Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 10 SEPTEMBER 2026

ICO Consults On Draft Guidance On Anonymisation And Pseudonymisation For Research

Burges Salmon LLP
Burges Salmon LLP
Contributor
Burges Salmon LLP

Burges Salmon LLP

Burges Salmon is an ambitious, sustainable and inclusive firm that ensures its clients, people and...

View firm profile
Explore more from Burges Salmon LLP

The Information Commissioner's Office has launched a consultation on draft guidance addressing anonymisation and pseudonymisation for research, archiving and statistical purposes. This guidance provides critical insight into how organisations should apply data minimisation principles in modern research practices, including AI development, trusted research environments, and synthetic data generation.

United KingdomPrivacy
Fraser Campbell
Fraser Campbell
Amanda Leiu
Amanda Leiu

On 24 August 2026, the Information Commissioner’s Office (ICO) launched a consultation on draft guidance on anonymisation and pseudonymisation for research, archiving and statistical purposes (“RAS”). The consultation remains open until 19 October 2026.

The draft guidance will be of particular interest to universities, healthcare and life sciences organisations, public sector bodies and technology providers that rely on data-driven research and innovation.

Whilst much of the draft guidance consolidates existing ICO guidance on anonymisation and pseudonymisation, it also provides insight into how the ICO expects organisations to apply these principles in the context of modern research practices, including AI development, trusted research environments (TREs), trusted third parties (TTPs), federated analysis models and synthetic data. The guidance also sheds light on how the ICO expects organisations to approach the new safeguards for RAS purposes introduced by the Data (Use and

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

ICO Cookie Crackdown 2.0: The ICO’s New Storage And Access Technologies Guidance

The UK Information Commissioner's Office has finalized its guidance on storage and access technologies, expanding compliance requirements beyond traditional cookies to include tracking pixels, device fingerprinting, and web storage. Organizations must now navigate stricter consent standards and three new narrow exceptions introduced by the Data (Use and Access) Act 2025, while facing significantly increased enforcement penalties of up to £17.5 million or 4% of annual worldwide turnover.
United KingdomPrivacy
ZwillGen
ZwillGen
Article

Ten AI Giants, One Regulator And A Lesson For Everyone Else: What The ICO’s Foundation Model Report Really Tells Us

The UK's Information Commissioner's Office has completed its supervision of major AI foundation model developers, revealing significant gaps in data protection practices and setting new expectations for legitimate interests assessments, transparency, and special category data handling. The regulator has now turned its attention to agentic AI systems, warning that autonomy is not an excuse for poor compliance and launching a call for evidence that will shape future regulatory guidance.
United KingdomPrivacy
Burges Salmon LLP
Burges Salmon LLP
Article

European Commission Press Release: EU AI Act Transparency Enforcement Starts This Sunday! Do You Know Who Your Chatbots Are? We Break Down The Commission’s Guidelines On Transparency Below

The European Commission has announced that EU AI Act transparency rules take effect August 2, 2026, requiring chatbots to identify themselves, deepfakes to be labeled, and AI-generated content to be marked. Organizations must assess whether their AI systems trigger disclosure, labeling, or content-marking requirements, with limited exceptions and penalties reaching €15 million or 3% of global turnover for noncompliance.
GlobalPrivacy
Seyfarth Shaw LLP
Seyfarth Shaw LLP
Article

ICO Launches Consultation On Draft Guidance Regarding Anonymisation And Pseudonymisation For Research Purposes

The UK's Information Commissioner's Office has opened a public consultation on draft guidance addressing anonymisation and pseudonymisation techniques for processing personal data in research, archiving, and statistical contexts. The guidance explores critical distinctions between anonymous and pseudonymous data, outlines required safeguards under UK GDPR, and examines emerging technologies including synthetic data and privacy-enhancing tools.
United KingdomPrivacy
A&O Shearman
A&O Shearman
Article

The EU Kids Act: Not Just A Social Media Ban, And Not Just An EU Problem

The European Commission has proposed the EU KIDS Act, a comprehensive regulation that extends far beyond a simple social media ban for under-13s. This ambitious framework introduces tiered age-based restrictions, safety-by-design obligations across digital services including AI chatbots and online games, and mandatory certified age-verification systems. With potential fines reaching 6% of global turnover and enforcement mechanisms piggybacking on existing DSA machinery, organisations offering digital servic
European UnionMedia, Telecoms, IT, Entertainment
Burges Salmon LLP
Burges Salmon LLP
Article

