WASPI publishes Code of Conduct for Information Sharing Protocols
Published: 28/09/2026
| ICO
The Information Commissioner's Office (ICO) has confirmed that the Wales Accord on the Sharing of Personal Information (WASPI) has launched a new Code of Conduct for Information Sharing Protocols (ISP) under Article 40 of the UK General Data Protection Regulation (GDPR).
The Code establishes a framework for lawful, transparent, and accountable information sharing across Wales, helping organisations apply consistent data protection standards when sharing personal data to deliver health, education, social care, safeguarding, and other public services. The Code includes six key requirements covering governance, standardised templates, quality assurance, accountability, regular reviews of sharing arrangements, and adherence to ongoing monitoring procedures.
Training announcement: Freevacy provides comprehensive training for new and existing practitioners on the changes introduced by the DUA Act to the UK General Data Protection Regulation (GDPR), the Data Protection Act 2018 (DPA18), and the Privacy and Electronic Communications Regulations 2003 (PEC-Regulations). Our courses are always up to date and provide a forum for learning and discussing how to ensure your data protection processes remain compliant. Find out more.
What is this page?
You are reading a summary article on the Privacy Newsfeed, a free resource for DPOs and other professionals with privacy or data protection responsibilities helping them stay informed of industry news all in one place. The information here is a brief snippet relating to a single piece of original content or several articles about a common topic or thread. The main contributor is listed in the top left-hand corner, just beneath the article title.
The Privacy Newsfeed monitors over 300 global publications, of which more than 3,250 summary articles have been posted to the online archive dating back to the beginning of 2020. A weekly roundup is available by email every Friday.