Michael Murray
Head of Regulatory Policy, Regulatory Policy Projects, Information Commissioner's Office
Michael Murray is Head of Regulatory Policy at the Information Commissioner’s Office (ICO), the United Kingdom’s data protection regulator. Michael leads on policy development related to children’s privacy. This includes work on codes of practice including the children’s code and the education data code. Michael’s team also supports children’s privacy engagement with online and digital services, other regulators and civil society organisations in the UK and internationally. His team leads on the development of age assurance policy at the ICO. Michael is a member of UNICEF's Expert Advisory Group on the Best Interest of the Child.
Michael has extensive experience in the non-profit and government sectors working in senior roles in the legal advice, charity and grants sectors prior to joining the ICO.
Being curious but cautious (AI and new technologies)
1 Workshop series two
Mind the gap: Vendor due diligence and reasonable assurance in a complex digital world
From data protection to the DfE’s generative AI product safety standards, expectations on trusts when procuring digital tools are increasingly complex and consequential. Yet many still lack clear frameworks to assess vendors and scrutinise claims. This session brings together an edtech provider, a trust with a robust procurement approach, and the ICO to explore how to procure with confidence, protect communities, and turn due diligence into strategic advantage.