Answer capsule
The ICO says its AI guidance is under review after the Data (Use and Access) Act. Executive-coaching buyers should date the authority, map actual data handling, and contract for change.
What the source establishes
- The ICO's artificial-intelligence page states that its guidance is under review because of changes made by the Data (Use and Access) Act and may be subject to change.
- The ICO says the guidance is suitable for businesses in the public, private, and third sectors.
- The page links detailed guidance on applying UK GDPR principles to AI and on explaining decisions delivered or assisted by AI to affected individuals.
- The page also links an AI and data-protection risk toolkit and a data-analytics toolkit; their availability does not establish compliance or appropriate handling by a particular coach.
Date the authority in the engagement record
A buyer should record the ICO page, review date, jurisdiction considered, and guidance version relied upon. The visible under-review notice means an old privacy questionnaire or coaching agreement should not be represented as aligned with an unchanging authority. Assign an owner to monitor the ICO's update plan and reopen the engagement terms when the governing source, coach's technology, client population, or data flow changes. That is evidence hygiene, not a legal conclusion.
Map what the named coach actually does with AI
Ask whether AI is used for intake, research, preparation, recording, transcription, notes, summaries, exercises, roleplay, follow-up, measurement, or client-facing conversation. For each use, identify the provider, account, information entered, purpose, retention, access, reviewer, output recipient, deletion path, and fallback. A human-led engagement can still expose protected strategy, personal context, employee information, or board material through an undisclosed tool.
Put explanation and correction into the client path
The client should be able to understand when AI materially assisted the service, inspect or correct important information where applicable, object or choose an alternative, and reach the named coach. Test the path before sensitive work begins. A privacy notice on a provider website does not show what the coach configured, what the sponsor receives, or whether a client can continue without the tool. Preserve the actual explanation and decision, not only a link.
Contract for a changing source and service
Define permitted technology uses, prohibited information, confidentiality, sponsor boundaries, records, subprocessors, incident notice, data return or deletion, and the trigger for renewed consent. Separate ICO guidance from the coach's promises and observed practice. The page's under-review status does not make existing duties disappear, and it does not tell this publication how a particular engagement should be treated. Qualified review must apply current law and facts.
Turn this source into a reviewable decision
For Executive AI Coaching, use this briefing as a dated decision record rather than a substitute for the source. Preserve UK Information Commissioner's Office, the exact URL, the July 25, 2026 review date, the supported facts above, the editorial interpretation, the limitations, and any buyer-specific evidence. Link that record to the decisions most directly affected: Confidentiality and data handling; Current applied AI practice; Coaching method and client agency; Role, conflict, and referral boundaries. State whether the source changes the scope, evidence requirement, control, sequence, or only the language used to describe the decision.
Before action, name the accountable owner, affected population and workflow, exact offering or configuration, source data and rights, human decision point, exception and appeal path, complete cost, expected benefit, failure and stop conditions, retained evidence, and next review date. Keep official facts, provider statements, buyer observations, representative tests, measured outcomes, editorial inferences, and unknowns visibly separate. Reopen the record when the source, offer, model, integration, data, policy, population, responsible person, or measured result changes.
Limitations and unknowns
The ICO page flags guidance under review and links current resources. It does not establish the legal basis, compliance, security, confidentiality, or executive fit of a particular coaching engagement.
Decision test
Ask whether the source changes the decision itself, the evidence required, the implementation sequence, or only the language used to describe an existing capability. Record which claims are directly supported, which are provider statements, which require an independent test, and which remain unknown. A source-linked review should make uncertainty easier to see, not bury it inside a blended score.
Questions to take into review
- Where do files, recordings, transcripts, prompts, and notes go?
- What AI systems and executive workflows has the coach personally used recently?
- How does the engagement develop judgment instead of creating dependency?
- When is the provider coaching, advising, implementing, or referring the client elsewhere?
The publication supports research and executive decision preparation. It does not provide legal, financial, accounting, employment, clinical, cybersecurity, investment, procurement, or implementation advice.