ICO issues Data Protection and Journalism code of practice

The Data Protection and Journalism code is a statutory code of practice under the Data Protection Act 2018 (DPA 2018). It provides guidance (mainly) for media organisations and journalists who process personal data to help them to comply with their legal obligations under the DPA 2018 and the UK GDPR. The code gives guidance on:

  • demonstrating compliance with data protection principles
  • keeping personal data secure
  • using personal information lawfully (using a lawful basis for processing under data protection law)
  • using personal data in a fair and transparent manner
  • data minimisation and storage limitation.
  • how to apply the journalism exemption

The code can be found here.


Don't just take our word for it