The ICO exists to empower you through information.

Latest updates

19 May 2023 - we have broken the Guide to the UK GDPR down into smaller guides. All the content stays the same.

Right to be informed

Individuals have the right to be informed about the collection and use of their personal data.

Right of access

Individuals have the right to access and receive a copy of their personal data, and other supplementary information.

Right to rectification

The UK GDPR includes a right for individuals to have inaccurate personal data rectified, or completed if it is incomplete.

Right to erasure

The UK GDPR introduces a right for individuals to have personal data erased.

Right to restrict processing

Individuals have the right to request the restriction or suppression of their personal data.

Right to data portability

The right to data portability allows individuals to obtain and reuse their personal data for their own purposes across different services.

Right to object

The UK GDPR gives individuals the right to object to the processing of their personal data in certain circumstances.

Rights related to automated decision making including profiling

The UK GDPR has provisions on:

  • automated individual decision-making (making a decision solely by automated means without any human involvement); and
  • profiling (automated processing of personal data to evaluate certain things about an individual). Profiling can be part of an automated decision-making process.