UK regulator for data protection announces enforcement next steps

This strategy involves:

  • Extending enforcement action to the 1,000 most popular websites in the UK to ensure a “level playing field.”
  • Confirming how “consent or pay” models can be deployed.
  • Engaging with the PPA and the publishing industry to develop a certification scheme that enables organisations to show that their data collection and processing comply with UK law.


The PPA has been closely engaging with the ICO and has received clarification that the new rules do allow consent or pay models like those publishers are using in European Markets.

The PPA will also be liaising with the ICO and central government to provide feedback on how data protection compliance can be reformed in a way that optimises outcomes for publishers and consumers.

You can read the ICO’s online tracking strategy in full here.

If you have any questions or would like to find out more, contact our Head of Policy and Public Affairs, Eilidh.wilson@ppa.co.uk