The UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.

This section of our Guide to Data Protection introduces some basic data protection concepts and explains how the Data Protection Act 2018 (DPA 2018) works.

It will help you understand the legal framework. It does not contain guidance on how to comply in practice – that is for the other sections of this guide - but it will help you identify which sections of the guide to read.

If you already know which part of the DPA 2018 applies to you, you can go straight to the relevant section of the guide for practical guidance on how to comply. For most organisations, this will be the Guide to the UK GDPR.