The Information Commissioner’s Office has announced plans to bring the UK’s top 1,000 websites into compliance with data protection law.

The ICO says it has already assessed the compliance of the top 200 UK websites and communicated concerns to 134 of those organisations, setting out regulatory expectations that organisations must comply with the law by giving people choice on how their personal information is used online.

Stephen Almond, ICO executive director of regulatory risk, said: “Uncontrolled tracking intrudes on the most private parts of our lives and can lead to harm. For example, gambling addicts being targeted with more betting ads due to their browsing history or LGBTQ+ people altering their online behaviour for fear of unintended disclosure of their sexuality.

“Our ambition is to ensure everybody has meaningful choice over how they are tracked online and what we’re publishing today sets out how we intend to achieve that. Last year, we saw significant improvements in compliance among the top 200 websites in what was a promising step forward for the industry. Now, we are expanding our focus to the top 1,000 websites – and beyond that to apps and connected TVs.

The action forms part of the ICO’s online tracking strategy for 2025, which aims to ensure people have control over how their personal information is tracked and used online. The strategy’s release is complemented by new measures to support businesses to adopt more privacy-friendly business models that give users the lawful choice and control they expect.

Almond added: “We’ll continue to hold organisations to account but we’re also here to make it easier for publishers to adopt compliant, privacy-friendly business models. By combining advice, guidance, and targeted enforcement, we aim to create an environment where businesses can succeed, and people can have trust and control over their online experiences.”

---