Compliance with the spirit of these key principles is therefore a fundamental building block for good data protection practice. It is also key to your compliance with the detailed provisions of …

Security (data protection and cyber) The security principles, personal data breaches, and guidance on encryption, ransomware and passwords.

The EU GDPR still applies to this processing, but the way you interact with European data protection authorities has changed. This guidance covers the key issues you need to consider …

Data protection principles - guidance and resources Due to the Data (Use and Access) Act coming into law on 19 June 2025, this guidance is under review and may be subject to change.

This is a glossary of key data protection principles, definitions and terms that you need to know. It includes the eight individual rights that people have over their information.

These three modules look at the principles that underpin the UK’s data protection laws. Understanding the principles will help you take the right steps to make sure you’re handling …

Compliance with the spirit of these key principles is therefore a fundamental building block for good data protection practice. It is also key to your compliance with the detailed provisions of …

Read the full text of the UK General Data Protection Regulation: UK General Data Protection Regulation

You must ensure that you have appropriate security measures in place to protect the personal data you hold. This is the ‘integrity and confidentiality’ principle of the GDPR – also known as …

You must identify valid grounds under the UK GDPR (known as a ‘lawful basis’) for collecting and using personal data. You must ensure that you do not do anything with the data in breach of …