This update concerns data protection governance and administrative restructuring of the UK Information Commissioner's office, with no connection to financial services products or services.
No secondary financial services tag applies; this is purely administrative and procedural legislation unrelated to banking, lending, investments, or digital assets.
Specialism
The update establishes the Information Commission and transfers data protection regulatory functions from the Information Commissioner, which is a governance and institutional restructuring of the UK's data protection authority.
Governance is the mandatory parent tag for Data Protection under the inheritance rules, though this update is primarily administrative/institutional rather than substantive regulatory change.
2026-03-31 12:00:59·adavies@vixio.com
Meta Id
3020533
GUID
31c151d8a3d9d3dccd8d699c68fcc7da
Pipeline Progress
🔄 Pipeline Journey
⏱
16s
total
✓
Queued12:00:42
+0s
✓
Metadata12:00:42
+0s
✓
S3 Content12:00:42
+5s
✓
Extracted12:00:47
+5s
✓
LLM Gen12:00:52
+6s
✓
Stored12:00:58
TITLE: United Kingdom Updates Data Protection Legislation to Establish Information Commission and Transfer Commissioner Functions
BODY:
On 26 March 2026, the United Kingdom made the Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 (Statutory Instrument 2026 No. 386), which implements consequential amendments arising from the Data (Use and Access) Act 2025.
The regulations establish the Information Commission as a body corporate and abolish the office of the Information Commissioner, transferring all functions of the Information Commissioner to the newly created Information Commission. The amendments affect numerous pieces of legislation across the United Kingdom, including primary legislation, subordinate legislation, and assimilated direct legislation. Key legislative instruments amended include the Freedom of Information Act 2000, the Data Protection Act 2018, the UK General Data Protection Regulation (UK GDPR), and various Scottish, Welsh, and Northern Ireland legislation. The regulations replace all references to "Information Commissioner" with "Information Commission" throughout affected legislation and update related terminology, including pronouns and possessive forms, to reflect the Commission's status as a body corporate rather than an individual office.
The regulations come into force when section 119 (transfer of functions to the Information Commission) of the Data (Use and Access) Act 2025 is fully brought into force. Certain provisions have staggered commencement dates linked to the coming into force of specific sections of the 2025 Act, including sections 103 (complaints by data subjects) and 160(5)(d) of the Online Safety Act 2023. Transitional provisions maintain pension arrangements for the person holding the office of Information Commissioner who becomes the first chair of the Information Commission.