Which body is the UK's data protection regulator from 30 September 2026?
Under the Data (Use and Access) Act 2025, the Information Commissioner's Office was replaced by the Information Commission on 30 September 2026; the UK GDPR text now refers to 'the Commission', and the ICO name is still used publicly (legislation.gov.uk, UK GDPR Art 33 annotation). The FCA regulates conduct, not data protection, the FOS resolves financial complaints, and the NCSC gives cyber security advice but does not enforce UK GDPR.
Naming the FCA because firms report so much else to it.
Practise more FRE2 Money Laundering, Proceeds of Crime & Data Protection questions
Exam-style questions with worked answers, then full timed mocks. Free to start.
Build a daily practice habit — a few exam-style questions a day, with worked answers. Free to start.
Start practising →Original practice material mapped to the published CeMAP FRE2 learning outcomes. Independent, not endorsed by Walbrook (formerly LIBF). Verify figures and rules against current guidance before relying on them.