Data Controller Study 2025

The Data Controller Study is a piece of research that aims to provide insight and support our strategic, regulatory, and research activities. The study was launched in 2023 and the findings of Year 2 of the study are presented in the dashboard below. To view the dashboard in full screen, click the button in the bottom-right corner below. 

The study includes both quantitative and qualitative data collection with organisations that collect, process and store personal data, with the aim to understand:

• • the demographic characteristics and personal data processing activities of data controllers;
  • the technology used by data controllers;
  • innovation considerations of data controllers; and
  • data controllers’ views of both the work of the ICO and data protection in general.

The findings of the quantitative survey are presented in an interactive dashboard and accompanying findings report, helping bring the findings to life. A summary of the qualitative findings provides an insight into data controllers’ experiences with use of technological processes such as anonymisation, pseudonymisation, artificial intelligence, automated decision making and biometric and facial recognition technology to process personal data.

We have published the quantitative survey questionnaire, technical report and raw data for broader research and analytical purposes, in line with our enduring ICO25 objectives. We aspire for the data and findings to contribute to the development of collective data insights and support policy development and research that take into consideration data controllers’ views and experiences, support public welfare and safeguard individuals’ data protection rights.

We would be keen to discuss the use of data and findings across a range of sectors, such as public, regulatory and academic. If you wish to get in touch or have questions about the research, please email the team: [email protected]