The ICO exists to empower you through information.

Data protection principles - training videos

The Data (Use and Access) Act 2026 got Royal Assent on 19 June 2026. All the provisions affecting data protection law and the Privacy and Electronic Regulations Communications are now in force. The Department for Science and Innovation (DSIT) has set out the commencement plans. You can find more details on the Gov.uk website.

Latest updates

19 May 2023 - we have broken the Guide to the UK GDPR down into smaller guides. All the content stays the same.

These three modules look at the principles which underpin the UK’s data protection laws. Understanding the principles will help you take the right steps to make sure you’re handling people’s data correctly.

Principles (Part 1) – Lawful processing

Principles (Part 2) – Purpose limitation, data minimisation, accuracy and storage limitation

Module 7: Principles (Part 3) – Security, accountability and governance

Help us improve our website

Was this page helpful? (optional)

Yes No

Please tell us more about your experience. (optional)