organisation handled your data, or make a complaint.
3. Follow the matching guidance — each topic page explains what you can do, the steps involved, and what outcome to expect.
4. Escalate if needed — if the organisation does not resolve your concern, the guidance explains how to take it further with the ICO.

When the ICO is the right place to look

The ICO's individual advice is most useful when:

• You are based in the UK and your question concerns UK data protection law.
• You want to know what you can ask an organisation to do with your personal data.
• You have already raised an issue with an organisation and want to understand your options.
• You want a plain-language explanation rather than legal text.

It is less suited to organisation-side compliance questions — those are covered separately under the ICO's guidance for organisations.

Key takeaway

The ICO website gives individuals a structured route from "what are my rights?" to "how do I complain?" — with the individual advice section acting as the hub. If your question is about your own personal data and you are in the UK, that section is where to begin.

The ICO website provides a dedicated guidance section for organisations, accessible from its home page. The site separates its content into two main audiences — advice for individuals and guidance for organisations — so an organisation looking for compliance help should start in the organisations section rather than the individuals section. The guidance covers the legal responsibilities organisations have under UK information rights law, including data protection compliance and freedom of information obligations, and points them toward the specific guides and resources that apply to their situation.

How the site is organised

The ICO (Information Commissioner's Office) home page presents its content through two entry points:

• Advice for individuals — for people concerned about how their own data is being used.
• Guidance for organisations — for businesses, public bodies, charities and other organisations that handle personal data or are subject to information rights law.

If you are acting on behalf of an organisation, the second path is the relevant one. Choosing the individuals path will surface content written for data subjects, not for compliance teams.

What the organisation guidance covers

Based on the site's own description, the guidance for organisations spans the main areas of information rights regulation:

The guidance is written to help an organisation understand what it is legally required to do and how to put that into practice, rather than simply stating the law in abstract terms.

How to use it

1. Start at the ICO home page and select the guidance for organisations option.
2. Identify which regime applies to you — for example, whether you are a data controller processing personal data, a public authority with freedom of information duties, or both.
3. Navigate to the guide that matches your role or sector.
4. Use the guidance to check your current practices against the stated requirements and to find the resources the ICO recommends.

The expected result is that you can locate the specific guidance relevant to your organisation's obligations instead of reading general material aimed at the public.

Points to keep in mind

• The site distinguishes clearly between individual-facing and organisation-facing content; using the wrong section is the most common way to end up with unhelpful results.
• The guidance describes legal responsibilities and best practice, but the site's home page excerpt does not indicate that it provides tailored legal advice for a specific organisation's circumstances.
• Because the ICO is the UK's information rights regulator, the guidance reflects UK law; organisations operating elsewhere should check whether a different regulator's guidance applies to them.

For an organisation, the ICO site functions as a starting point for understanding and meeting its information rights obligations, with the organisations guidance section as the correct entry point.

The ICO website splits its content by audience: individuals and organisations. On the homepage, you'll see two distinct entry points — "See all our advice for individuals" and "See all our guidance for organisations." Pick the one that matches your role, and you'll land in a section written for your situation rather than having to filter through content meant for the other group.

Start with the homepage split

The homepage is deliberately simple. Its main job is to route you to the right audience section. The two links are:

• Advice for individuals — for people dealing with their own personal data, making complaints, or trying to understand their rights.
• Guidance for organisations — for businesses, public bodies, and other data controllers trying to comply with data protection law.

If you're unsure which applies to you, ask one question: are you asking about your own data, or about data you handle on behalf of others? The first is individual advice; the second is organisational guidance.

If you're an individual

Follow the "advice for individuals" link. This section is written for people who are not data protection professionals — it covers your rights and what to do when something goes wrong.

Use it when you want to:

• Understand your rights over your personal data
• Find out how to make a complaint about how an organisation handled your data
• Get practical steps for a specific situation (for example, a company refusing to delete your data)

The language here assumes no legal or technical background, so it's the right starting point before you consider contacting the ICO directly.

If you're an organisation

Follow the "guidance for organisations" link. This section is aimed at data controllers and processors who need to meet their legal obligations.

Use it when you want to:

• Understand what the law requires of your organisation
• Find guidance on specific compliance topics
• Check how to handle data requests, breaches, or other operational duties

This content is more detailed and assumes you're acting in an official capacity, so it's the correct route for compliance work rather than personal queries.

Choosing the right section at a glance

Common sticking points

• Picking the wrong section. If the guidance feels too technical or too basic, you've likely landed in the other audience's content. Go back to the homepage and take the other link.
• Assuming one section covers everything. The split is by who you are, not by topic. A topic like data breaches appears in both, but framed differently depending on your role.
• Skipping the homepage. The two audience links are the fastest route in. Going straight to a search can surface content meant for the other group.

Once you're in the correct section, the content is organised around your role, so you can move to the specific topic you need without second-guessing whether it applies to you.