The ICO prepares guidance notes that show how the Information Commissioner interprets and applies the PATI Act. They explain the ICO’s approach when reviewing decisions by public authorities. The guidance notes are not legally binding, though, as each case depends on its own facts.

Check that you are using each guidance’s updated version, as the ICO amends them from time to time.

ICO Interim Guidance - Continuity of PATI Processes Following September 2023 Cyber Security Incident
Information Commissioner's Reviews: A guide for applicants and third parties
Information Commissioner's Reviews: A guide for public authorities
Guidelines for Public Authorities: Written submissions for Sections 57(3) investigations