ICO Launches Consultation on Draft Guidance for Data Anonymisation in Research
The UK Information Commissioner's Office (ICO) has launched a public consultation on new draft guidance. The document addresses anonymisation and pseudonymisation for research, archiving, and statistical purposes. The consultation period will remain open until 19 October 2026.Target Audience and Regulatory ScopeThis draft guidance is particularly relevant for universities, healthcare organizations, and technology providers. Furthermore, the ICO explains how to apply data minimisation principles within modern research environments. In addition, the text clarifies how organizations should approach the new safeguards introduced under the Data (Use and Access) Act 2025 (DUAA).Mandatory Safeguards and Governance FrameworksThe DUAA requires organizations to implement effective technical and organizational measures for data minimisation. Consequently, identifiability risks must be assessed and managed throughout the entire research lifecycle. To assist with compliance, the ICO highlights the "Five Safes" governance framework. Therefore, adopting this framework helps organizations demonstrate appropriate safety controls across people, projects, settings, data, and outputs.Limitations of...