The FCA  and the ICO (Information Commissioners Office) issued a joint statement on the 27th March 2026 outlining regulatory expectations for firms handling vulnerability-related data. 

The statement supports firms in delivering good outcomes for customers in vulnerable circumstances under the Consumer Duty, while maintaining confidence in the lawful, fair and responsible use of personal data. It emphasises the importance of data sharing, robust governance and clear processes to ensure both effective customer support and compliance with data protection requirements.

Read the full statement here…