# UK data protection: what changed in September 2026?

A look back at the regulator’s new structure, TikTok’s withdrawn appeals and the debate about smart glasses.

The Assurance Desk, news. Published 13 October 2026.

Related news: [The ICO became the Information Commission on 30 September 2026](https://theassurancedesk.com/news/ico-becomes-the-information-commission)

September brought a new structure for the UK data regulator, the end of TikTok’s appeals and a debate about privacy in smart glasses. These were different kinds of development, from enforcement to regulator commentary ([ICO, ICO welcomes transition to new Information Commission and marks new chapter with Manchester head office opening](https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/09/ico-welcomes-transition-to-new-information-commission-and-marks-new-chapter-with-manchester-head-office-opening/), [ICO, TikTok withdraws two appeals in children’s privacy action and accepts £12.7m fine](https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/09/tiktok-withdraws-two-appeals-in-children-s-privacy-action-and-accepts-127m-fine/) and [ICO, Enabling technology for good: smart glasses, privacy and a broader challenge for public trust](https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/09/enabling-technology-for-good/), checked 13 October 2026).

## September at a glance

This is a selection of the month’s developments. The dates below are the dates of the regulator’s announcements ([ICO, ICO welcomes transition to new Information Commission and marks new chapter with Manchester head office opening](https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/09/ico-welcomes-transition-to-new-information-commission-and-marks-new-chapter-with-manchester-head-office-opening/), [ICO, TikTok withdraws two appeals in children’s privacy action and accepts £12.7m fine](https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/09/tiktok-withdraws-two-appeals-in-children-s-privacy-action-and-accepts-127m-fine/) and [ICO, Enabling technology for good: smart glasses, privacy and a broader challenge for public trust](https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/09/enabling-technology-for-good/), checked 13 October 2026).

**Selected UK developments in September 2026**

| Date | What happened | What kind of news? |
| --- | --- | --- |
| 17 September | Paul Arnold discussed smart glasses, privacy and public trust. | Regulator commentary. |
| 24 September | TikTok withdrew appeals over a fine and an information notice. | Enforcement update. The fine dates from 2023. |
| 30 September | The ICO formally became the Information Commission. | A change to how the regulator is governed. |

Source: ICO, ICO welcomes transition to new Information Commission and marks new chapter with Manchester head office opening, https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/09/ico-welcomes-transition-to-new-information-commission-and-marks-new-chapter-with-manchester-head-office-opening/ (checked 13 October 2026); ICO, TikTok withdraws two appeals in children’s privacy action and accepts £12.7m fine, https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/09/tiktok-withdraws-two-appeals-in-children-s-privacy-action-and-accepts-127m-fine/ (checked 13 October 2026); ICO, Enabling technology for good: smart glasses, privacy and a broader challenge for public trust, https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/09/enabling-technology-for-good/ (checked 13 October 2026)

## TikTok: the fine dates from 2023

TikTok agreed to pay the £12.7m fine after withdrawing its appeal. The fine was imposed in 2023. The September news was the withdrawal, not a new fine ([ICO, TikTok withdraws two appeals in children’s privacy action and accepts £12.7m fine](https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/09/tiktok-withdraws-two-appeals-in-children-s-privacy-action-and-accepts-127m-fine/), checked 13 October 2026).

TikTok also dropped a separate appeal against an information notice. That notice sought material for an investigation into how its recommendation systems use children’s data. The ICO says the investigation can now continue ([ICO, TikTok withdraws two appeals in children’s privacy action and accepts £12.7m fine](https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/09/tiktok-withdraws-two-appeals-in-children-s-privacy-action-and-accepts-127m-fine/), checked 13 October 2026).

## Smart glasses: privacy and useful technology

Paul Arnold argued for safeguards that manage risks while allowing people to benefit from new technology. His September article was commentary on smart glasses and public trust ([ICO, Enabling technology for good: smart glasses, privacy and a broader challenge for public trust](https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/09/enabling-technology-for-good/), checked 13 October 2026).

It also set out work still to come. The ICO said it was researching public attitudes to AI and preparing to consult on an AI and automated decision-making code in 2027 ([ICO, Enabling technology for good: smart glasses, privacy and a broader challenge for public trust](https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/09/enabling-technology-for-good/), checked 13 October 2026).

## The Information Commission: what carries on?

The ICO formally became the Information Commission on 30 September 2026. Its work is now overseen by a board under arrangements introduced by the UK Data (Use and Access) Act 2025 ([ICO, ICO welcomes transition to new Information Commission and marks new chapter with Manchester head office opening](https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/09/ico-welcomes-transition-to-new-information-commission-and-marks-new-chapter-with-manchester-head-office-opening/), checked 13 October 2026).