Ten AI Giants, One Regulator And A Lesson For Everyone Else: What The ICO’s Foundation Model Report Really Tells Us

The UK's Information Commissioner's Office has completed its supervision of major AI foundation model developers, revealing significant gaps in data protection practices and setting new expectations for legitimate interests assessments, transparency, and special category data handling. The regulator has now turned its attention to agentic AI systems, warning that autonomy is not an excuse for poor compliance and launching a call for evidence that will shape future regulatory guidance.
United KingdomPrivacy
Burges Salmon LLP
Burges Salmon LLP
Article

Evolution Delivered: What Regulation (EU) 2026/2202 Means For EU261 Reform

The European Union has enacted its most comprehensive overhaul of passenger rights legislation in over twenty years, introducing significant operational changes for airlines while maintaining the core architecture of the existing compensation framework. With implementation required by October 2027, carriers face expanded obligations around automatic reimbursements, rerouting rights, and assistance provisions, alongside new clarity on extraordinary circumstances and claims procedures.
European UnionMedia, Telecoms, IT, Entertainment
Burges Salmon LLP
Burges Salmon LLP
Article

Crypto, Front Companies And Sanctions Evasion: The NCA’s $5.2 Million Forfeiture

The National Crime Agency has secured the forfeiture of over $5.2 million from an agricultural trading company following a civil recovery investigation into suspected money laundering and sanctions evasion. The case involved complex international fund flows through multiple jurisdictions, cryptocurrency conversion, and alleged connections to entities later designated under US sanctions for facilitating illicit Iranian oil sales.
United KingdomCriminal Law
Burges Salmon LLP
Burges Salmon LLP
Article

Regulating AI In Healthcare: National Commission Sets Out UK Framework

The National Commission into the Regulation of AI in Healthcare has published comprehensive recommendations that are expected to shape the future regulatory framework for AI technologies in UK healthcare. These recommendations address the safe adoption of AI across diagnostics, medical research, and clinical decision-making while establishing safeguards to maintain public confidence. The report introduces a lifecycle approach to regulation, emphasizing ongoing monitoring rather than just initial approval, a
United KingdomFood, Drugs, Healthcare, Life Sciences
Burges Salmon LLP
Burges Salmon LLP
Article

When A Chatbot Becomes A Search Engine: Lessons From The Commission’s Latest DSA Designations

The European Commission has designated ChatGPT as a Very Large Online Search Engine under the Digital Services Act, marking the first time a generative AI assistant has been classified this way. This designation, alongside Reddit and Roblox being named as Very Large Online Platforms, introduces systemic risk assessment obligations, independent audits, and advertising transparency requirements that most AI products have not previously faced. What does this mean for other AI assistants with web-search capabil
BelgiumTechnology
Burges Salmon LLP
Burges Salmon LLP
Article

Broad Changes To MHRA Proposed Under UK Health Bill

The UK Government has introduced sweeping reforms to the regulatory framework governing medicines and medical devices through amendments to the Health Bill currently progressing through Parliament. These proposed changes would grant the Secretary of State new powers to establish a licensing regime for medical devices and enable faster regulatory updates in response to scientific and technological advances.
United KingdomFood, Drugs, Healthcare, Life Sciences
Burges Salmon LLP
Burges Salmon LLP
Article

A Consumer Duty Focus On Supervision And Enforcement – What Changes Now That The Consumer Duty Has Teeth?

The FCA has ended its grace period for Consumer Duty compliance and is now actively using supervisory and enforcement powers to ensure firms deliver good consumer outcomes. With 11 open investigations spanning insurance, pensions, wealth management, and other sectors, plus 382 supervisory interventions in the last financial year, regulators are scrutinizing whether firms have truly embedded Consumer Duty frameworks into their operations. Fair value assessments, vulnerability support, and outcomes monitoring
United KingdomFinance and Banking
Burges Salmon LLP
Burges Salmon LLP
Article

Goodbye To TECH 02/17BL: A New Solvency Based Regime For Dividends?

The UK government has proposed a fundamental shift from complex distributable profits calculations to a streamlined solvency-based regime for determining dividend legality. This consultation explores how companies would simply need to demonstrate that dividend payments won't affect their ability to continue as a going concern, potentially replacing decades of intricate accounting guidance with a more practical approach.
United KingdomCorporate/Commercial Law
Burges Salmon LLP
Burges Salmon LLP