The ICO exists to empower you through information.

Latest updates

19 May 2023 - we have broken the Guide to the UK GDPR down into smaller guides. All the content stays the same.


These three modules look at the principles which underpin the UK’s data protection laws. Understanding the principles will help you take the right steps to make sure you’re handling people’s data correctly.

Principles (Part 1) – Lawful processing

Principles (Part 2) – Purpose limitation, data minimisation, accuracy and storage limitation

Module 7: Principles (Part 3) – Security, accountability and governance

Help us improve our website