UK ICO and Ofcom Joint Statement on Regulation of Online Services
Time 2 Minute Read

On May 1, 2024, the UK Information Commissioner’s Office (“ICO”) and the UK regulator for communications and online safety, Ofcom, issued a joint statement regarding their collaboration on the regulation of online services where online safety and data protection intersect. This statement builds on the joint statement published in 2022. The latest statement outlines several areas of collaboration between the ICO and Ofcom.

In particular, the ICO and Ofcom will:

  • Identify and continuously monitor the emergence of issues that are of common interest because of their “thematic and substantive relevance” to online safety and data protection – these are referred to as “Collaboration Themes,” and include default settings and geolocation settings for child users, as well as age assurance;
  • Pursue “more effective joint regulatory collaboration” by identifying companies or services that are subject to both the online safety and data protection regimes, and are of current regulatory interest to both the ICO and Ofcom; and
  • Disclosure of information between themselves, including in relation to particular companies or services.

The ICO and Ofcom also will periodically evaluate the effectiveness of the methods outlined in the joint statement to identify any opportunities for improvement. 

You May Also Be Interested In

Time 2 Minute Read

On March 25, 2026, the UK Information Commissioner’s Office and the UK Office of Communications released a joint statement addressing the intersection of online safety and data protection in relation to age assurance.

Time 2 Minute Read

On March 23, 2026, the UK Information Commissioner's Office released new guidance clarifying the use of the new recognized legitimate interest lawful basis for processing personal information under UK data protection law.

Time 3 Minute Read

On February 27, 2026, the UK ICO announced a public consultation on proposed updates to its guidance concerning research, archiving and statistics to reflect the changes introduced by the Data (Use and Access) Act 2025.

Time 2 Minute Read

On February 24, 2026, the UK ICO announced that it had fined Reddit, Inc. £14.47 million following an investigation into the company’s handling of children’s personal information.

Search

Subscribe Arrow

Recent Posts

Categories

Tags

Archives

Jump to Page