IAPP UK Intensive 2026: Privacy | AI governance | Cybersecurity law
LONDON
23-26 February
Navigating the ICO’s Next Chapter: A Fireside Chat with Paul Arnold
Wednesday, 25 Feb.
14:15 - 15:15 GMT
Enterprise 1, Level 2
Intermediate level
The Data Use and Access Act 2025 will re-constitute the ICO. The ICO will no longer be a “corporation sole” (all powers vested in one person) but will be set up as a new legal entity. ICO is already making changes in anticipation of this, but what do these changes mean in practice for ICO’s activities and for individuals and companies engaging with ICO? In this session, Sana Duncan, Chief Privacy, AI and Data Responsibility Officer at WSP, will lead a fireside chat with ICO CEO Paul Arnold, covering what the respective responsibilities of the CEO and the Chair will be and how this compares to the approach taken by other regulators. And, in terms of the wider management structure, what are the areas of responsibility for the executive directors at ICO? Do not miss this opportunity to understand how the ICO’s transformation will redefine its role, responsibilities, and relationship with the wider data community.
What you will learn:
- Key reforms introduced by the Data Use and Access Act 2025 and their real world impact on ICO processes.
- What companies and individuals can expect when engaging with a re constituted ICO.
Moderator and speakers

Paul Arnold
CEO
U.K. Information Commissioner’s Office

Sana Duncan
Chief Privacy, AI and Data Responsibility Officer
WSP