Getting started with data protection – What you need to know
-
The Data (Use and Access) Act 2025 got Royal Assent on 19 June 2025. All the provisions affecting data protection law and the Privacy and Electronic Regulations Communications are now in force. The Department for Science and Innovation (DSIT) has set out the commencement plans. You can find more details on the Gov.uk website.

Starting your own business can be exciting – but there’s a lot to think about. If you’re getting started as a new business, use these tips and guides to help you comply with data protection laws. We’re here to help you every step of the way.
Does data protection law apply to my business?
It’s likely your business holds or uses personal information of some description. This could relate to your customers, staff or suppliers. But if you’re unsure if data protection law applies to the work you do, you can take our short quiz.
How do I comply?
Data protection compliance is a journey, not a destination. Knowing what personal information you have will set you on the right path. Read our beginner’s guide to help you get started.
Data protection fee: do I need to pay?
Unless you’re exempt, it’s the law to pay the data protection fee. Most companies will only pay £40 a year. If you’re not sure if you’re exempt, you can take our online self-assessment.
We’re here to help
Our advice for small organisations hub offers simple and easy-to-read guidance on data protection for small- to medium-sized enterprises (SMEs), small charities, sole traders, and start-ups.
If you’re a large organisation, please refer to our in-depth guidance for organisations.