This section of our Guide to Data Protection contains guidance on key themes and topics, explaining how the law applies in a specific context. It is for data protection officers and others who have day-to-day responsibility for data protection.

It covers the Data Protection Act 2018 (DPA 2018), and the General Data Protection Regulation (GDPR) as it applies in the UK.

We are currently developing guidance or statutory codes of practice on a number of key themes, including children's data, age-appropriate design, marketing, political campaigning, data sharing, journalism, national security, and various technologies. This section will expand over time as our work develops.

Each page summarises the key points you need to know, answers frequently asked questions, and contains practical checklists to help you comply.

Where relevant, we also link to statutory codes of practice, detailed guidance and other resources, including European guidance published by the European Data Protection Board (EDPB).