REGULATORY WATCH BRIEF Low 32 🧭 Regulatory Guidance published

UK ICO publishes report on data protection challenges in AI and launches Agentic AI Project

The ICO’s report signals heightened regulatory focus on AI data protection and introduces a new initiative to guide AI developers.

ImpactLow 32
Type🧭 Regulatory Guidance
Statuspublished enacted, check the effective date
JurisdictionEU-GB

What happened

The Information Commissioner’s Office released a report after scrutinising ten of the world’s largest artificial intelligence foundation model developers operating in the UK. The report highlights data protection challenges associated with AI. The ICO also announced the launch of its Agentic AI Project to further explore AI governance.

Why it matters for trust and compliance

  • Its status is published. It is enacted but may not be in force yet. Check the effective date before planning around it.
  • The ICO’s report signals heightened regulatory focus on AI data protection and introduces a new initiative to guide AI developers.

Who is affected

technology controller processor developer deployer platform

Recommended actions

  1. Check that privacy notices describe the practices this addresses.
  2. Inventory AI or automated decision systems in scope and their assessments.

Regulations library

Every US state privacy law, on one map

24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.

  • In force
  • Coming into force
  • Sector laws
AK ME VT NH WA ID MT ND MN IL WI MI NY RI MA OR NV WY SD IA IN OH PA NJ CT CA UT CO NE MO KY WV VA MD DE AZ NM KS AR TN NC SC DC OK LA MS AL GA HI TX FL