The organisation responsible for enforcing data protection law in the UK is the Information Commissioner's Office (ICO). The ICO is the UK's independent regulatory authority overseeing compliance with data protection laws such as the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR). It provides guidance, investigates complaints and data breaches, and has enforcement powers including issuing fines for breaches of data protection laws. The ICO also promotes good data handling practices and operates independently from government interference while answering to Parliament.