UK Data Protection Act 2018
The UK Data Protection Act 2018 supplements the UK GDPR (retained EU law) and implements the Law Enforcement Directive provisions. It sets out the framework for data protection in the UK including the role and powers of the Information Commissioner's Office (ICO), processing conditions for law enforcement and intelligence services, and UK-specific derogations.
Domains
Law Enforcement Processing
General Processing
UK Data Protection Act 2018: Data Security
UK Data Protection Act 2018: Data Subject Rights
UK Data Protection Act 2018: Data Collection & Consent
Frequently Asked Questions
Map UK Data Protection Act 2018 to any other framework
Use our AI-powered compliance platform to find control overlaps, gaps, and build remediation plans in seconds.