This report sets out the results of what we expect to be the last full year of the Information Commissioner’s Office. One outcome of the Data (Use and Access) Act 2025 (DUAA) is that the regulator will cease to be a corporation sole and will become a statutory board. The Information Commission will be established: a body led by a Chair, Chief Executive and non-executive directors appointed by the DSIT Secretary of State. This will bring us into a regime consistent with most other UK regulators. Our current Management Board members have long wanted, anticipated and planned for this change. I support this change as it will make us a more robust regulator, with clearer independent accountability. 

The change will also make it easier for us to act swiftly to protect our people in circumstances like those which led to the resignation of the former Commissioner. This, together with implementing any changes from a lessons learned review that we are conducting, will help to prevent a situation like this arising again. 

Much of what follows in this report is a record of the achievements of the industry, commitment and determination of our dedicated staff. They now number over a thousand and I thank each one of them for their contribution to the achievements of the last year. What is critical to all of us at the ICO, what drives us, is the difference we make to people's lives. Information rights are ultimately about people’s dignity, safety and ability to fully participate in society. In addition, we understand the importance of supporting the UK's economic ambitions and helping businesses understand what the law enables, and not just what it prohibits, is also central to our purpose. 

Alongside my thanks to our staff, I would also like to thank my colleagues and fellow non-executive directors (NEDs) on the Management Board, whose diligence, challenge and support have been invaluable. Whilst only being an advisory board, you have used your advice and wise counsel to support the organisation. My thanks go to the NEDs who agreed to extensions of their terms to support the ICO in its final few months before transition and to Ranil Boteju, who was unable to extend his NED term due to taking up a new role abroad. 

Finally, to Paul Arnold and the Executive Team: thank you for your leadership, your vision and your commitment to helping the people we exist to serve.

We now move forward with purpose, ambition and a clear sense of what good regulation looks like. I am confident we now have an Office filled with people with the values, purpose and drive to ensure we deliver.

Nicola Wood MBE
13 July 2026