The Information Commissioner's Office (ICO) is the independent authority set up to enforce and oversee the Data Protection Act 1998 (DPA).
Since the commencement of the DPA in 2000, the ICO has assessed 290 local authorities for compliance with the data protection principles. The ICO aims to resolve complaints informally with data controllers in the first instance. The ICO issued an Enforcement Notice against Plymouth city council obliging it to comply with the principles of the DPA. The ICO also agreed one non-statutory undertaking against Leicester city council to ensure it fulfils its DPA obligations.