United Kingdom
UK GDPR
The UK GDPR is the United Kingdom's version of the GDPR, retained in domestic law alongside the Data Protection Act 2018. It mirrors the EU regime closely while being enforced by the ICO under UK jurisdiction.
6 articles
Principles relating to processing of personal data
Personal data shall be processed lawfully, fairly and in a transparent manner (UK GDPR mirrors EU GDPR Art. 5).
Lawfulness of processing
Processing shall be lawful only if at least one legal basis applies (UK GDPR mirrors EU GDPR Art. 6).
Automated individual decision-making, including profiling
The data subject shall have the right not to be subject to a decision based solely on automated processing (UK GDPR mirrors EU GDPR Art. 22).
Data protection by design and by default
The controller shall implement appropriate technical and organisational measures to implement data protection principles (UK GDPR mirrors EU GDPR Art. 25).
Data protection impact assessment
Where processing is likely to result in a high risk, the controller shall carry out a DPIA (UK GDPR mirrors EU GDPR Art. 35).
General conditions for imposing administrative fines
Administrative fines up to GBP 17.5 million or 4% of global annual turnover (UK GDPR mirrors EU GDPR Art. 83).
Turn UK GDPR into tracked tasks
eurocompliant maps these obligations to checklists and evidence, so you can prove compliance instead of re-reading the text.
Start free trial