New ICO Guidance on sharing personal data in fraud investigation provides important directions for organisations on how to lawfully share personal data under UK GDPR

The ICO Guidance aligns with UK Govt Guidance measures that encourages voluntary information sharing for preventing economic crime, as outlined in the ECCT Act 2023. Key takeaways: Data Protection Impact Assessments (DPIA) Required – to assess and mitigate risks associated with sharing personal data for fraud investigations. Clear Data-Sharing Agreements – to ensure there is a lawful basis for sharing personal data under GDPR. Provide Practical Tools, Templates & Case Studies – to assist organisations in staying compliant when sharing data. Supporting Cross-Sector Collaboration – to improve the overall impact of data-sharing efforts…