Regulations library · United Kingdom
UK GDPR
UK GDPR and Data Protection Act 2018
In force United Kingdom privacy consumer rights transfers
The UK's version of the GDPR after Brexit, now diverging in places through the Data (Use and Access) Act 2025.
At a glance
- Who it applies to
- Organizations established in the UK, and those outside it offering goods or services to or monitoring people in the UK.
- Who enforces it
- Information Commissioner's Office
- When
- In effect since 1 January 2021. The Data (Use and Access) Act 2025 received Royal Assent on 19 June 2025 and is being brought into force in stages.
A practical guide to this law, with scenarios and flashcards, is being written. The summary above is the reference entry.
Recent developments
Nothing reported yet. Regulatory Watch lists new rules, enforcement and court decisions as they arrive.
Sources
Primary sources are being added to this entry.
Dates and status are from the association's inventory and are being checked against primary sources. This page explains the law for practitioners; it is not legal advice.