AI regulation is stepping up to supervise new models that handle user’s personal data and the UK’s Information Commissioner’s Office has unveiled a new three-year strategy to ensure its use is responsible and managing the threats to public trust. 

Launched at a 40th anniversary event in Parliament, the strategy sets out how the ICO will support innovation while ensuring personal data is used lawfully and responsibly. The public desire to be aware of the consequences if AI driven systems are misused and what impact this has on them. As AI is helping with everyday tasks and processes, the technology is embraced with some caution in case facial recognition technology is used inaccurately, or a flawed automated decision impacts a job application, for example. 

54% of people surveyed shared concerns about the use of facial recognition technology by law enforcement for inspections and the infringement on their right to privacy. On the other hand, criminals with a known past history of convictions can quickly be detected in police systems with the use of biometrics data matching.

There is a fair balance to be struck which allows AI to bring new opportunities for organisations to innovative with AI and sell new capabilities bit people need to feel their personal information is in “safe hands”.

So AI technologies must be scrutinised whilst it is focused on accelerating economies. ICO’s role as a regulator is to ensure “effective protections are in place, and personal information is used in ways that both drive innovation and earn people’s trust.”

Key priorities include scrutinising automated decision-making in recruitment, auditing police use of facial recognition technology, and setting clear expectations for how generative AI systems are trained against standards. 

The regulator pledged to develop a statutory code of practice for AI and continue investigating emerging risks, including the rise of ‘agentic AI’.

The strategy has won backing from Parliamentarians. Dawn Butler MP said AI must be built on fairness and inclusion, while Lord Clement-Jones CBE warned that trust, privacy, and accountability must underpin innovation.

The ICO will also consult on updated ADM guidance and publish a horizon-scanning report on agentic AI later this year, reinforcing its commitment to ensuring that data protection keeps pace with technological change.