The UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.

This section of our Guide to Data Protection contains guidance on key themes and topics, explaining how the law applies in a specific context. It is for data protection officers and others who have day-to-day responsibility for data protection.

It covers the Data Protection Act 2018 (DPA 2018), and the General Data Protection Regulation (UK GDPR) as it applies in the UK.

We have published guidance on children’s data, and the Age Appropriate Design Code came into force on 02 September 2020. We are currently developing guidance or statutory codes of practice on a number of other key themes, including marketing, political campaigning, data sharing, journalism, national security, and various technologies. This section will expand over time as our work develops.

Each page summarises the key points you need to know, answers frequently asked questions, and contains practical checklists to help you comply.

Where relevant, we also link to statutory codes of practice, detailed guidance and other resources.