Guidance on AI and data protection

Incorporated Regulator Guidance

ICO guidance on applying UK data protection law to AI systems that process personal data, including fairness, bias, security, and Article 22 considerations.

Why this source matters

Primary regulator view for personal-data FAQs (DPIAs, lawful basis, automated decisions, fairness).

Source details

• ID: ico-ai-data-protection
• Organisation: Information Commissioner’s Office (ICO)
• Type: Regulator Guidance
• Status: Incorporated
• Priority: 1
• URL: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/artificial-intelligence/guidance-on-ai-and-data-protection/
• Audience:
  • data protection officers
  • legal / compliance
  • product and data teams
• Themes:
  • Data-Protection
  • Uk-Gdpr
  • Fairness
  • Automated-Decision-Making
  • Privacy
• Related FAQ themes:
  • lawful-ethical
  • security-tools
• Formats: HTML
• Discovered via: original-backlog
• Discovered on: 2026-08-03

Notes

Primary regulator guidance for personal-data FAQs. Marked as under review by the ICO following the Data (Use and Access) Act — cite current published text and check for updates.

Incorporated articles

• Guidance on AI and data protection
• Accountability and governance implications of AI
• How do we ensure lawfulness in AI?
• How do we ensure fairness in AI?
• How do we ensure transparency in AI?
• Article 22 of the UK GDPR and fairness