Latest biggest updates from ICO
This 1 year period ICO has published very beneficial documents that are very important for the Data protection of the subjects and related to other topics.
In this post will share chronologicaly the most important events month by month.
April 2021
We have published guidance on the National Security Provisions in Part 3 of the DPA18 and updated the Guide to Intelligence Services Processing.
March 2021
We have published new guidance on the national security exemption in Part 2 of the DPA18.
January 2021
We have published an Updated BCR communication following the EU-UK Trade and Co-operation Agreement to the International transfers after the UK exit from the EU Implementation Period.
December 2020
We have published the new Data Sharing Code of Practice, alongside a data sharing information hub with further resources and support.
In addition, we published detailed guidance on sharing personal data with law enforcement authorities, and detailed guidance on data sharing and reuse of data by competent authorities for non-law enforcement purposes.
November 2020
We have published detailed guidance on criminal offence data.
September 2020
We have published the Accountability Framework, which provides detailed guidance on complying with the accountability principle.
February 2020
We have published detailed guidance on codes of conduct and certification.
January 2020
The Danish Data Protection Agency has adopted Standard Contractual Clauses (SCCs) which have been approved by the European Data Protection Board (EDPB). We have updated our detailed guidance on contracts and liabilities between controllers and processors to reflect this.
November 2019
We have published detailed guidance on special category data and updated the Guide page on special category data. We have also published a template appropriate policy document. This is required by many of the DPA 2018 schedule 1 conditions for processing.
In addition, we have published a template Part 3 appropriate policy document. We have updated the conditions for sensitive processing and principles pages in the Guide to Law Enforcement Processing to provide further guidance on the Part 3 appropriate policy document.
September 2019
We have published guidance on manifestly unfounded and excessive requests under the Guide to Law Enforcement Processing.
August 2019
We have updated our position on how to calculate the time limit for responding to requests (in relation to Individual rights) following a determination made in a Court of Justice of the European Union (CJEU) case which has been adopted by the European Data Protection Board (EDPB). We have also added guidance on the meaning of ‘manifestly unfounded or excessive’. The following pages have been updated:
- Right of access;
- Right to rectification;
- Right to erasure;
- Right to restrict processing;
- Right to data portability; and
- Right to object.
About the Author
Head of Commercial & Country Manager
Zlatko Delev is Head of Commercial and Country Manager at GDPRLocal, where he leads the company’s commercial strategy and market presence. He brings international experience across sales, marketing, and customer success, along with a legal background from his studies at Iustinianus Primus Law School in Skopje, Macedonia.
Zlatko sits at the front line of GDPRLocal’s client relationships, guiding organisations through the first stages of their compliance journey and helping them understand where they stand and where they need to go on GDPR, information security, and the emerging landscape of AI regulation. His role bridges commercial strategy with practical data protection knowledge, ensuring clients get clear, actionable direction from their very first conversation with GDPRLocal.
Alongside his commercial focus, Zlatko has trained extensively in project management and organisational leadership, including risk management, stakeholder communication, agile methodology, and digital marketing, a broad skill set that supports his structured, delivery-focused approach to growing GDPRLocal’s business internationally.