General data protection
Guidance stages explained
Drafting – During this stage we pull together all relevant information and create a structured draft.
Public consultation/call for views (optional) – Usually we carry out a public consultation or call for views before we complete the guidance. To understand more about how and when we do this, you can read our consultation policy.
Redrafting (following consultation) – We make changes to the draft guidance to clarify issues and meet the needs of our audience.
Withdrawn – Occasionally we decide to not proceed with a guidance project. If so, we’ll mark it as withdrawn and remove it when we next update this page. If we decide to revisit an issue, we add a new entry to this page.
Published – Guidance is final and available on the website
List of guidance in development
Codes of Conduct and Certification Guidance Update
Complaints guidance for organisations
Guidance on the Data (Use and Access) Act's new lawful basis of recognised legitimate interest
International transfers guidance
Research, Archiving and Statistics Provisions update
Right of access detailed guidance
Codes of Conduct and Certification Guidance Update
To reflect changes in the rules around Codes of Conduct in the Data (Use and Access) Act, and also changes to our processes.
Stage: Drafting
Public consultation: No
Due for publication: Autumn 2025
Complaints guidance for organisations
Guidance for organisations on how to handle data protection complaints following the requirements introduced by the Data (Use and Access) Act.
Stage: Drafting
Public consultation: Yes
Due for publication: Winter 2025/2026
Disclosing documents to the public securely: Hidden personal information and how to avoid an accidental breach
Stage: Drafting
Public consultation: No
Due for publication: Summer 2025
Guidance on the Data (Use and Access) Act's new lawful basis of recognised legitimate interest
New guidance on the Data (Use and Access) Act's new lawful basis of recognised legitimate interests
Stage: Drafting
Public consultation: Yes
Due for publication: Winter 2025/2026
International Transfers guidance
Stage: Drafting
Public consultation: Yes
Due for publication: Winter 2025/2026
Legitimate interest update
Update of existing guidance to include amendments from the Data (Use and Access) Act.
Stage: Drafting
Public consultation: No
Due for publication: Winter 2025/2026
Research, Archiving and Statistics Provisions update
To include new amendments from the Data (Use and Access) Act.
Stage: Drafting
Public consultation: Yes
Due for publication: Spring 2026
Right of access detailed guidance
Stage: Drafting
Public consultation: No
Due for publication: Summer 2025
SME Data essentials
Stage: Drafting
Public consultation: No
Due for publication: Spring 2026
Substantial Public Interest Conditions – Interactive tool
Stage: Drafting
Public consultation: No
Due for publication: Summer 2025
The purpose limitation principle
To include update to existing guidance and additional guidance.
Stage: Drafting
Public consultation: No
Due for publication: Winter 2025/2026