This page explains the role and powers of the Information and Data Protection Office under the Freedom of Information and Data Protection Act 2026.
Role of the IDPO
The Information and Data Protection Office is the independent regulator responsible for monitoring and enforcing the Freedom of Information and Data Protection Act 2026.
It oversees how public authorities, organisations and other bodies comply with the Act.
Complaints and disputes
The Information and Data Protection Office receives and investigates complaints. It can resolve disputes between individuals and organisations or public authorities.
Binding powers
The Information and Data Protection Office can issue binding orders.
These orders can require disclosure of information, partial disclosure, refusal or other remedial action.
Court enforcement
Binding orders of the Information and Data Protection Office are enforceable as if they were orders of the High Court of Justice. Failure to comply may result in civil enforcement proceedings.
Appeals and jurisdiction
The Information and Data Protection Office has jurisdiction over disputes under the Act.
Where a dispute concerns the Information and Data Protection Office itself, the matter must be referred directly to the courts.

