The draft guidance is a requirement of the Data Protection Act 2018 and explains how the regulator will use its powers when issuing: information notices; assessment notices; enforcement notices and penalty notices.

Other regulatory activity is covered in the ICO’s regulatory action policy, which is currently under review.

Elizabeth Denham, information commissioner, said: “The primary role of my office is to protect the rights and freedoms of individuals in the digital age, and this draft guidance explains how my office will achieve this.

“It sets out our proportionate approach to regulatory action, yet details the robust action we will take against those that flout the law.”

Written responses can be submitted by any interested parties, including data controllers and members of the public. The consultation is open until 5pm on Thursday 12 November.