Artificial Intelligence: ICO set outs its plan for safe AI innovation

The UK’s data protection regulator, the ICO, has responded to a joint request from the Technology Secretary and Business Secretary to lay out a plan for enabling safe AI-powered innovation.
The ICO’s approach centers on two main objectives: ensuring public understanding and control over personal data processed by AI systems; and clarifying data protection law requirements for organizations deploying AI systems, including agentic AI.
The ICO will develop a statutory AI and automated decision-making code of practice to set binding expectations for organizations using AI tools.
Dedicated guidance on agentic AI systems and UK GDPR compliance is planned, along with a transparency resource for SMEs and public bodies to carry out data protection due diligence when procuring AI tools.
The ICO is offering a streamlined regulatory sandbox and innovation services to support the safe deployment of AI.
The ICO aims to integrate compliance expectations from the outset rather than hinder AI adoption, signaling clear direction for in-house legal teams.
For further discussion on the impact of current or future regulations on AI usage, consultancy and insights are available through the firm’s Technology team and their blog/newsletter.