ICO approves SSAIB as accredited monitoring body under UK GDPR

Granted by Emily Keaney (Deputy Commissioner of Regulatory Policy at the ICO), the accreditation authorises the SSAIB to monitor compliance with the Association of British Investigators Ltd (ABI) UK GDPR Code of Conduct for Investigative and Litigation Support Services. For clarity, the accreditation applies solely to this specific Code of Conduct.

Under Article 41 of the UK GDPR, approved Codes of Conduct for private or non-public authorities must designate an independent monitoring body to oversee compliance. Monitoring bodies must demonstrate appropriate expertise, independence and robust governance arrangements, and must also be formally accredited by the ICO.

The SSAIB is “very proud” to become the first organisation to be accredited with monitoring body status by the ICO. This is reported as being a “significant milestone” that reflects the organisation’s long‑standing commitment to excellence within the security and fire sectors.

Successfully completing the ICO’s rigorous accreditation process, the SSAIB has demonstrated “industry‑leading levels” of impartiality, competence and professionalism, reinforcing the organisation’s reputation as a trusted authority in the domain of third party certification.

Building on this significant achievement, the SSAIB is now preparing to accept its first applications from May 2026.

The ABI previously secured approval of its UK GDPR Code of Conduct for Investigative and Litigation Support Services under Article 40 of the UK GDPR. The SSAIB’s accreditation ensures independent oversight of organisations operating under the Code.

Governance and expertise

Commenting on the accreditation, Paul Phillips (CEO of the SSAIB) said: “We are extremely delighted to receive the first ICO accreditation as the monitoring body for the ABI UK GDPR Code of Conduct. This approval reflects the strength of our governance, independence and expertise. We look forward to working closely with the ABI and Code members to uphold the highest standards of data protection and accountability within investigative and litigation support services.”

Emily Keaney responded: “Achieving accreditation is a rigorous process. The SSAIB’s success in this regard reflects its strong governance, independence and specialist expertise. Now that the SSAIB is the UK’s first accredited Code monitoring body, this will enable the ABI Code to move towards formal operation. That process offers those organisations involved in investigative and litigation support services a clear and practical route through which to strengthen data protection, demonstrate accountability and build public trust.”

Keaney added: “This is an important milestone for data protection in the UK. We hope this achievement will encourage more sectors to develop their own Codes of Conduct, embedding the principles of the UK data protection regime into everyday practice and driving greater consistency, stronger accountability and higher standards across the industry.”

Tony Imossi, spokesperson for the ABI and author of the ABI UK GDPR Code of Conduct for Investigative and Litigation Support Services, explained: “The SSAIB’s accreditation by the ICO as the UK’s first approved monitoring body is a major milestone for the roll-out of UK GDPR Codes of Conduct and for the investigations sector. It marks a significant step forward for the ABI Code.”

Imossi went on to comment: “This development delivers the independent oversight required under Article 41 and affords clients and members of the public greater confidence that organisations operating under the Code are meeting consistently high standards of data protection, professionalism and accountability. We look forward to working closely with the SSAIB as the Code moves into full operation and organisations begin applying from May 2026.”

*Further information is available online at www.ssaib.org