The UK's data protection watchdog has a new legal identity. On September 30, the Information Commission replaced the Information Commissioner as the statutory regulator. The organisation will be known as the Information Commission's Office and will keep using the ICO initials. The old structure was a "corporation sole," with powers vested in one person; those functions now sit with a corporate body overseen by a board.
The change follows the resignation of John Edwards in June after an independent workplace investigation. Edwards admitted his position had become "untenable" and that his attempts at humour were "inappropriate and caused offense." Paul Arnold, who had taken over Edwards' statutory duties, is interim chief executive. Seven non-executive members have joined the board, and Maggie Carver will act as chair until a permanent appointment is made, expected by spring 2027.
The regulator has also moved its headquarters from Wilmslow to Manchester's Oxford Road, citing access to a diverse talent pool and stronger links with businesses and communities. Day-to-day regulation of data protection and freedom of information remains unchanged, and a new corporate strategy will focus on AI, cyber resilience, children's privacy, and public services. For those dealing with the ICO, the initials stay the same.