In this section you will find all the ICO's statutory codes of practice.
The ICO is required under the Data Protection Act 2018 (DPA 2018) to produce four codes of practice about Age appropriate design, Data sharing, Direct marketing and Journalism. The DPA 2018 also allows the Secretary of State to require the ICO to prepare other codes of practice that give guidance on good practice in the processing of personal data.
Two of the statutory codes have been produced and are available below.
We have also published direct marketing guidance and created a direct marketing resources page to help you comply.
Age appropriate design code (Children's code)
The Children’s code (or Age appropriate design code) is a data protection code of practice for online services, such as apps, online games, and web and social media sites, likely to be accessed by children.
Data Sharing Code
The Data Sharing Code gives individuals, businesses and organisations the confidence to share data in a fair, safe and transparent way.
We have also created a data sharing information hub with guidance and practical tools for organisations.