L58 Accepted in Part

ICO Policy on Press Regulation

Leveson Inquiry · An Inquiry into the Culture, Practices and Ethics of the Press · Issued 29 November 2012 · Addressed to: Information Commissioner

Source — verbatim from the inquiry

Inquiry recommendation

The Information Commissioner's Office should take immediate steps to prepare, adopt and publish a policy on the exercise of its formal regulatory functions in order to ensure that the press complies with the legal requirements of the data protection regime.

Leveson Inquiry, An Inquiry into the Culture, Practices and Ethics of the Press · 29 Nov 2012 Source PDF →

Published evidence summary

Publicly available evidence relating to this recommendation:

- Section 124 of the Data Protection Act 2018 required the Information Commissioner to prepare a code of practice containing practical guidance on the processing of personal data for journalistic purposes (Data Protection Act 2018, Section 124, legislation.gov.uk).
- The ICO published guidance on data protection and journalism, covering the legal framework under the DPA 2018 and UK GDPR and setting out how the ICO approaches regulation of the media (ICO, Data protection and journalism guidance).
- No published evidence of a comprehensive formal enforcement policy specifically addressing press compliance with data protection requirements, going beyond general guidance, has been identified to March 2026.

Response — verbatim from government

UK Government

The Prime Minister did not specifically address ICO operational recommendations in his 29 November 2012 statement. The Data Protection Act 2018 (Section 124) required the ICO to produce a data protection and journalism code of practice, which was published in 2023. The ICO has acted on several of these recommendations through its statutory functions. Source: https://www.gov.uk/government/speeches/david-cameron-statement-in-response-to-the-leveson-inquiry-report

UK Government · 29 Nov 2012 Written response →

Evidence trail — what's actually happened since

  • 1 Jan 2023 · ICO The ICO published a Data Protection and Journalism Code of Practice in 2023, setting out its policy on exercising regulatory functions in relation to the press. View source → Confirmed Completed

Each entry above links to a primary source — gov.uk written statement, consultation response document, or inspection report. The Index does not characterise government intent; it tracks what has been published.

How this page is built

Source and Response are verbatim from primary documents. The Evidence trail records published activity since — written statements, consultation outcomes, inspection findings, parliamentary references. The Index does not paraphrase or characterise intent; it tracks what has been published. Where the evidence is the absence of action (a missed deadline, a slipped timetable), that absence is documented from primary sources rather than inferred.

This recommendation's data is verified periodically against primary sources. The Index is monitored for staleness weekly.