The Information Commissioners Office (ICO) is the overarching enforcing authority on information security and data protection in the United Kingdom. The ICO upholds information rights in the public interest, promoting openness by public bodies and data privacy for individuals within the context of UK-based organisations. To accomplish this goal, the ICO carries out a number of tasks, such as:
As an organisation, you will need to assess the data that you are holding and take appropriate actions to ensure that it is controlled and secure. You will need to implement controls to manage its security and respond to legitimate requests or breaches.