Introduction from the Minister
Dear Candidate,
Thank you for your interest in becoming a Non-Executive member of the Information Commission.
As the UK’s data protection regulator, the Information Commissioner’s Office (ICO) has an important and wide-ranging mandate. It plays a vital role in creating a trusted regulatory environment that enables personal data to be used safely and confidently, underpinned by the highest standards of data protection and one that is conducive to economic growth which is absolutely central to this government’s agenda.
This is an exciting and transformational time for the ICO as it transitions to a new governance model. The new Information Commission will be established through the Data (Use and Access) Act 2025 to replace the ICO, introducing a board structure. This isn’t just about change for the sake of change. It is about ensuring that the regulator has a diversity of skills, experience and perspectives at the top of the organisation to enable it to navigate the rapidly evolving regulatory landscape and successfully deliver on its ambitious agenda.
As a Non-Executive member of the new Information Commission, you will have responsibility for driving forwards this transformation, supporting the Information Commission’s work to drive the responsible use of data across the economy, to build trust and confidence, and to promote economic growth and innovation. This is a fantastic opportunity to help shape the future of an exceptional and forward-thinking organisation and lead alongside others who share a deep commitment to making the new Information Commission a success.
If you believe you have the skills and experience we are seeking, we very much look forward to hearing from you.
The Rt Hon. Peter Kyle MP
Secretary of State for Science, Innovation and Technology
Introduction from the Chair
I am delighted to have the opportunity to work with the Secretary of State in appointing our new Board.
This is an exciting next step in the evolution of the Information Commissioner’s Office, and I am looking forward to working with my new colleagues to deliver our purpose to empower individuals, businesses and organisations through information, as well as ensuring the protection of the data and rights of people of the UK and beyond.
As an independent regulator, I believe the Board has a critical role to play in ensuring that the work we do is proportionate, fair and focussed on achieving impactful outcomes. A strong, diverse and skilled cohort of Non-Executive Board members will enable the Board to effectively challenge and scrutinise the organisation’s work, with a focus on delivering regulatory interventions that improve people’s lives, reduce burdens, promote economic growth and innovation and enable efficient public services.
John Edwards
Information Commissioner and future chair of the Information Commission
Appointment description
Responsibilities
Strategic clarity: Enable the Information Commission to be a strategic and successful regulator; setting this vision and ensuring all activities contribute towards it; supporting innovation and growth by promoting public trust in the data protection system; anticipating the impact of new technology as well as economic and political developments.
Regulatory oversight: Keep the Information Commission at the forefront of regulatory best practice, ensuring that high standards of data protection are implemented effectively in the UK; ensure that it is ahead of emerging risks and opportunities and is in position to take relevant, focused action on a wide range of data protection and transparency matters; providing scrutiny to executive management over the fulfilment of all of the Information Commission’s duties and statutory responsibilities.
Talent management: Ensure the Information Commission has the right people to deliver current and future needs; value diversity and inclusion in its workforce and demonstrate fair treatment of its employees and stakeholders in all aspects of its activities.
Performance monitoring: Support and challenge executives to drive performance against agreed goals and targets; monitor and steer performance against key strategic initiatives to enable sound financial management; support the Information Commission in its risk-based approach to enforcement with a focus on the most serious threats to public trust; encourage the ICO to devote resources to supporting and providing regulatory certainty to organisations, while understanding and confronting serious infringements; delivery of operational performance, service, improvements, efficiency and value for money; enabling public and Parliamentary confidence in the work of the Information Commission.
Organisation description
The Information Commissioner’s Office (ICO) is the UK’s independent supervisory authority with responsibility for monitoring and enforcing the application of data protection legislation in the UK.
In addition to being responsible for the regulation of personal data protection and privacy and electronic communications legislation, it is empowered to take regulatory action under other legislation, including the Freedom of Information Act 2000 and the Network and Information System Regulations 2018. The Data (Use and Access) Act 2025 introduced new requirements on the ICO, including a new strategic framework which requires the regulator to have regard to, inter alia, innovation and competition and strengthened its obligations with regards to economic growth. The Act also introduced new obligations on the ICO to report on performance and increased investigatory powers.
In line with these responsibilities, the ICO has an array of important public-facing functions, including giving advice to members of the public about their information rights and obligations, handling complaints and taking action to enhance the information rights practices of organisations and enforcing the law. Moreover, the ICO plays a crucial role in upholding and developing information rights practices internationally and has a number of international obligations. The ICO’s mandate is not sector-specific, adding breadth and complexity to its various functions and obligations.
The ICO is undergoing an exciting transformation. The Data (Use and Access) Act 2025 will modernise the ICO’s governance framework to ensure it is fit for purpose, suitable to its role and remit, and relevant to the rapidly evolving regulatory landscape. The Act will replace the ICO’s governance model with a “body corporate” structure, called the Information Commission, governed by an independent board made up of non-executive members (including the Chair), alongside executive board members, including a Chief Executive Officer. The new model will spread the responsibilities of the Information Commissioner across a greater number of people, increasing the diversity and resilience of the regulator.
There will be no change in the regulator’s role; all functions that currently rest with the Information Commissioner will continue to sit with the new Information Commission.
Regulation of appointment
This post is regulated by the Commissioner for Public Appointments. For more information, please refer to the
Commissioner’s website