Guide to Intelligence Services Processing
-
Due to the Data (Use and Access) Act coming into law on 19 June 2025, this guidance is under review and may be subject to change. The Plans for new and updated guidance page will tell you about which guidance will be updated and when this will happen.
The Guide to Intelligence Services Processing is part of our Guide to Data Protection. It is for those who have day-to-day responsibility for data protection in the intelligence services.
It explains the data protection regime that applies to the intelligence services. It covers Part 4 of the Data Protection Act 2018 (DPA), which is separate from the UK GDPR regime.
It explains each of the data protection principles, rights, obligations and exemptions. It summarises the key points you need to know and answers frequently asked questions.
Where relevant, this guide also links to more detailed guidance and other resources, including ICO guidance.
This section only covers processing by the intelligence services. If you are not one of the intelligence services, you need to read our Guide to the UK GDPR or Guide to Law Enforcement Processing.