Technology
Guidance stages explained
Drafting – During this stage we pull together all relevant information and create a structured draft.
Public consultation/call for views (optional) – Usually we carry out a public consultation or call for views before we complete the guidance. To understand more about how and when we do this, you can read our consultation policy.
Redrafting (following consultation) – We make changes to the draft guidance to clarify issues and meet the needs of our audience.
Withdrawn – Occasionally we decide to not proceed with a guidance project. If so, we’ll mark it as withdrawn and remove it when we next update this page. If we decide to revisit an issue, we add a new entry to this page.
Published – Guidance is final and available on the website
List of guidance in development
- Guidance on the use of anonymisation and pseudonymisation for research purposes
- Automated Decision Making (ADM) and Profiling Guidance update
- Consumer Internet of Things products and services
- Data protection by design and by default
- Distributed Ledger Technologies (DLT) guidance
- DUA updates to draft guidance on storage and access technologies Part 1
- Encryption guidance
- Smart data and data portability/interoperability schemes
Guidance on the use of anonymisation and pseudonymisation for research purposes
Stage: Drafting
Public consultation: Yes (due to launch February 2026)
Final version of guidance due for publication: Summer 2026
Automated Decision Making (ADM) and Profiling Guidance update
Guidance on automated decision-making and profiling including amendments in the Data (Use and Access) Act
Stage: Drafting
Public consultation: Yes (due to launch Winter 2025/26)
Final version of guidance due for publication: Spring 2026
Consumer Internet of Things products and services
Stage: Redrafting after Public Consultation
Public consultation: Yes (closed)
Final version of guidance due for publication: Winter 2025/2026
Data protection by design and by default
Update of existing guidance to cover Data (Use and Access) Act changes, including the new “children’s higher protection matters” duty.
Stage: Drafting
Public consultation: No
Final version of guidance due for publication: Winter 2025/2026
Distributed Ledger Technologies (DLT) guidance
Stage: Public Consultation/Call for Views
Public consultation: Yes (open)
Final version of guidance due for publication: Winter 2025/2026
DUA updates to draft guidance on storage and access technologies Part 1
Part 2 - final guidance to be published in Spring 2026
Stage: Public Consultation/Call for Views
Public consultation: Yes (open)
Final version of guidance due for publication: Spring 2026
Encryption guidance
Stage: Published
Public consultation: Yes (closed)
Final version of guidance: Encryption
Smart data and data portability/interoperability schemes
Stage: Drafting
Public consultation: No
Final version of guidance due for publication: Autumn 2025