The regulator says this does not change its core responsibilities. Paul Arnold, its chief executive, said the day-to-day work continues ([ICO, ICO welcomes transition to new Information Commission and marks new chapter with Manchester head office opening](https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/09/ico-welcomes-transition-to-new-information-commission-and-marks-new-chapter-with-manchester-head-office-opening/), checked 13 October 2026).

> "The day-to-day work that people rely on from us continues."
> Paul Arnold, ICO chief executive
> ICO, ICO welcomes transition to new Information Commission and marks new chapter with Manchester head office opening, https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/09/ico-welcomes-transition-to-new-information-commission-and-marks-new-chapter-with-manchester-head-office-opening/ (checked 13 October 2026)

**The regulator’s announcement, published on 30 September 2026.**

![ICO announcement showing the transition to the Information Commission and its publication date.](https://theassurancedesk.com/images/editorial/ico-transition-september-2026.png)

The page records the formal transition to the Information Commission and a new board under the UK Data (Use and Access) Act 2025. It also describes the opening of its Manchester headquarters and work on a new corporate strategy.

[Information Commission’s Office](/news/ico-becomes-the-information-commission), ICO welcomes transition to new Information Commission and marks new chapter with Manchester head office opening, 30 September 2026, licensed under the Open Government Licence. Captured 12 October 2026.
Licence: https://ico.org.uk/global/copyright-and-re-use-of-materials/
Source: ICO, ICO welcomes transition to new Information Commission and marks new chapter with Manchester head office opening, https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/09/ico-welcomes-transition-to-new-information-commission-and-marks-new-chapter-with-manchester-head-office-opening/ (checked 13 October 2026); ICO, Copyright and re-use of materials, https://ico.org.uk/global/copyright-and-re-use-of-materials/ (checked 13 October 2026)

## September’s nuisance-call figures, released in October

A later release helps complete the picture. The ICO published these figures on 9 October 2026. It recorded 3,684 complaints about automated nuisance calls in September, 2,178 in August and 1,374 in July ([ICO, Complaints about automated nuisance calls hit five-year high](https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/10/complaints-about-automated-nuisance-calls-hit-five-year-high/), checked 13 October 2026).

These are complaints received by the ICO. They are not a count of all automated calls or all people affected. The regulator says many calls go unreported ([ICO, Complaints about automated nuisance calls hit five-year high](https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/10/complaints-about-automated-nuisance-calls-hit-five-year-high/), checked 13 October 2026).

**Complaints about automated nuisance calls**

Unit: Complaints received by the ICO

- July: 1374
- August: 2178
- September: 3684

Monthly complaint totals for July, August and September 2026. Published on 9 October 2026. These totals do not measure all calls made.

Source: ICO, Complaints about automated nuisance calls hit five-year high, https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/10/complaints-about-automated-nuisance-calls-hit-five-year-high/ (checked 13 October 2026)

## Read next

- [Data protection: the section](https://theassurancedesk.com/data-protection)
- [Is UK GDPR changing in 2026?](https://theassurancedesk.com/guides/uk-gdpr-changes-data-use-and-access-act)
- [Automated decisions: what UK GDPR now requires](https://theassurancedesk.com/guides/automated-decisions-uk-gdpr)
- [What must your UK privacy notice say?](https://theassurancedesk.com/guides/what-your-privacy-notice-must-say)

## Sources

- ICO, ICO welcomes transition to new Information Commission and marks new chapter with Manchester head office opening: https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/09/ico-welcomes-transition-to-new-information-commission-and-marks-new-chapter-with-manchester-head-office-opening/ (checked 13 October 2026)
- ICO, TikTok withdraws two appeals in children’s privacy action and accepts £12.7m fine: https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/09/tiktok-withdraws-two-appeals-in-children-s-privacy-action-and-accepts-127m-fine/ (checked 13 October 2026)
- ICO, Enabling technology for good: smart glasses, privacy and a broader challenge for public trust: https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/09/enabling-technology-for-good/ (checked 13 October 2026)
- ICO, Copyright and re-use of materials: https://ico.org.uk/global/copyright-and-re-use-of-materials/ (checked 13 October 2026)
- ICO, Complaints about automated nuisance calls hit five-year high: https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/10/complaints-about-automated-nuisance-calls-hit-five-year-high/ (checked 13 October 2026)

This is an independent editorial guide, not legal advice.

---

**Who publishes this.** The Assurance Desk is published by Add-Venture Advisory Ltd, company number 11854524, registered in England and Wales. The same owner runs Avouch, a marketing agency that sells AI visibility services to firms of the kind this site covers. That is a conflict of interest, and it is disclosed here.