Jurisdiction(s):
United Kingdom
Related legal acts
Key definition
Data protection definition

What does Data protection mean? In legal practice, data protection describes the rules governing how organisations collect, use, share, retain and secure personal data, including employees’ information. In the UK this regime is set by the UK GDPR and the Data Protection Act 2018; in Ireland by the EU GDPR and the Data Protection Act 2018 (Ireland). The label is descriptive; core concepts (personal data, controller, processor, special category data) and obligations are defined in legislation. In employment, the employer is typically the controller and must identify a lawful basis (for example, contract, legal obligation or legitimate interests) and, for special category data,...

Read More Right Arrow

UK GDPR and DPA 2018: practitioner quick reference on controllers, processors, lawful bases, special category data, data subject rights, international transfers and ICO enforcement (DUAA 2025)

Precedents
imgtext

STOP PRESS: This page is being revised to reflect implementation of the Data (Use and Access) Act 2025 (DUAA 2025), which modifies the UK GDPR and the Data protection Act 2018. For additional direction on DUAA 2025’s compliance impact, consult Practice Note: Data (Use and Access) Act 2025—compliance implications. This data protection quick-reference guide outlines the principal elements of data protection law, including the UK General Data Protection Regulation (UK GDPR).

What is the UK GDPR?

The UK General Data Protection Regulation (Assimilated Regulation (EU) 2016/679—UK GDPR) forms the primary framework for data protection in the UK. It is read alongside, and augmented by, the Data Protection Act 2018 (DPA 2018).

Who is the data protection regulator in the UK?

In the UK, the Information Commissioner’s Office (ICO) oversees and enforces compliance with data protection legislation.

What type of information does the UK GDPR regulate?

The UK GDPR does not apply to every kind of information or dataset. Its remit is limited to personal data, which encompasses special category (sensitive) personal data. These expressions are described below.

What is personal data?

‘Personal data’ refers to any information relating to a living individual...

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.
Web page updated on 22/05/2026

Popular documents

When evaluating a general damages claim, the practitioner ought initially to refer to the Judicial College Guidelines (JCG)...

Read More Right Arrow

This Practice Note This Practice Note reviews mechanisms used in settling litigation. A Tomlin order consists of a consent order paired with a schedule. It operates to stay proceedings on terms that have been agreed. The provisions contained in the schedule may remain confidential. This Practice Note describes the scope of confidentiality attaching to the schedule and sets out how it differs from a standard consent order. Sample wording for a Tomlin order is included, alongside links to precedents, as well as guidance on court approval. It also addresses varying, setting aside and enforcing a Tomlin order, including the considerations the court will take into account when handling applications for each. Further guidance is provided on interpreting and applying the relevant provisions of the CPR; however, some courts and divisions impose very specific requirements for both drafting and approval, and for approaching the schedule and confidentiality issues. Accordingly, you must consider the particular rules and court guide provisions in the forum where your claim is proceeding when drawing up the Tomlin order...

Read More Right Arrow

Date [ date ] Parties [ name of Landlord ] [ of OR incorporated in England and Wales (company registration number [ number ]) with its registered office at ] [ address ] (Landlord) [ name of Tenant ] [ of OR incorporated in England and Wales (company registration number [ number ]) with its registered office at ] [ address ] (Tenant) [ [ name of Guarantor ] [ of OR incorporated in England and Wales (company registration number [ number ]) with its registered office at ] [ address ] (Guarantor) ] [ [ name of Mortgagee ] [ of OR incorporated in England and Wales (company registration number [ number ]) with its registered office at ] [ address ] (Mortgagee) ] Definitions Within this Deed, the terms below shall be interpreted as follows: [ Annual Rent • the annual sum reserved under the Lease; ] [ Insurance Rent • the Tenant’s share of the Landlord’s costs of insuring the Property (as set out in the Lease); ] Lease • the lease of the Property dated [ date ], entered into between (1) [ the Landlord OR [ name ...

Read More Right Arrow

I, [ name ], of [ address ], solemnly and sincerely state that: [ Matters to be verified, set out in numbered paragraphs ] I make this solemn statement in good conscience, believing it to be true, and pursuant to the provisions of the Statutory Declarations Act 1835. DECLARED at [ details ] this [ day ] day of [ month and year ] Before me ................................................................................ [ signature of the person before whom the declaration is made ] A [ commissioner for oaths OR [ solicitor OR [ insert other qualification ] ] authorised to administer oaths ]...

Read More Right Arrow