Information Commission Non-Executive Members (7 Roles)

About the Information Commission

The Information Commissioner’s Office (ICO) is the UK’s independent supervisory authority with responsibility for monitoring and enforcing the application of data protection legislation in the UK. The ICO is undergoing an exciting transformation. The Data (Use and Access) Act 2025 will modernise the ICO’s governance framework to ensure it is fit for purpose, suitable to its role and remit, and relevant to the rapidly evolving regulatory landscape. The Act will replace the ICO’s governance model with a “body corporate” structure, called the Information Commission, governed by an independent board made up of non-executive members (including the Chair), alongside executive board members, including a Chief Executive Officer. The new model will spread the responsibilities of the Information Commissioner across a greater number of people, increasing the diversity and resilience of the regulator.

Appointment description

Candidates will provide strategic direction for the new Information Commission and oversee the effective management of the organisation, leveraging their extensive experience and skills to shape the direction and governance of the new Information Commission. This will include driving the Information Commission’s development, ensuring that it is ahead of emerging risks and opportunities and is able to take relevant, focused action on a wide range of data protection and transparency matters. Candidates must be credible individuals who can bring an independent perspective, integrity, challenge and acumen to setting and delivering the Information Commission’s strategy.

Responsibilities

• Strategic clarity: Enable the Information Commission to be a strategic and successful regulator; setting this vision and ensuring all activities contribute towards it; supporting innovation and growth by promoting public trust in the data protection system; anticipating the impact of new technology as well as economic and political developments.
• Regulatory oversight: Keep the Information Commission at the forefront of regulatory best practice, ensuring that high standards of data protection are implemented effectively in the UK; ensure that it is ahead of emerging risks and opportunities and is in position to take relevant, focused action on a wide range of data protection and transparency matters; providing scrutiny to executive management over the fulfilment of all of the Information Commission’s duties and statutory responsibilities.
• Talent management: Ensure the Information Commission has the right people to deliver current and future needs; value diversity and inclusion in its workforce and demonstrate fair treatment of its employees and stakeholders in all aspects of its activities.
• Performance monitoring: Support and challenge executives to drive performance against agreed goals and targets; monitor and steer performance against key strategic initiatives to enable sound financial management; support the Information Commission in its risk-based approach to enforcement with a focus on the most serious threats to public trust; encourage the ICO to devote resources to supporting and providing regulatory certainty to organisations, while understanding and confronting serious infringements; delivery of operational performance, service, improvements, efficiency and value for money; enabling public and Parliamentary confidence in the work of the Information Commission.

Regulation of appointment

This post is regulated by the Commissioner for Public Appointments. For more information, please refer to the Commissioner’s website.

Criteria

Essential criteria

• A strategic and analytical mindset with excellent leading, influencing and communication skills, combined with an ability to offer constructive challenges to senior leaders. (lead criteria)
• A track record of successful strategic leadership, with evidence of strategic planning and delivery of high-quality outcomes.
• Demonstrable senior level experience in overseeing significant change and transformation programmes from inception to completion, including the development of clear strategies to aid performance in a fast paced and evolving environment.
• Strong ability and experience to scrutinise financial management, performance and risk management of an organisation.
• Excellent communication and relationship management skills, and the ability to represent the ICO capably to a wide range of stakeholder groups.

Please note: If we receive a high volume of applications, the panel will assess candidates against the lead criteria only as indicated above.

Desirable Criteria

• Familiarity with the legislation that the ICO oversees, including data protection and freedom of information.
• An awareness of the wider domestic and international landscape in which the ICO operates.
• Experience in promoting economic growth and assessing the impact of regulatory intervention on the economy, with an understanding of how data policy contributes to the government’s economic agenda.
• Senior experience working or consulting in the regulatory landscape, particularly risk-based regimes or establishing new regulatory approaches.
• Experience managing change programmes, or leading fast-moving organisations where innovation is commonplace and markets are constantly adapting.
• Experience in the creation/establishment of new statutory boards.
• Acute business and commercial acumen, including an understanding of the challenges facing businesses, from big tech firms to SMEs and other stakeholders, as well as providing insight into the risks and opportunities of data driven innovation and growth.
• Experience working in large scale international organisations with a tech/digital focus.
• An understanding of security and privacy considerations.