Recent months have seen the media awash with warnings of the heightened data breach risks as many of us adapt to working from home. What an opportune moment then for the ICO to publish for consultation its draft guidance on how it will regulate and enforce data privacy laws in the UK post-Brexit, including issuing penalty notices for such breaches. Once finalised, the guidance will complement the ICO’s Regulatory Action Policy, setting out the watchdog’s  approach to the use of its regulatory tool kit and the punitive power it wields.