ICO says businesses must advise consumers of data usage
Majority of people are concerned about how their data is used or sold to external companies
The Information Commissioner's Office (ICO) has advised companies to be more transparent when it comes to revealing how they use customers' data.
Information Commissioner Christopher Graham said businesses should provide people with enough information to understand how their data will be used is a "basic principle of data protection."
He said: "While the vast majority of companies are meeting the letter of the law, figures released today show that most people remain concerned about how their information is being shared. This situation is not good for consumers, or for businesses."
The research in question revealed that 85 per cent of people were concerned about how companies use or sell their data, while 77 per cent are worried businesses might not keep personal information confidential.
Graham said: "We are set for a new data protection framework in the next three years, but there are still basic things that organisations can be doing today, not only to comply with the current legislation, but also to prepare for the future regulatory landscape."
The framework, developed by the ICO will include the organisation developing a privacy seal that communicates which companies are committed to good data protection practices and co-operating with wider transparency and Open Data initiatives set by the government.
Additionally, the ICO is preparing for the introduction of new EU data protection frameworks that will coincide with the Ministry of Justice's Triennial Review.
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
"Businesses should take the results of our survey as a prompt to address consumers' concerns and provide clearer information to explain when people's details will be shared and with whom. Getting these basics right today will not only improve consumer trust but also help a business along the road to future compliance," Graham finished.

Clare is the founder of Blue Cactus Digital, a digital marketing company that helps ethical and sustainability-focused businesses grow their customer base.
Prior to becoming a marketer, Clare was a journalist, working at a range of mobile device-focused outlets including Know Your Mobile before moving into freelance life.
As a freelance writer, she drew on her expertise in mobility to write features and guides for ITPro, as well as regularly writing news stories on a wide range of topics.
-
What does modern security success look like for financial services?Sponsored As financial institutions grapple with evolving cyber threats, intensifying regulations, and the limitations of ageing IT infrastructure, the need for a resilient and forward-thinking security strategy has never been greater
-
Yes, legal AI. But what can you actually do with it? Let’s take a look…Sponsored Legal AI is a knowledge multiplier that can accelerate research, sharpen insights, and organize information, provided legal teams have confidence in its transparent and auditable application
-
23andMe 'failed to take basic steps' to safeguard customer dataNews The ICO has strong criticism for the way the genetic testing company responded to a 2023 breach.
-
AI recruitment tools are still a privacy nightmare – here's how the ICO plans to crack down on misuseNews The ICO has issued guidance for recruiters and AI developers after finding that many are mishandling data
-
“You must do better”: Information Commissioner John Edwards calls on firms to beef up support for data breach victimsNews Companies need to treat victims with swift, practical action, according to the ICO
-
LinkedIn backtracks on AI training rules after user backlashNews UK-based LinkedIn users will now get the same protections as those elsewhere in Europe
-
UK's data protection watchdog deepens cooperation with National Crime AgencyNews The two bodies want to improve the support given to organizations experiencing cyber attacks and ransomware recovery
-
ICO slams Electoral Commission over security failuresNews The Electoral Commission has been reprimanded for poor security practices, including a failure to install security updates and weak password policies
-
Disgruntled ex-employees are using ‘weaponized’ data subject access requests to pester firmsNews Some disgruntled staff are using DSARs as a means to pressure former employers into a financial settlement
-
ICO reprimands Coventry school over repeated data protection failuresNews The ICO said the academy trust failed to follow previous guidance, which caused a serious data breach