Header image

ICO Details AI and Biometric Strategy

Declares intention for responsible AI through a statutory code of practice.


The ICO has announced its new direction in ensuring the secure use and development of AI and biometrics.

Saying its objective “is to empower organisations to use these complex and evolving AI and biometric technologies in line with data protection law,” the ICO has released its AI and biometrics strategy which sets out how it will:

  • Set clear expectations for responsible AI through a statutory code of practice for organisations developing or deploying AI and automated decision-making, to enable innovation while safeguarding privacy;

  • Secure public confidence in generative AI foundation models by working with developers to ensure they use people’s information responsibly and lawfully in training these models;

  • Ensure that automated decision-making (ADM) systems are governed and used in a way that is fair to people, focusing on how they are used in recruitment and in public services; and

  • Ensure the fair and proportionate use of facial recognition technology (FRT), working with law enforcement to ensure that the technology is effective and people’s rights are protected.

Everyday Life

The announcement of the strategy comes as the ICO acknowledges that AI is “fast becoming part of everyday life” and shapes how decisions are made, how services are delivered and, through biometric technologies, how people are identified.

Also, biometric technologies, powered by AI, can help organisations operate  more efficiently and securely and support law enforcement in keeping communities safe.

Meanwhile Agentic AI raises questions around accountability and redress “as some systems make speculative inferences about people’s intentions or emotions based on their physical or behavioural characteristics.”

Careful Scrutiny

The ICO said “these developments demand careful scrutiny” and it will remain responsive to new issues that emerge and be transparent when our focus needs to shift.

In a speech at the ICO Parliamentary event with AI APPG this week, information commissioner John Edwards said the AI and Biometrics strategy will set the direction of travel for its work over the next year.

“We will be ramping up our scrutiny across the AI ecosystem - focusing particularly on areas where there is the potential for public benefit but we know there are concerns and a real risk of harm,” he said. “Our research shows that people expect to understand when and how AI systems affect them, and they are worried about the consequences when these technologies go wrong – such as being incorrectly identified by facial recognition, or losing a job opportunity through erroneous ADM. 

Commenting, Dawn Butler MP, APPG AI Vice Chair said that AI is more than just a technology change; it is a change in society. “It will increasingly change how we get health care, attend school, travel, and even experience democracy,” Butler said.

“AI must work for everyone, not just a few people, to change things; and that involves putting fairness, openness, and inclusion into the underpinnings."

Dan Raywood
Dan Raywood

Dan Raywood is a B2B journalist with 25 years of experience, including covering cybersecurity for the past 17 years. He has extensively covered topics from Advanced Persistent Threats and nation-state hackers to major data breaches and regulatory changes.

He has spoken at events including 44CON, Infosecurity Europe, RANT Forum, BSides Scotland, Steelcon and the National Cyber Security Show, and served as editor of SC Media UK, Infosecurity Magazine and IT Security Guru. He was also an analyst with 451 Research and a product marketing lead at Tenable.

Dan Raywood
Dan Raywood

Dan Raywood is a B2B journalist with 25 years of experience, including covering cybersecurity for the past 17 years. He has extensively covered topics from Advanced Persistent Threats and nation-state hackers to major data breaches and regulatory changes.

He has spoken at events including 44CON, Infosecurity Europe, RANT Forum, BSides Scotland, Steelcon and the National Cyber Security Show, and served as editor of SC Media UK, Infosecurity Magazine and IT Security Guru. He was also an analyst with 451 Research and a product marketing lead at Tenable.

Upcoming Events

No events found.