-
Due to the Data (Use and Access) Act coming into law on 19 June 2025, this guidance is under review and may be subject to change. The Plans for new and updated guidance page will tell you about which guidance will be updated and when this will happen.
Does data protection law apply to my business?
-
1. Do you collect, use, hold or do anything else with the personal information of employees, customers or both?
Yes
-
2. How many employees do you have in your organisation?
1-10
Yes - you need to comply with the law
As a small organisation that handles personal data you need to comply with the law.
The self assessment checklist below has been created with small business owners and sole traders in mind. It will help you improve your understanding of data protection and find out what you need to do to make sure you are keeping people’s personal data secure. Once you have completed the checklist a short report will be created suggesting some practical actions you can take and providing links to additional guidance you could read that will help you improve your data protection knowledge and compliance.