Summary

  • The Information Commission became the legal successor to the Information Commissioner on 30 September 2026; the law transfers functions and provides for existing acts and proceedings to continue.
  • As of 2 October, the live Scheme of Delegations page still says the former scheme remains in operation, while explaining that authority through the old corporation-sole office. The page does not yet show readers how that scheme maps onto the new Commission.
  • That is a gap in public legibility, not evidence of unlawful delegation, broken services, changed enforcement or worse regulatory outcomes.

A regulator’s letter can still arrive on time while the public explanation of who was empowered to sign it falls behind. That distinction matters in the first days of the United Kingdom’s new Information Commission. Parliament has changed the legal form of the data-protection regulator; its public delegation map has not yet caught up.

The Data (Use and Access) Act 2025 inserted a new body corporate, the Information Commission, into the Data Protection Act 2018. Sections 118 and 119 abolish the office of Information Commissioner and transfer its functions to the new body. The organisation says the legal entity is the Information Commission while the public-facing organisation remains the Information Commissioner’s Office, or ICO. That naming distinction is useful: a familiar public brand can continue even as the holder of statutory functions changes.

The change took effect on 30 September 2026. The Commencement No. 9 and Transitional and Saving Provisions Regulations bring the relevant provisions into force and address continuity. Regulation 3 treats acts, omissions and other things already done or in progress by or in relation to the former Commissioner—including legal proceedings—as capable of continuing by or in relation to the Commission. Regulation 4 deals with the relevant accounting duties for the financial year ending 31 March 2027. These are concrete legal bridges. They do not certify that each case file, notice or operational record has been checked, and they do not say that the regulator’s work has been interrupted.

A new body, a new control surface

Under Schedule 14 to the Act, the Commission is a body corporate with a statutory membership and powers to establish committees and delegate functions to members, employees or committees. The statute sets a membership range of three to fourteen and says non-executive members should outnumber executive members so far as practicable. It also states that the Commission is not a servant or agent of the Crown. Those are meaningful design choices, but none is a shortcut for judging how authority is exercised in practice.

The ICO says seven non-executive members assumed their roles on 30 September. The board’s public page describes collective decisions about strategic direction and performance, assurance over governance, risk and internal controls, and decisions taken in line with the Scheme of Delegations. The transition announcement says Maggie Carver, the Deputy Chair, will carry the Chair’s responsibilities while the Department for Digital, Culture, Media and Sport recruits a permanent Chair, a process expected to conclude in spring 2027. The ICO also says its day-to-day work and core responsibilities continue.

Those statements describe the announced arrangements; they are not an independent measurement of service quality or regulatory independence.

The next link in the accountability chain is where the current public record becomes harder to follow. The live Scheme of Delegations says the Commission is adopting a new scheme that will be published “soon” and that, “Until then,” the ICO scheme below remains in operation. The same page then explains that the Information Commissioner’s functions were vested personally in a corporation sole and that the former Commissioner delegated work to staff by grades and roles.

That statement may reflect a valid transitional arrangement. The page does not explain its legal mapping: which new Commission decision authorises continued use of the former scheme, whether every delegation continues unchanged, which matters are reserved to the Board, how committee or executive delegations fit, or who can substitute when a named role-holder is absent. The Board page is still dated 15 July 2026 and says decisions follow the Scheme of Delegations, but it does not publish the post-transition scheme itself.

This is a narrow documentation gap, not a verdict on the institution. A stale or incomplete public page cannot establish that an internal delegation is invalid. Nor can a continuity regulation establish that every reader can identify the decision-maker, legal authority, review route and record behind an individual notice. Both propositions can be true at once: legal continuity may be protected while public traceability remains unfinished.

What a regulated reader needs to see

For an organisation receiving a regulatory notice, or a person seeking an answer about a complaint, practical accountability runs through several distinct questions. Which statutory function is being exercised? Is the decision reserved to the Commission or Board, or delegated? If it is delegated, to which role, within what limits, from what effective date and with what substitution or onward-delegation power? Where is the decision recorded? Which reconsideration, tribunal or court route applies?

These questions do not require disclosure of confidential case material. A usable public scheme can identify the authorising body, reserved matters, delegate roles, thresholds, duration, substitution rules, committee boundaries and version history. A decision notice can then identify the legal body and the authority under which the signatory acts, while preserving established routes for review and appeal. Public minutes and a register of interests can show how collective oversight works without publishing protected operational details.

The transition has therefore created a simple test for the Commission’s public control surface. Publish a dated scheme that connects the statutory transfer to actual decision roles. State what continues from the old scheme, what has changed and what is temporarily delegated. Update related governance pages so that historical descriptions are labelled as historical. Then show how the new allocation appears in decision records and public reporting.

The test is not whether a board has more chairs around a table. It is whether a person outside the organisation can trace authority from statute to the Commission, from the Commission to a delegate, and from that decision to a record and a route of challenge. The law supplies the successor and continuity rules. The next task is to make the operating map legible.

Sources