Automated decisions: the ICO consulted on new rules after the Data (Use and Access) Act
Summary of Information Commissioner's Office, Opened 31 March 2026, closed 29 May 2026Source read
Following the Data (Use and Access) Act 2025, the ICO drafted updated guidance on automated decision-making and profiling and asked organisations for views until 29 May 2026. The draft covers the rules specific to automated decisions and is aimed at data protection and technical leads who buy or run these systems.
- 31 Mar
- 2026 consultation opened
- 29 May
- 2026 consultation closed
- 5 Feb
- 2026 date the reformed rules took effect
What it means for a small firm
If a tool makes a decision about a person, such as screening, pricing or credit, a human check and a clear explanation are the safe default. We build both into any workflow that touches people.
Original source
ICO consultation on the draft guidance about automated decision-making, including profiling
Information Commissioner's Office
This page is our own summary, written 23 October 2026. The figures belong to the publisher. We checked them against the publisher’s page on the date above.
More on risk and rules
- Department for Science, Innovation and TechnologyThe UK government's AI Opportunities Action Plan: 50 recommendations, and what they mean for small firms
- Information Commissioner's OfficeThe ICO's AI guidance hub: where UK data protection law meets staff using chatbots
- Legal FuturesThe solicitors' regulator on AI: you cannot hand accountability to the tool or the vendor