The UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.

Read the Privacy and Electronic Communications Regulations in full:

These regulations were amended in 2004, 2011, 2015, 2016 and 2018. The changes are set out in:

European Commission Regulation 611/2013 sets out more detailed rules on notification of security breaches.