The IDPO exists to protect personal data, support the public’s right to access information and ensure that organisations and public authorities use information lawfully and fairly.
What we do
- We monitor and enforce compliance with the Freedom of Information and Data Protection Act 2026
- We investigate complaints from individuals about how their personal data has been used or how their information requests have been handled
- We resolve disputes between individuals and organisations or public authorities
- We issue binding orders that require action to be taken where the law has not been followed
- We can impose administrative fines for non-compliance
Our independence
The IDPO operates independently of government and other public authorities.
Our decisions are made in line with the law and are not subject to direction in individual cases.
Who we regulate
We regulate public authorities, businesses, organisations and any other bodies that process personal data or handle Freedom of Information requests.
Your rights
You can contact the IDPO if you believe your data rights have been breached or if a Freedom of Information request has not been handled properly.