Paul Arnold delivers opening remarks at DPPC2026

In his opening remarks at the Information Commission's (ICO) Data Protection Practitioners' Conference (DPPC) 2026, ICO Chief Executive Officer Paul Arnold MBE spoke about the recent structural changes, aimed at strengthening governance and long-term strategic oversight. 

Arnold emphasised that innovation and data protection are mutually reinforcing, not incompatible. He said the regulator's primary role is to foster public trust and embed responsible data handling across the UK economy, pledging a transparent, proportionate, outcome-led approach to regulatory supervision.

While stressing cooperative engagement and supporting regulatory guidance, Arnold clarified that the ICO will robustly enforce the law against criminal, negligent, or irresponsible data practices that undermine the efforts of compliant professionals. However, in what appeared to be a call for stakeholder feedback, Arnold said the ICO would welcome feedback where its efforts fall short. "If you are concerned by any decisions we have taken, actions we have taken or not taken, then we really want to hear that too. So please do contact us through whatever channel works best for you."

Editor's note: We're wondering whether Arnold appreciates how much anger and apathy there is towards the ICO, particularly in relation to its regulatory enforcement track record. Anyway, in case you were wondering, the ICO email format is firstname.lastname@ico.org.uk. Over to you. 

Training Announcement: Find out more about our range of independent accredited qualifications from BCS and IAPP. These include professional certifications for practitioners covering data protection and AI governance, information security and risk management, along with access to public information.