The Information Commissioner’s Office (“ICO”) is the UK’s independent regulatory office in charge of overseeing compliance with the UK GDPR. The ICO’s significant investigative, corrective and enforcement power include the ability to:
order Controllers and Processors to prove their GDPR compliance;
perform a data protection audit;
stop an organization from processing personal data;
access premises, issue warnings, and suspend data flows to third countries;
impose financial penalties.